last executing test programs: 16.395603959s ago: executing program 2 (id=2796): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000900), &(0x7f0000000000)=0xfe47) 16.103717701s ago: executing program 2 (id=2798): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x103040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x2, 0x1}}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000020300000000000000000000050000002509170200000000050108000055dd62efa8982863e96a56bbdab8b1fb71f2b8893b23bec4a18edfbcdbf15997cc1dbe1b459a651f36ab4e98eaa0b67245ec376a51e873909526740c1a8d07e77eb56b2cc73617c7cea66240c9169a6c84529a72f5018410039ca1a256d855a7479f3c191cb48fd785b8d10be101382eab76f0ce11167d015be181838892e9f00c70bc31a97f461c3d109638aaf48e4dc80ec667a6ba2b7673e210c39aaa"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) 12.615678329s ago: executing program 0 (id=2811): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file1\x00'}) getsockopt$inet6_mreq(r5, 0x29, 0x14, 0x0, &(0x7f00000001c0)) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001f80)=ANY=[@ANYBLOB="14140000210001000000000004000000e0000001000000000000000000000000fe8800000000000000007cae190d02b862540000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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", @ANYRES32, @ANYBLOB="02000000"], 0x1414}}, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0xa2, 0x20, 0xfc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "717e414ba6a6"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x3, 0x64b, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xa2, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0xfe, 0x3e}}}}}}}]}}, 0xfffffffffffffffc) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 12.434792965s ago: executing program 4 (id=2813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)}], 0x2}, 0x4) 11.895872852s ago: executing program 4 (id=2816): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x20000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x18080}, [@IFLA_LINKMODE={0x0, 0x11, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r5 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xffff}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) socket$isdn(0x22, 0x3, 0x3) 11.576535587s ago: executing program 2 (id=2818): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x66, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x4000) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) connect$rose(r0, &(0x7f0000002a00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) 10.239577888s ago: executing program 2 (id=2820): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(0x0, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a0000000100", 0x6) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x7}}, 0x10) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb50a245d5cde0080045000028000000000002907800000000ffffffff11e0917800000000008100010000000000000000"], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x94eb7bd00144ed03, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000040)={0x0, @rand_addr, 0x0, 0x0, 'wrr\x00'}, 0x2c) r6 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8, @ANYRESHEX=r6, @ANYRES32=r2, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYBLOB="9f92089203f4d121ae4c45a0b2190c88cf5213d6743e858f8af1ee82ef6c6587ff2169da1204af5b077d0dea2adc0a4034d7eedbeeaf9cca4d125e230bb0dc4f6992d59082567785d26f2d9ceced5d2d3a7467ebbd65d8ed850aa50c621b2b5c4cd4a6a4a131026e78f96f02072b14230ab9c2c7faed60"], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x800) unshare(0x6a040000) unshare(0x44000000) syz_emit_ethernet(0x0, 0x0, 0x0) close(r3) 9.816388538s ago: executing program 1 (id=2823): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 9.225136403s ago: executing program 0 (id=2825): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(0x0, 0x80, 0x4008, 0x0, 0x0, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x8, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfc, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8, 0x6}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000000000f2000000000080000000000000", 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x90) unshare(0x28040600) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'vxcan1\x00', @remote}) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900"/40], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 9.218777794s ago: executing program 1 (id=2826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)='C\a', 0x2}], 0x2}, 0x4) 6.815658887s ago: executing program 4 (id=2829): io_uring_setup(0x7554, 0xfffffffffffffffc) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000024c0)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x94) 6.710735542s ago: executing program 0 (id=2830): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x66, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x4000) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) connect$rose(r0, &(0x7f0000002a00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) 5.319875631s ago: executing program 3 (id=2831): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000000)=0x84) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000440)={r3}, &(0x7f0000002680)=0x8) 5.148217545s ago: executing program 0 (id=2832): socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x77f, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) close(0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xd}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000020c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x84, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x231c, 0xc, 0xa, 0x67b1d55a65b55959, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x22c8, 0x3, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x72, 0x1, "776a3baa925026db9d90b28b2c56c14d82c068f60b235d9e88a6c2e49c9aeb5ace7d374026148ad18765bc32b456060cef4c32c136a09116c8c4ec49dc3dfd7875f130b8c62d11b716ebb06877e70071d3963c17263de5a273beeba30d22699306ea1208fa9f4ef632c3cfe4f2d5"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xff, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf1}]}, {0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}, {0x2088, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, @NFTA_SET_ELEM_KEY_END={0x1fc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "c766"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xf04, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x90, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3f, 0x1, "2c5ae1fc8358510b5c7a32af81c8e2a8bbdb4b8a981403b2b14f156f85787d7f10919c814864b3c3728c36ace012249abd974a4ad2281a8cf4f56c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5666081b}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "29ff7597c256997520463d21b3539f88f60a5a93813513db2fb422c893be22201e"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x23cc}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_ethernet(0x6c, &(0x7f00000003c0)=ANY=[@ANYBLOB="fffffffffffbaaaaaaaaaa0008004503005e00000000002f907800000000e00000012480810000020000b09a7f4910000800000f000086dd080088be00000000100000000100000000000000080022eb00000001200000000200000000000000fffd000008006558000000001131158bae"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="070000000000fddbdf790800000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="04050000", @ANYRES16=r5, @ANYBLOB="63bb27bd7000fbdbdf253b0000000400870008005700f21200000400cd001e003300a0000400ffffffffffff080211000000dc0555916aa586002500000008005700cb100000ab04330020acd0000802110000010802110000005050505050508600707303014000010008021100000000000108b018ecc88c010b362d1a010016ffffff7f00230000ff000b001d0000000600ff03000002ddeb2839977053092600157d5749058c79eea61098d700038acf201f8d0886642f7cc04fe7c542d7618da9c45adbf9a43646065be25dc27db1925f894bed1d22fcb1d3c51f0a4043e83e10c420694485ef823cf2b8148cb6e2df15619240847dddbce0055e7d0bc4cd9811c80fa135862837a268aa24e8bfd7a6600a97e09f07770b43a2103b79f1bc75f335ea87aca3da6ac472d2491a5a11b4dc03759ea5fd2d8750363669bb33733f2037c1f4aa165d04fbb1b07a633dea92030dc647d3ffd149479b43da11cf3a2619e10a5d33c0b42696ab702c13ad1bd5ce0cb0029075416ff03ef9a6d32d699b1350e4dd843976ae2f2003e223c70947d3c6f14029ab10e70d7bdfa489b3048206154e3e085d0896ee0861950515ca76fd0ec23a69bc1e20a2ec3147d27c87478d5a21cec6942001c79448346bb6e6f297f28f6af79f3f1798598e256e0cb28769ed404595150fad984176a6ecd98f212af80b8fe3345d569b626c763c6b85da0aa5b4caca48961e74ddaddc32456987cf5ea316a934e15be1f318f39d27c6694aba7e7098a392c91c0bd0fdda8d5ebea958cb4f545c3684e76164637d1c6e1a1e05c54c6c616d54133cbe4d9d194f02e70909f5087ba0562515281cbfc07ceb7a83067fb5886fcb8f38408f1b8828ff350ff91f4f3cfb64d1fd4f258b7e2b2b42f4375237ab1502ed2a243ae74b4c6ec80fb61076873349f9d4fea0fb4fbfe9ed3fe68425576a0ad553755887516f61fc12fdb63a8493cadda649b41bb260bffee2ff204723a1f458e7c6d030d4664021ec6550656af714ab486568cf60fd462c9c5b1f0cea704e0584d48ea70cd6bfb611ef063d494509947fccedee0c7974fe9709d2da6eef73626f000b8ca467132c18f94709e5063907e1f76adc0ac463c903da5db090c3b9a371c986fdb0125767dc7b226b69b1d35c4eb83ceb527f28eedebad1904eef9973174743927d015aa283a2084c66ccd21e008ce5afe15fa4dd4e2daae44b7b0dd500c220cb13cb198b7d8af92b80070829fd040fbd1286e1b3d48a14afceaeeb5861d96782a1c9e7f264d988e14c6ba95d987908820d63732513147139e3c45d11e833fe5c8631c0dd96d810ad2225fdbe6ff89d2c52a69e9a959663ec1a3bae675427f37c5a20ba35ec885319fe89e1f3ad1a48d1794e6e7297dd5d74fc53cdc0a3197448e951de117d7b0d679e529cfdf18bcf04ba287a4928475d154a8bb7d11218282cb15b0fb083cd1d9d23b5246dcc3827c02bd668fa33d14e36b1be47333a660e06c53f93017227898a16ce4a8924211dc2478bd706048a63cd676a52dda5c199972f124fd57d4882a0a78e345ec546ddf5882af7fbb1c90a6a176c682d8eb5c85ef9ec79d1a9afe9d60a3840f4403e3883e625763e37a7a0688ab94f23eed835010146c774874bad6a5799a1abcf841374486c026d9dae5149c875f3d6ae0e488e5ff897c95f2e999066d40b7b9fd611efb9c54b17894872aa3422b4f8f38b68bb8d93e74eb048c3ab191eae879c4b9471b30881051c5dba592076464412843fe62497000c00cd00030007000500"], 0x504}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000090) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'veth1_vlan\x00', 0x2}) 5.004039226s ago: executing program 3 (id=2833): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000004cc0), 0x0, 0x4040040) 4.820523612s ago: executing program 3 (id=2834): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x82000000, 0x4, 0xc2, 0x4f, 0x40, 0x5d, 0x80, 0x1, 0x3, 0x44, 0x8, 0x3, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x87, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0x6, 0x3, 0x15, 0x0, 0x4, 0x4}], 0x9}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0x3ff, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.548953321s ago: executing program 4 (id=2835): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) 4.479961271s ago: executing program 3 (id=2836): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x3, 0x2, {0x3, 0xf0, 0x3}, {0x1, 0x0, 0x1}, 0x0, 0x1}], 0x20) mknodat$loop(0xffffffffffffffff, 0x0, 0x200, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r3, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd29, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040840}, 0x240000c0) 3.583293619s ago: executing program 4 (id=2837): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 2.309061741s ago: executing program 0 (id=2838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40008005}, 0x0) 2.199965436s ago: executing program 3 (id=2839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20900}, 0x44010) 2.199733726s ago: executing program 1 (id=2840): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f0000000140)) 2.189626547s ago: executing program 4 (id=2841): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fallocate(r0, 0x81, 0x7, 0x5) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8880b870dfff) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x3f3}, {0x6, 0x24, 0x1a, 0x0, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000280)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ptrace$getregset(0x4204, r3, 0x200, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0xed}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.023086051s ago: executing program 0 (id=2842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x14, 0xd, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r4 = openat$tun(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x110, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x11d}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xfffff000) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b55385"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x1}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x7, 0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1, 0x2}}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) setsockopt$inet6_int(r9, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r9, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.928017995s ago: executing program 1 (id=2843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='K5', 0x2}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.848476977s ago: executing program 3 (id=2844): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x0, 0xab, 0x8, &(0x7f0000000180)={0x2a, "247f23e017bb486c5c4b7165a6d6af0b920bf04121f0339400"}}) 1.496243477s ago: executing program 1 (id=2845): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) setsockopt$sock_int(r2, 0x1, 0x13, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000400000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 548.902612ms ago: executing program 2 (id=2846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0xfffffffd, {0xa, 0x0, 0x0, 0x0, 0x40, 0x99}, [@NDA_CACHEINFO={0x14, 0x3, {0x9, 0x0, 0x0, 0x45e14deb}}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x44}}, 0x80) 390.318085ms ago: executing program 1 (id=2847): socket$kcm(0x10, 0x2, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @empty, 0x2000000}, 0x1c) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/80, 0x50}}], 0x1, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x40840, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 2 (id=2848): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.2.903'. [ 253.486843][ T7253] tipc: Enabled bearer , priority 0 [ 253.505442][ T7254] device syzkaller0 entered promiscuous mode [ 253.526965][ T7260] tipc: Resetting bearer [ 253.533838][ T7251] tipc: Resetting bearer [ 253.657837][ T7251] tipc: Disabling bearer [ 253.834918][ T7264] lo speed is unknown, defaulting to 1000 [ 254.601058][ T7274] xt_hashlimit: size too large, truncated to 1048576 [ 254.716650][ T7278] ax25_connect(): syz.4.910 uses autobind, please contact jreuter@yaina.de [ 255.752858][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.759277][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.854540][ T7304] tipc: Enabled bearer , priority 0 [ 258.875364][ T7304] device syzkaller0 entered promiscuous mode [ 258.915581][ T7304] tipc: Resetting bearer [ 258.955221][ T7303] tipc: Resetting bearer [ 259.061517][ T7303] tipc: Disabling bearer [ 260.090123][ T7313] lo speed is unknown, defaulting to 1000 [ 260.871391][ T7313] IPVS: You probably need to specify IP address on multicast interface. [ 260.880148][ T7313] IPVS: Error connecting to the multicast addr [ 260.983790][ T7325] tipc: Enabling of bearer rejected, failed to enable media [ 261.142783][ T7333] netlink: 104 bytes leftover after parsing attributes in process `syz.0.930'. [ 264.077141][ T7370] lo speed is unknown, defaulting to 1000 [ 264.110723][ T7370] IPVS: You probably need to specify IP address on multicast interface. [ 264.119187][ T7370] IPVS: Error connecting to the multicast addr [ 265.107696][ T7387] tipc: Enabling of bearer rejected, failed to enable media [ 265.241998][ T7400] bond0 speed is unknown, defaulting to 1000 [ 265.391021][ T7400] bond0 speed is unknown, defaulting to 1000 [ 265.437843][ T7400] bond0 speed is unknown, defaulting to 1000 [ 265.567390][ T7407] x_tables: duplicate underflow at hook 1 [ 266.373115][ T7417] device syzkaller0 entered promiscuous mode [ 266.577761][ T7400] infiniband syz1: set down [ 266.582610][ T7400] infiniband syz1: added bond0 [ 266.630808][ T4310] bond0 speed is unknown, defaulting to 1000 [ 266.841327][ T7427] device batadv_slave_0 entered promiscuous mode [ 266.908281][ T7400] RDS/IB: syz1: added [ 266.940672][ T7427] device batadv_slave_0 left promiscuous mode [ 267.051087][ T7429] lo speed is unknown, defaulting to 1000 [ 267.058610][ T7429] bond0 speed is unknown, defaulting to 1000 [ 267.151908][ T7400] smc: adding ib device syz1 with port count 1 [ 267.159210][ T7400] smc: ib device syz1 port 1 has pnetid [ 267.198341][ T4310] bond0 speed is unknown, defaulting to 1000 [ 267.211028][ T7400] bond0 speed is unknown, defaulting to 1000 [ 267.689165][ T7445] tipc: Enabling of bearer rejected, failed to enable media [ 267.702352][ T7400] bond0 speed is unknown, defaulting to 1000 [ 268.833141][ T7400] bond0 speed is unknown, defaulting to 1000 [ 268.929963][ T7459] device syzkaller0 entered promiscuous mode [ 269.035156][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 269.058699][ T7463] netlink: 68 bytes leftover after parsing attributes in process `syz.1.966'. [ 269.076808][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 269.096657][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 269.275300][ T7400] bond0 speed is unknown, defaulting to 1000 [ 269.322345][ T7467] device syzkaller0 entered promiscuous mode [ 269.569479][ T7400] bond0 speed is unknown, defaulting to 1000 [ 269.697273][ T7474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.729253][ T7474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.771800][ T7474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.811593][ T7474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.253036][ T7400] bond0 speed is unknown, defaulting to 1000 [ 270.802937][ T7400] bond0 speed is unknown, defaulting to 1000 [ 271.039842][ T7463] lo speed is unknown, defaulting to 1000 [ 271.053875][ T7480] lo speed is unknown, defaulting to 1000 [ 271.957960][ T7492] tipc: Enabling of bearer rejected, failed to enable media [ 272.094820][ T7501] device syzkaller0 entered promiscuous mode [ 272.928178][ T7504] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.168936][ T7521] netlink: 'syz.4.983': attribute type 10 has an invalid length. [ 273.239892][ T7521] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 273.296596][ T33] infiniband syz1: set active [ 273.302783][ T127] bond0 speed is unknown, defaulting to 1000 [ 273.324366][ T127] bond0 speed is unknown, defaulting to 1000 [ 273.340888][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 273.386919][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 273.397501][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 273.441681][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 273.482501][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 273.504150][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 273.514523][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 273.539353][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.558608][ T7522] infiniband syz1: set active [ 273.696777][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.704411][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.797438][ T7522] bond0: (slave netdevsim0): Releasing backup interface [ 274.246040][ T4274] Bluetooth: hci0: command 0x0c1a tx timeout [ 274.551830][ T127] bond0 speed is unknown, defaulting to 1000 [ 274.567184][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.987'. [ 274.567257][ T4381] bond0 speed is unknown, defaulting to 1000 [ 274.625955][ T6438] infiniband syz1: set down [ 274.630982][ T4381] bond0 speed is unknown, defaulting to 1000 [ 274.647698][ T4381] bond0 speed is unknown, defaulting to 1000 [ 274.656035][ T7532] lo speed is unknown, defaulting to 1000 [ 274.684409][ T7532] bond0 speed is unknown, defaulting to 1000 [ 274.684432][ T7533] lo speed is unknown, defaulting to 1000 [ 274.706749][ T7541] tipc: Enabled bearer , priority 0 [ 274.731006][ T7541] device syzkaller0 entered promiscuous mode [ 274.813001][ T7541] tipc: Resetting bearer [ 274.841520][ T7543] device syzkaller0 entered promiscuous mode [ 274.859197][ T7539] tipc: Resetting bearer [ 274.906507][ T7539] tipc: Disabling bearer [ 274.990091][ T7533] bond0 speed is unknown, defaulting to 1000 [ 275.151939][ T7546] tipc: Enabling of bearer rejected, failed to enable media [ 276.075063][ T7561] IPVS: Error connecting to the multicast addr [ 276.361657][ T7560] lo speed is unknown, defaulting to 1000 [ 276.479769][ T7560] bond0 speed is unknown, defaulting to 1000 [ 277.846360][ T7579] netlink: 'syz.4.1000': attribute type 10 has an invalid length. [ 277.997412][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 278.077995][ T7585] loop3: detected capacity change from 0 to 64 [ 278.085346][ T7585] hfs: unable to parse mount options [ 278.349983][ T7579] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 278.709181][ T4269] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.780694][ T4310] bond0 speed is unknown, defaulting to 1000 [ 278.787208][ T7581] device syzkaller0 entered promiscuous mode [ 278.794973][ T6440] infiniband syz1: set active [ 278.800726][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 278.827763][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 278.835242][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 278.886079][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 278.901860][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 278.933339][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 278.961613][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 278.993304][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.011462][ T7586] infiniband syz1: set active [ 279.022806][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.031286][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.081108][ T7586] bond0: (slave netdevsim0): Releasing backup interface [ 279.219353][ T4310] bond0 speed is unknown, defaulting to 1000 [ 279.225503][ T4340] bond0 speed is unknown, defaulting to 1000 [ 279.299629][ T6459] infiniband syz1: set down [ 279.309585][ T127] bond0 speed is unknown, defaulting to 1000 [ 279.324808][ T4381] bond0 speed is unknown, defaulting to 1000 [ 279.373077][ T4381] bond0 speed is unknown, defaulting to 1000 [ 279.924002][ T7605] tipc: Enabling of bearer rejected, failed to enable media [ 281.549961][ T7631] netlink: 'syz.1.1014': attribute type 10 has an invalid length. [ 281.617874][ T7632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.707542][ T7632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.724130][ T7632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.734596][ T7632] device bridge_slave_0 left promiscuous mode [ 281.757760][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.786485][ T7632] device bridge_slave_1 left promiscuous mode [ 281.803097][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.840502][ T7632] bond0: (slave bond_slave_0): Releasing backup interface [ 281.959810][ T7632] bond0: (slave bond_slave_1): Releasing backup interface [ 282.097735][ T7632] team0: Port device team_slave_0 removed [ 282.186719][ T7632] team0: Port device team_slave_1 removed [ 282.207198][ T7632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.225376][ T7632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.249054][ T7632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.268584][ T7632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.292282][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'. [ 282.404998][ T7646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1015'. [ 282.444351][ T7647] lo speed is unknown, defaulting to 1000 [ 282.480408][ T7643] lo speed is unknown, defaulting to 1000 [ 282.488555][ T7647] bond0 speed is unknown, defaulting to 1000 [ 282.837668][ T7675] IPVS: Error connecting to the multicast addr [ 282.849427][ T7673] lo speed is unknown, defaulting to 1000 [ 283.585744][ T7682] tipc: Enabled bearer , priority 0 [ 283.594769][ T7682] device syzkaller0 entered promiscuous mode [ 283.606575][ T7682] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 283.727799][ T7643] bond0 speed is unknown, defaulting to 1000 [ 283.750526][ T7687] tipc: Resetting bearer [ 283.898360][ T7682] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 283.941895][ T7682] batman_adv: batadv0: Adding interface: gretap1 [ 283.959745][ T7682] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.010074][ T7682] batman_adv: batadv0: Interface activated: gretap1 [ 284.025389][ T7673] bond0 speed is unknown, defaulting to 1000 [ 284.417351][ T7681] tipc: Resetting bearer [ 284.482318][ T7681] tipc: Disabling bearer [ 285.909158][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'. [ 286.227261][ T7721] lo speed is unknown, defaulting to 1000 [ 286.341293][ T7721] bond0 speed is unknown, defaulting to 1000 [ 286.423323][ T7728] tipc: Enabling of bearer rejected, failed to enable media [ 287.006600][ T7741] lo speed is unknown, defaulting to 1000 [ 287.066211][ T7741] bond0 speed is unknown, defaulting to 1000 [ 287.260201][ T7746] device syzkaller1 entered promiscuous mode [ 287.932691][ T7764] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1046'. [ 288.231349][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 288.287612][ T7774] lo speed is unknown, defaulting to 1000 [ 288.362598][ T7774] bond0 speed is unknown, defaulting to 1000 [ 288.556321][ T7775] lo speed is unknown, defaulting to 1000 [ 289.011047][ T7775] bond0 speed is unknown, defaulting to 1000 [ 291.026124][ T4271] Bluetooth: hci4: command 0x0405 tx timeout [ 291.479027][ T7827] device syzkaller0 entered promiscuous mode [ 294.734380][ T7889] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1086'. [ 296.845044][ T7918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.150492][ T7918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.266341][ T7918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.289394][ T7918] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 297.732217][ T7932] lo speed is unknown, defaulting to 1000 [ 297.780455][ T7932] bond0 speed is unknown, defaulting to 1000 [ 297.893803][ T7942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1103'. [ 298.200521][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 299.857241][ T7970] netlink: 'syz.3.1111': attribute type 10 has an invalid length. [ 299.943214][ T7970] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 300.143179][ T7975] device syzkaller0 entered promiscuous mode [ 300.259987][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'. [ 300.432850][ T7981] lo speed is unknown, defaulting to 1000 [ 300.467176][ T7981] bond0 speed is unknown, defaulting to 1000 [ 300.473521][ T7982] lo speed is unknown, defaulting to 1000 [ 301.674293][ T7982] bond0 speed is unknown, defaulting to 1000 [ 302.041870][ T8003] device syzkaller0 entered promiscuous mode [ 302.623523][ T8003] sch_fq: defrate 1 ignored. [ 303.456994][ T8016] netlink: 'syz.0.1124': attribute type 10 has an invalid length. [ 303.594241][ T8016] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 304.097048][ T8025] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1127'. [ 306.309585][ T8043] device syzkaller0 entered promiscuous mode [ 306.360427][ T8043] sch_fq: defrate 1 ignored. [ 307.039968][ T8050] netlink: 'syz.4.1136': attribute type 10 has an invalid length. [ 307.171644][ T8050] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 307.196121][ T4340] bond0 speed is unknown, defaulting to 1000 [ 307.197590][ T4365] infiniband syz1: set active [ 307.256217][ T4326] bond0 speed is unknown, defaulting to 1000 [ 307.262432][ T4326] bond0 speed is unknown, defaulting to 1000 [ 307.697280][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1142'. [ 310.327390][ T8089] netlink: 'syz.1.1150': attribute type 10 has an invalid length. [ 310.378545][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 310.398665][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.417997][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.485248][ T8093] device syzkaller0 entered promiscuous mode [ 312.776959][ T8126] device syzkaller0 entered promiscuous mode [ 315.381235][ T8167] tipc: Enabled bearer , priority 0 [ 315.467275][ T8167] tipc: Resetting bearer [ 315.473469][ T8171] device syzkaller0 entered promiscuous mode [ 315.584182][ T8166] tipc: Disabling bearer [ 316.815016][ T8195] tipc: Enabled bearer , priority 10 [ 317.040359][ T8201] tipc: Enabled bearer , priority 0 [ 317.047773][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.054132][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.060151][ T8201] device syzkaller0 entered promiscuous mode [ 317.133290][ T8199] tipc: Resetting bearer [ 317.199815][ T8199] tipc: Disabling bearer [ 317.498574][ T8211] tipc: Enabled bearer , priority 0 [ 317.536421][ T8211] tipc: Resetting bearer [ 317.640512][ T8210] tipc: Disabling bearer [ 317.680530][ T8215] device syzkaller0 entered promiscuous mode [ 318.001885][ T4340] tipc: Node number set to 2742870284 [ 318.021937][ T8222] netlink: 'syz.4.1200': attribute type 1 has an invalid length. [ 318.196805][ T8222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.405071][ T8240] tipc: Enabled bearer , priority 0 [ 319.497615][ T8243] device syzkaller0 entered promiscuous mode [ 319.513157][ T8242] device syzkaller0 entered promiscuous mode [ 319.550791][ T8239] tipc: Resetting bearer [ 319.612324][ T8239] tipc: Disabling bearer [ 320.079112][ T8256] device syzkaller0 entered promiscuous mode [ 321.992758][ T8278] tipc: Enabled bearer , priority 0 [ 322.004792][ T8278] device syzkaller0 entered promiscuous mode [ 322.020081][ T8281] device syzkaller0 entered promiscuous mode [ 322.126067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.192748][ T8277] tipc: Resetting bearer [ 322.265377][ T8277] tipc: Disabling bearer [ 322.295524][ T8289] device syzkaller0 entered promiscuous mode [ 322.521243][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d18c00: rx timeout, send abort [ 322.532053][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d19400: rx timeout, send abort [ 322.540967][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055d18c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 322.556842][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055d19400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 324.285761][ C1] sched: RT throttling activated [ 324.698986][ T8313] device syzkaller0 entered promiscuous mode [ 324.882079][ T8318] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 325.345697][ T8326] device syzkaller0 entered promiscuous mode [ 328.054743][ T8346] device syzkaller0 entered promiscuous mode [ 328.304453][ T8348] device syzkaller0 entered promiscuous mode [ 328.486816][ T8350] netlink: 'syz.1.1248': attribute type 10 has an invalid length. [ 328.548643][ T8351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.625379][ T8351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.674065][ T8351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.327691][ T8362] device syzkaller0 entered promiscuous mode [ 330.851274][ T8378] device syzkaller0 entered promiscuous mode [ 331.036066][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 331.058391][ T8385] loop4: detected capacity change from 0 to 64 [ 331.065711][ T8385] hfs: unable to parse mount options [ 331.100596][ T8384] netlink: 'syz.0.1260': attribute type 10 has an invalid length. [ 331.139877][ T4269] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 331.176774][ T8384] bond0: (slave dummy0): Releasing backup interface [ 331.381000][ T8384] team0: Port device dummy0 added [ 331.420704][ T8386] netlink: 'syz.0.1260': attribute type 10 has an invalid length. [ 331.630556][ T8386] team0: Port device dummy0 removed [ 331.697344][ T8386] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 331.896138][ T8392] netlink: 'syz.0.1263': attribute type 10 has an invalid length. [ 331.988590][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 332.064172][ T8395] bond0: (slave dummy0): Releasing backup interface [ 332.104447][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.139516][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.161336][ T8395] device bridge_slave_0 left promiscuous mode [ 332.209498][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.259441][ T8395] device bridge_slave_1 left promiscuous mode [ 332.296177][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.326021][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.413145][ T8395] bond0: (slave bond_slave_0): Releasing backup interface [ 332.470052][ T8395] bond0: (slave bond_slave_1): Releasing backup interface [ 332.537457][ T8395] team0: Port device team_slave_0 removed [ 332.579843][ T8395] team0: Port device team_slave_1 removed [ 332.601366][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.623770][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.644352][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.662935][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.741883][ T8395] bond0: (slave netdevsim0): Releasing backup interface [ 332.763666][ T8395] batman_adv: batadv0: Interface deactivated: gretap1 [ 332.780032][ T8395] batman_adv: batadv0: Removing interface: gretap1 [ 332.851258][ T8401] netlink: 'syz.3.1265': attribute type 4 has an invalid length. [ 333.090790][ T8406] device bridge1 entered promiscuous mode [ 333.115338][ T8406] team0: Port device bridge1 added [ 333.150128][ T8409] device syzkaller0 entered promiscuous mode [ 333.175240][ T8410] bridge0: port 1(team0) entered blocking state [ 333.241006][ T8410] bridge0: port 1(team0) entered disabled state [ 333.259988][ T8410] device team0 entered promiscuous mode [ 333.526413][ T8421] Cannot find del_set index 0 as target [ 333.868220][ T8439] Bluetooth: MGMT ver 1.22 [ 334.104111][ T8441] netlink: 'syz.1.1277': attribute type 10 has an invalid length. [ 334.154972][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 334.218669][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.279238][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.068814][ T8462] lo speed is unknown, defaulting to 1000 [ 335.094973][ T8462] bond0 speed is unknown, defaulting to 1000 [ 335.669014][ T8476] device syzkaller0 entered promiscuous mode [ 336.111774][ T8486] netlink: 'syz.1.1293': attribute type 10 has an invalid length. [ 336.156246][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 336.234616][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.262801][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.766594][ T8492] lo speed is unknown, defaulting to 1000 [ 336.773090][ T8492] bond0 speed is unknown, defaulting to 1000 [ 336.877469][ T8497] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 337.494548][ T8521] device syzkaller0 entered promiscuous mode [ 338.384830][ T8523] lo speed is unknown, defaulting to 1000 [ 338.412384][ T8523] bond0 speed is unknown, defaulting to 1000 [ 338.640800][ T8539] device syzkaller0 entered promiscuous mode [ 338.728147][ T8536] sch_fq: defrate 1 ignored. [ 340.761793][ T8586] netlink: 'syz.4.1324': attribute type 10 has an invalid length. [ 340.814083][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 340.832733][ T8587] infiniband syz1: set active [ 340.850211][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.903256][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.972720][ T8587] bond0: (slave netdevsim0): Releasing backup interface [ 341.038909][ T4347] bond0 speed is unknown, defaulting to 1000 [ 341.062898][ T6438] infiniband syz1: set down [ 341.077005][ T4340] bond0 speed is unknown, defaulting to 1000 [ 341.079498][ T8589] device syzkaller0 entered promiscuous mode [ 341.115252][ T4333] bond0 speed is unknown, defaulting to 1000 [ 341.157986][ T4333] bond0 speed is unknown, defaulting to 1000 [ 341.164643][ T8589] sch_fq: defrate 1 ignored. [ 342.227641][ T8611] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 342.325156][ T8611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.546746][ T8620] device syzkaller0 entered promiscuous mode [ 342.960014][ T8633] netlink: 'syz.3.1339': attribute type 1 has an invalid length. [ 343.190990][ T8638] tipc: Enabled bearer , priority 0 [ 343.216739][ T8638] device syzkaller0 entered promiscuous mode [ 343.413401][ T8644] tipc: Resetting bearer [ 343.511573][ T8636] tipc: Resetting bearer [ 344.070860][ T8636] tipc: Disabling bearer [ 344.876467][ T8667] netlink: 'syz.1.1351': attribute type 10 has an invalid length. [ 344.922893][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 344.979497][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.991607][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.057939][ T8669] device syzkaller0 entered promiscuous mode [ 345.683883][ T8680] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 347.904373][ T8729] tipc: Enabled bearer , priority 0 [ 347.922601][ T8729] device syzkaller0 entered promiscuous mode [ 348.009707][ T8729] tipc: Resetting bearer [ 348.049588][ T8728] tipc: Resetting bearer [ 348.146831][ T8728] tipc: Disabling bearer [ 349.481921][ T8754] lo speed is unknown, defaulting to 1000 [ 349.495364][ T8754] bond0 speed is unknown, defaulting to 1000 [ 350.080602][ T8766] lo speed is unknown, defaulting to 1000 [ 350.210277][ T8766] bond0 speed is unknown, defaulting to 1000 [ 351.041165][ T8788] sch_fq: defrate 1 ignored. [ 351.141425][ T8787] device syzkaller0 entered promiscuous mode [ 351.151567][ T8787] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 352.603344][ T8815] lo speed is unknown, defaulting to 1000 [ 352.646979][ T8815] bond0 speed is unknown, defaulting to 1000 [ 353.694368][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1407'. [ 353.736423][ T8827] xt_connbytes: Forcing CT accounting to be enabled [ 353.969113][ T8829] device syzkaller0 entered promiscuous mode [ 353.981640][ T8829] sch_fq: defrate 1 ignored. [ 355.018450][ T8843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1416'. [ 355.302622][ T8852] lo speed is unknown, defaulting to 1000 [ 355.313694][ T8852] bond0 speed is unknown, defaulting to 1000 [ 355.820842][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bb81c00: rx timeout, send abort [ 355.829377][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bb82800: rx timeout, send abort [ 356.329336][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bb81c00: abort rx timeout. Force session deactivation [ 356.342359][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bb82800: abort rx timeout. Force session deactivation [ 356.998342][ T8860] tipc: Enabling of bearer rejected, failed to enable media [ 358.847160][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'. [ 358.944367][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 358.958413][ T8895] loop1: detected capacity change from 0 to 64 [ 358.966226][ T8895] hfs: unable to parse mount options [ 359.028124][ T4508] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 359.901535][ T8919] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1435'. [ 360.080787][ T8923] tipc: Enabling of bearer rejected, failed to enable media [ 362.344512][ T8973] lo speed is unknown, defaulting to 1000 [ 362.367404][ T8973] bond0 speed is unknown, defaulting to 1000 [ 363.331159][ T8980] tipc: Enabling of bearer rejected, failed to enable media [ 363.413458][ T8983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.482816][ T8983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.660034][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 365.742398][ T9036] loop3: detected capacity change from 0 to 64 [ 365.750604][ T9036] hfs: unable to parse mount options [ 365.767805][ T9038] tipc: Enabling of bearer rejected, failed to enable media [ 365.797786][ T4269] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 366.040653][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'. [ 366.789693][ T9068] netlink: 'syz.2.1477': attribute type 10 has an invalid length. [ 366.871618][ T9068] device dummy0 entered promiscuous mode [ 366.901453][ T9068] team0: Port device dummy0 added [ 367.169815][ T9049] device syzkaller0 entered promiscuous mode [ 367.285861][ T9070] netlink: 'syz.2.1477': attribute type 10 has an invalid length. [ 367.385172][ T9070] device dummy0 left promiscuous mode [ 367.413318][ T9070] team0: Port device dummy0 removed [ 367.454302][ T9070] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 367.757745][ T9076] netlink: 'syz.2.1479': attribute type 3 has an invalid length. [ 367.791692][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 370.177944][ T9091] tipc: Enabling of bearer rejected, failed to enable media [ 372.493047][ T9092] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.502218][ T9092] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.511403][ T9092] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.520311][ T9092] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.559346][ T9110] netlink: 'syz.0.1488': attribute type 10 has an invalid length. [ 372.593865][ T9110] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 372.609590][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 372.618010][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 372.649103][ T9113] bond0: (slave netdevsim0): Releasing backup interface [ 374.442723][ T9147] netlink: 'syz.1.1500': attribute type 10 has an invalid length. [ 374.506121][ T9147] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 375.724985][ T9164] tipc: Enabled bearer , priority 0 [ 376.222178][ T9164] tipc: Resetting bearer [ 376.389449][ T9162] tipc: Disabling bearer [ 376.533921][ T9172] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 376.689271][ T9178] device syzkaller0 entered promiscuous mode [ 376.726573][ T9176] netlink: 'syz.0.1509': attribute type 4 has an invalid length. [ 376.740326][ T9183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1511'. [ 378.478919][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.536517][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.841516][ T9228] lo speed is unknown, defaulting to 1000 [ 380.857032][ T9228] bond0 speed is unknown, defaulting to 1000 [ 381.848976][ T9244] tipc: Enabling of bearer rejected, failed to enable media [ 381.907913][ T9245] device syzkaller0 entered promiscuous mode [ 382.003929][ T9244] sch_fq: defrate 1 ignored. [ 383.240686][ T9277] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 386.486627][ T9330] netlink: 'syz.3.1559': attribute type 10 has an invalid length. [ 386.636410][ T9335] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 386.680183][ T9335] bond0: (slave netdevsim0): Releasing backup interface [ 386.715623][ T9335] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 386.759465][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'. [ 386.877765][ T9338] lo speed is unknown, defaulting to 1000 [ 386.904548][ T9347] lo speed is unknown, defaulting to 1000 [ 386.946430][ T9344] lo speed is unknown, defaulting to 1000 [ 386.952325][ T9347] bond0 speed is unknown, defaulting to 1000 [ 387.372045][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1566'. [ 387.574207][ T9338] bond0 speed is unknown, defaulting to 1000 [ 387.819949][ T9344] bond0 speed is unknown, defaulting to 1000 [ 389.714803][ T9392] syz.3.1578 sent an empty control message without MSG_MORE. [ 391.935435][ T9392] lo speed is unknown, defaulting to 1000 [ 391.943035][ T9392] bond0 speed is unknown, defaulting to 1000 [ 391.965620][ T9386] syz.1.1575 (9386): drop_caches: 2 [ 394.386212][ T4310] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 394.422321][ T9421] device syzkaller0 entered promiscuous mode [ 394.649998][ T4310] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 394.681470][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.699338][ T4310] usb 3-1: Product: syz [ 394.703838][ T4310] usb 3-1: Manufacturer: syz [ 394.712152][ T4310] usb 3-1: SerialNumber: syz [ 394.736727][ T4310] usb 3-1: config 0 descriptor?? [ 394.780642][ T9423] xt_CT: No such helper "netbios-ns" [ 396.270497][ T4310] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 396.760875][ T9443] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 397.648209][ T9429] lo speed is unknown, defaulting to 1000 [ 397.656192][ T4310] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 397.665884][ T9429] bond0 speed is unknown, defaulting to 1000 [ 397.676981][ T4310] usb 3-1: USB disconnect, device number 2 [ 399.347956][ T9471] lo speed is unknown, defaulting to 1000 [ 399.454492][ T9471] bond0 speed is unknown, defaulting to 1000 [ 400.465803][ T3598] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 400.656043][ T3598] usb 5-1: Using ep0 maxpacket: 32 [ 401.385159][ T3598] usb 5-1: unable to get BOS descriptor or descriptor too short [ 401.403744][ T3598] usb 5-1: no configurations [ 401.425956][ T3598] usb 5-1: can't read configurations, error -22 [ 402.283460][ T9529] lo speed is unknown, defaulting to 1000 [ 402.295582][ T9529] bond0 speed is unknown, defaulting to 1000 [ 403.378301][ T9542] netlink: 'syz.2.1621': attribute type 10 has an invalid length. [ 406.209434][ T9579] lo speed is unknown, defaulting to 1000 [ 406.269295][ T9579] bond0 speed is unknown, defaulting to 1000 [ 406.714528][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1634'. [ 407.037515][ T9602] device syzkaller0 entered promiscuous mode [ 407.088143][ T9602] sch_fq: defrate 1 ignored. [ 407.311118][ T9607] device syzkaller0 entered promiscuous mode [ 414.847248][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1645'. [ 414.872424][ T9686] netlink: 'syz.2.1653': attribute type 10 has an invalid length. [ 414.883039][ T9687] device team0 left promiscuous mode [ 414.912253][ T9687] bridge0: port 1(team0) entered disabled state [ 414.934311][ T9687] bond0: (slave dummy0): Releasing backup interface [ 415.012833][ T9687] team0: Port device bridge1 removed [ 415.054067][ T9647] lo speed is unknown, defaulting to 1000 [ 415.069347][ T9647] bond0 speed is unknown, defaulting to 1000 [ 416.207061][ T9704] device syzkaller0 entered promiscuous mode [ 416.705998][ T4326] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 417.195886][ T4326] usb 3-1: Using ep0 maxpacket: 32 [ 417.203465][ T4326] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 417.247315][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.278775][ T4326] usb 3-1: config 0 descriptor?? [ 417.308666][ T9721] netlink: 'syz.4.1660': attribute type 10 has an invalid length. [ 417.409871][ T9721] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 417.482380][ T4632] infiniband syz1: set active [ 417.487752][ T4310] bond0 speed is unknown, defaulting to 1000 [ 417.506509][ T22] bond0 speed is unknown, defaulting to 1000 [ 417.895218][ T4326] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 417.943357][ T9732] device syzkaller0 entered promiscuous mode [ 418.059603][ T4326] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 418.086013][ T4326] dib0700: firmware download failed at 7 with -22 [ 418.235359][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1664'. [ 418.651014][ T9752] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 419.161597][ T9767] netlink: 'syz.3.1673': attribute type 10 has an invalid length. [ 419.273128][ T9767] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 420.339829][ T9788] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 420.370535][ T9788] usb usb8: usbfs: process 9788 (syz.3.1675) did not claim interface 0 before use [ 421.410262][ T4381] usb 3-1: USB disconnect, device number 3 [ 421.858064][ T9798] device syzkaller0 entered promiscuous mode [ 422.249456][ T9805] netlink: 'syz.2.1683': attribute type 10 has an invalid length. [ 422.921758][ T9818] loop0: detected capacity change from 0 to 64 [ 422.930315][ T9818] hfs: unable to parse mount options [ 423.158332][ T4269] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 423.756114][ T6755] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 423.865223][ T9845] device syzkaller0 entered promiscuous mode [ 423.939269][ T9851] netlink: 'syz.0.1698': attribute type 10 has an invalid length. [ 423.953885][ T6755] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 423.995838][ T6755] usb 5-1: config 0 has no interface number 0 [ 424.003320][ T6755] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 424.022973][ T9851] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 424.032572][ T6755] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 424.059204][ T6755] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 424.085982][ T6755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.103453][ T6755] usb 5-1: Product: syz [ 424.110497][ T6755] usb 5-1: Manufacturer: syz [ 424.120716][ T6755] usb 5-1: SerialNumber: syz [ 424.120851][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 424.144487][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 424.152744][ T6755] usb 5-1: config 0 descriptor?? [ 424.167795][ T9836] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 424.183848][ T9836] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 424.195292][ T6755] smsc95xx v2.0.0 [ 424.237118][ T9854] bond0: (slave netdevsim0): Releasing backup interface [ 424.426328][ T9836] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 424.454099][ T9836] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 424.696074][ T6755] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 424.736791][ T6755] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 424.902009][ T9875] loop2: detected capacity change from 0 to 64 [ 424.902957][ T9875] hfs: unable to parse mount options [ 426.278507][ T6755] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 426.316814][ T6755] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 426.364425][ T6755] usb 5-1: USB disconnect, device number 4 [ 426.485944][ T4381] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 426.550416][ T9899] netlink: 'syz.0.1714': attribute type 10 has an invalid length. [ 426.591587][ T9899] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 426.656338][ T9900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.677538][ T9900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.708296][ T4381] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 426.747226][ T4381] usb 3-1: config 0 has no interface number 0 [ 426.788627][ T4381] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 426.807716][ T4381] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 426.821872][ T4381] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 426.843958][ T4381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.864903][ T9900] bond0: (slave netdevsim0): Releasing backup interface [ 426.903577][ T4381] usb 3-1: config 0 descriptor?? [ 426.950618][ T9889] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 427.025758][ T4381] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 427.203603][ T4381] usb 3-1: USB disconnect, device number 4 [ 427.412406][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1720'. [ 427.504446][ T9917] lo speed is unknown, defaulting to 1000 [ 427.573215][ T9917] bond0 speed is unknown, defaulting to 1000 [ 427.614641][ T9918] lo speed is unknown, defaulting to 1000 [ 428.052742][ T9932] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 428.160611][ T9918] bond0 speed is unknown, defaulting to 1000 [ 428.321462][ T9936] netlink: 'syz.0.1728': attribute type 10 has an invalid length. [ 428.354340][ T9936] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 428.430166][ T9936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.492172][ T9936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.610674][ T9936] bond0: (slave netdevsim0): Releasing backup interface [ 429.901627][ T9976] random: crng reseeded on system resumption [ 430.045906][ T4381] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 430.237498][ T4381] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 430.300944][ T4381] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 430.372336][ T4381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.470639][ T4381] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 432.043189][ T4381] stv0680 3-1:4.0: Could not get descriptor 0200 [ 432.245145][ T4381] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 432.269233][ T4381] stv0680 3-1:4.0: last error: 9, command = 0x23 [ 432.319089][ T4381] usb 3-1: USB disconnect, device number 5 [ 432.606815][T10022] tipc: Enabling of bearer rejected, failed to enable media [ 432.757632][T10024] overlayfs: overlapping lowerdir path [ 434.449741][T10057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.599157][T10062] device syzkaller0 entered promiscuous mode [ 435.409170][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1775'. [ 435.769159][T10086] loop1: detected capacity change from 0 to 64 [ 435.770102][T10086] hfs: unable to parse mount options [ 436.318156][ T4269] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 436.638564][T10093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.683026][T10097] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 436.692229][ T6461] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 437.013359][T10104] device syzkaller0 entered promiscuous mode [ 437.878657][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'. [ 437.993310][T10132] netlink: 'syz.0.1792': attribute type 1 has an invalid length. [ 438.054260][T10132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.262151][T10142] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1794'. [ 438.657001][T10153] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 439.159557][T10173] program syz.0.1806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.565989][ T6755] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 439.765970][ T6755] usb 1-1: Using ep0 maxpacket: 8 [ 439.785031][ T6755] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.810003][T10185] tipc: Enabled bearer , priority 0 [ 439.826286][ T6755] usb 1-1: config 0 has no interfaces? [ 439.846521][T10185] device syzkaller0 entered promiscuous mode [ 439.862971][ T6755] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 439.890311][T10185] tipc: Resetting bearer [ 439.903629][ T6755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.918851][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.925248][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.978531][ T6755] usb 1-1: config 0 descriptor?? [ 439.990995][T10182] tipc: Resetting bearer [ 440.050422][T10182] tipc: Disabling bearer [ 440.398249][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 440.706539][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1825'. [ 440.744350][T10209] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.753068][T10209] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.761431][T10209] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.769892][T10209] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.851201][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1825'. [ 440.942803][ T4381] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 441.162364][ T4381] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 441.189785][ T4381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.230297][ T4381] usb 5-1: Product: syz [ 441.254050][ T4381] usb 5-1: Manufacturer: syz [ 441.301378][ T4381] usb 5-1: SerialNumber: syz [ 441.329916][ T4381] usb 5-1: config 0 descriptor?? [ 441.359548][T10221] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 441.595616][ T4381] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 442.208406][ T4381] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 442.336804][ T27] audit: type=1326 audit(1768254209.655:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.3.1834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97cc78f749 code=0x0 [ 442.809930][T10251] netlink: 'syz.1.1839': attribute type 1 has an invalid length. [ 442.881154][T10251] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.113969][T10255] device syzkaller0 entered promiscuous mode [ 443.123093][ T4340] usb 1-1: USB disconnect, device number 2 [ 443.747426][ T4340] usb 5-1: USB disconnect, device number 5 [ 446.429209][T10277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 446.454458][T10277] infiniband syz1: set active [ 446.462941][T10277] bond0: (slave dummy0): Releasing backup interface [ 446.493370][T10277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.505149][T10277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.540771][ T6755] bond0 speed is unknown, defaulting to 1000 [ 446.558592][ T4632] infiniband syz1: set down [ 446.626113][ T127] bond0 speed is unknown, defaulting to 1000 [ 446.632303][ T6755] bond0 speed is unknown, defaulting to 1000 [ 446.646218][ T6755] bond0 speed is unknown, defaulting to 1000 [ 446.781922][T10294] netlink: 'syz.2.1851': attribute type 1 has an invalid length. [ 446.843549][T10294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.863105][T10301] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.005516][T10301] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.068294][T10301] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.089438][T10301] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.137871][T10301] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 447.161897][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 447.467360][T10315] device syzkaller0 entered promiscuous mode [ 451.754934][T10380] loop7: detected capacity change from 0 to 7 [ 451.867105][T10380] Dev loop7: unable to read RDB block 7 [ 451.886090][T10380] loop7: unable to read partition table [ 451.892018][T10380] loop7: partition table beyond EOD, truncated [ 451.912694][ T55] loop: Write error at byte offset 2, length 3584. [ 451.919754][T10380] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 452.021675][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 452.031478][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 452.121288][T10388] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 452.420179][T10392] device syzkaller0 entered promiscuous mode [ 452.541127][T10371] usb usb8: usbfs: process 10371 (syz.4.1874) did not claim interface 0 before use [ 452.995130][ T27] audit: type=1326 audit(1768254220.315:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cc78f749 code=0x7ffc0000 [ 453.050419][ T27] audit: type=1326 audit(1768254220.345:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f97cc78f749 code=0x7ffc0000 [ 453.111003][ T27] audit: type=1326 audit(1768254220.345:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cc78f749 code=0x7ffc0000 [ 453.165230][ T27] audit: type=1326 audit(1768254220.345:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cc78f749 code=0x7ffc0000 [ 453.237429][ T27] audit: type=1326 audit(1768254220.345:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f97cc78f749 code=0x7ffc0000 [ 453.296393][ T27] audit: type=1326 audit(1768254220.345:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cc78f749 code=0x7ffc0000 [ 453.344722][ T27] audit: type=1326 audit(1768254220.345:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cc78f749 code=0x7ffc0000 [ 453.492215][ T27] audit: type=1326 audit(1768254220.345:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f97cc78f749 code=0x7ffc0000 [ 453.535157][ T27] audit: type=1326 audit(1768254220.395:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97cc78f749 code=0x7ffc0000 [ 453.649845][ T27] audit: type=1326 audit(1768254220.405:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f97cc78f749 code=0x7ffc0000 [ 457.320385][T10446] device syzkaller0 entered promiscuous mode [ 457.694048][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1895'. [ 457.935594][T10450] lo speed is unknown, defaulting to 1000 [ 457.975461][T10450] bond0 speed is unknown, defaulting to 1000 [ 457.978202][T10453] lo speed is unknown, defaulting to 1000 [ 458.303372][T10459] netlink: 'syz.0.1898': attribute type 10 has an invalid length. [ 458.342663][T10459] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 458.395348][T10461] tipc: Enabled bearer , priority 0 [ 458.426566][T10461] device syzkaller0 entered promiscuous mode [ 458.521368][T10461] tipc: Resetting bearer [ 458.572932][T10460] tipc: Resetting bearer [ 458.642147][T10460] tipc: Disabling bearer [ 458.687335][T10453] bond0 speed is unknown, defaulting to 1000 [ 459.015011][T10470] device syzkaller0 entered promiscuous mode [ 459.335987][ T4381] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 459.442628][T10479] netlink: 'syz.2.1907': attribute type 10 has an invalid length. [ 459.453868][T10479] team0: Port device dummy0 added [ 459.570247][ T4381] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 459.586013][ T4381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.603895][ T4381] usb 2-1: Product: syz [ 459.613547][ T4381] usb 2-1: Manufacturer: syz [ 459.620954][ T4381] usb 2-1: SerialNumber: syz [ 459.666923][ T4381] usb 2-1: config 0 descriptor?? [ 459.889755][ T4381] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 461.521674][ T4381] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 461.542088][ T4381] usb 2-1: USB disconnect, device number 2 [ 462.123341][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 462.123359][ T27] audit: type=1326 audit(1768254229.445:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.0.1919" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f475058f749 code=0x0 [ 462.356002][T10533] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 464.217943][T10567] tipc: Enabled bearer , priority 0 [ 464.244688][T10567] device syzkaller0 entered promiscuous mode [ 464.297025][T10567] tipc: Resetting bearer [ 464.325606][T10566] tipc: Resetting bearer [ 464.659501][T10566] tipc: Disabling bearer [ 467.871385][T10636] tipc: Enabled bearer , priority 0 [ 467.896605][T10636] device syzkaller0 entered promiscuous mode [ 467.939940][T10636] tipc: Resetting bearer [ 467.972121][T10635] tipc: Resetting bearer [ 468.052135][T10635] tipc: Disabling bearer [ 468.361989][T10641] device syzkaller0 entered promiscuous mode [ 468.528221][T10647] process 'syz.1.1957' launched './file0' with NULL argv: empty string added [ 468.975827][ T4326] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 469.189537][ T4326] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 469.212141][ T4326] usb 2-1: config 0 has no interface number 0 [ 469.230097][ T4326] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 469.267172][ T4326] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 469.286492][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.306317][ T4326] usb 2-1: Product: syz [ 469.331596][ T4326] usb 2-1: Manufacturer: syz [ 469.342408][ T4326] usb 2-1: SerialNumber: syz [ 469.380490][ T4326] usb 2-1: config 0 descriptor?? [ 471.845059][ T4326] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 471.864904][ T4326] keyspan 2-1:0.133: unsupported endpoint type 0 [ 471.875061][ T4326] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 471.889399][ T4326] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 471.899594][ T4326] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 471.942714][ T4326] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 471.965548][ T4326] usb 2-1: USB disconnect, device number 3 [ 472.002804][ T4326] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 472.023528][ T4326] keyspan 2-1:0.133: device disconnected [ 472.641416][ T4340] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 472.854520][ T4340] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 472.884680][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.894954][ T4340] usb 5-1: Product: syz [ 472.899584][ T4340] usb 5-1: Manufacturer: syz [ 472.904227][ T4340] usb 5-1: SerialNumber: syz [ 472.929524][ T4340] usb 5-1: config 0 descriptor?? [ 473.149733][ T4340] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 473.525840][ T4326] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 473.741828][ T4326] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 473.764495][ T4326] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 473.782598][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.825011][ T4326] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 473.953166][T10712] tipc: Enabling of bearer rejected, failed to enable media [ 474.427402][ T4340] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 474.464881][ T4340] usb 5-1: USB disconnect, device number 6 [ 474.683691][T10724] device syzkaller0 entered promiscuous mode [ 474.876483][ T4326] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 475.078223][ T4326] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 475.093036][ T4326] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 475.107198][ T4326] usb 3-1: USB disconnect, device number 6 [ 477.804363][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1981'. [ 478.117771][T10737] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 478.134264][T10737] device syzkaller0 entered promiscuous mode [ 478.145942][T10731] lo speed is unknown, defaulting to 1000 [ 480.436557][T10731] bond0 speed is unknown, defaulting to 1000 [ 480.446121][T10756] tipc: Enabling of bearer rejected, failed to enable media [ 480.454838][T10758] device syzkaller0 entered promiscuous mode [ 480.532651][T10764] device syzkaller0 entered promiscuous mode [ 480.695078][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 480.780467][T10779] device syzkaller0 entered promiscuous mode [ 480.938399][T10783] tipc: Enabled bearer , priority 0 [ 480.959374][T10783] device syzkaller0 entered promiscuous mode [ 480.992363][T10783] tipc: Resetting bearer [ 481.001732][T10781] tipc: Resetting bearer [ 481.035538][T10781] tipc: Disabling bearer [ 481.145831][ T4326] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 481.250976][T10790] device syzkaller0 entered promiscuous mode [ 481.367007][ T4326] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 481.405901][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.413983][ T4326] usb 1-1: Product: syz [ 481.436140][ T4326] usb 1-1: Manufacturer: syz [ 481.440821][ T4326] usb 1-1: SerialNumber: syz [ 481.469149][ T4326] usb 1-1: config 0 descriptor?? [ 481.678093][ T4326] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 482.967159][ T4326] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 482.995002][ T4326] usb 1-1: USB disconnect, device number 3 [ 484.064763][T10811] device syzkaller0 entered promiscuous mode [ 486.566401][T10821] tipc: Enabling of bearer rejected, failed to enable media [ 486.596908][T10820] device syzkaller0 entered promiscuous mode [ 486.876867][T10858] device syzkaller0 entered promiscuous mode [ 487.122377][T10865] tipc: Enabled bearer , priority 0 [ 487.152403][T10863] device syzkaller0 entered promiscuous mode [ 487.236223][T10865] tipc: Resetting bearer [ 487.254248][T10861] tipc: Resetting bearer [ 487.348475][T10861] tipc: Disabling bearer [ 487.601638][T10876] device syzkaller0 entered promiscuous mode [ 491.001297][T10897] bond0: (slave syz_tun): Releasing backup interface [ 491.019638][T10897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 491.030868][T10897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 491.101893][T10897] bond1: (slave geneve3): Releasing backup interface [ 491.125218][T10905] tipc: Enabling of bearer rejected, failed to enable media [ 491.167615][T10906] device syzkaller0 entered promiscuous mode [ 491.203269][T10922] device syzkaller0 entered promiscuous mode [ 491.246188][T10919] lo speed is unknown, defaulting to 1000 [ 491.302575][T10919] bond0 speed is unknown, defaulting to 1000 [ 491.465230][T10927] device syzkaller0 entered promiscuous mode [ 491.474134][T10929] tipc: Enabled bearer , priority 0 [ 491.507850][T10929] device syzkaller0 entered promiscuous mode [ 491.534560][T10929] sch_fq: defrate 1 ignored. [ 491.768854][T10933] tipc: Resetting bearer [ 494.310553][T10928] tipc: Resetting bearer [ 494.334724][T10928] tipc: Disabling bearer [ 494.369726][T10942] device syzkaller0 entered promiscuous mode [ 494.388434][ T4326] tipc: Node number set to 2598966224 [ 495.444216][T10965] device syzkaller0 entered promiscuous mode [ 495.490887][T10969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 495.512752][T10969] bond0: (slave dummy0): Releasing backup interface [ 495.583658][T10969] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 498.401382][T11012] device syzkaller0 entered promiscuous mode [ 498.434056][T11017] tipc: Enabled bearer , priority 0 [ 498.469291][T11017] device syzkaller0 entered promiscuous mode [ 498.485012][T11017] sch_fq: defrate 1 ignored. [ 498.566534][T11021] tipc: Resetting bearer [ 498.587458][T11015] tipc: Resetting bearer [ 498.623000][T11015] tipc: Disabling bearer [ 501.358670][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.365103][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.469098][T11051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2055'. [ 502.559248][T11053] device syzkaller0 entered promiscuous mode [ 502.637965][T11058] device syzkaller0 entered promiscuous mode [ 505.276510][T11071] tipc: Enabled bearer , priority 0 [ 505.321355][T11084] tipc: Resetting bearer [ 505.339800][T11093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 505.357387][T11093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 505.411828][T11067] tipc: Disabling bearer [ 506.315784][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2068'. [ 506.539266][T11105] device syzkaller0 entered promiscuous mode [ 506.620075][T11104] lo speed is unknown, defaulting to 1000 [ 509.018123][T11104] bond0 speed is unknown, defaulting to 1000 [ 509.018152][T11109] lo speed is unknown, defaulting to 1000 [ 509.041386][T11125] tipc: Enabling of bearer rejected, failed to enable media [ 509.050766][T11126] device syzkaller0 entered promiscuous mode [ 509.272282][T11151] device syzkaller0 entered promiscuous mode [ 509.304724][T11109] bond0 speed is unknown, defaulting to 1000 [ 509.474588][T11155] netlink: 'syz.4.2080': attribute type 10 has an invalid length. [ 509.504451][T11155] team0: Port device dummy0 added [ 509.528001][T11157] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 509.642581][T11157] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 510.936107][T11185] device syzkaller0 entered promiscuous mode [ 513.895599][T11197] tipc: Enabled bearer , priority 0 [ 513.906262][T11194] device syzkaller0 entered promiscuous mode [ 513.939399][T11199] device syzkaller0 entered promiscuous mode [ 513.963384][T11202] sch_fq: defrate 1 ignored. [ 514.047926][T11204] tipc: Resetting bearer [ 514.064042][T11193] tipc: Resetting bearer [ 514.093424][T11193] tipc: Disabling bearer [ 514.124894][T11217] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 514.132908][T11217] infiniband syz1: set down [ 514.161058][T11217] team0: Port device dummy0 removed [ 514.167572][T11217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 514.175022][T11217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 514.213677][ T6755] bond0 speed is unknown, defaulting to 1000 [ 515.837241][T11243] overlayfs: missing 'lowerdir' [ 516.426456][T11252] device syzkaller0 entered promiscuous mode [ 516.581703][T11254] device syzkaller0 entered promiscuous mode [ 516.723937][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 516.742674][T11257] infiniband syz1: set down [ 516.764943][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 516.814923][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 516.905036][ T4310] bond0 speed is unknown, defaulting to 1000 [ 517.197280][T11262] tipc: Enabled bearer , priority 0 [ 519.600357][T11265] device syzkaller0 entered promiscuous mode [ 519.611736][T11261] sch_fq: defrate 1 ignored. [ 519.632512][T11262] tipc: Resetting bearer [ 519.645929][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2111'. [ 519.665794][T11259] tipc: Resetting bearer [ 519.691502][T11259] tipc: Disabling bearer [ 519.705780][T11287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2113'. [ 520.191347][T11301] netlink: 'syz.1.2118': attribute type 10 has an invalid length. [ 520.277221][T11301] bond0: (slave dummy0): Releasing backup interface [ 520.314159][T11301] team0: Port device dummy0 added [ 520.337429][T11306] device syzkaller0 entered promiscuous mode [ 521.449050][T11319] device syzkaller0 entered promiscuous mode [ 521.560906][T11321] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 521.570096][T11321] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 522.127769][T11332] tipc: Enabled bearer , priority 0 [ 522.199499][T11329] sch_fq: defrate 1 ignored. [ 522.217672][T11329] tipc: Resetting bearer [ 522.391503][T11328] tipc: Disabling bearer [ 522.442770][T11334] device syzkaller0 entered promiscuous mode [ 522.869000][T11343] lo speed is unknown, defaulting to 1000 [ 522.889575][T11345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.996331][T11345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 523.073059][T11343] bond0 speed is unknown, defaulting to 1000 [ 523.411719][T11347] lo speed is unknown, defaulting to 1000 [ 524.011202][T11355] device syzkaller0 entered promiscuous mode [ 524.212880][T11347] bond0 speed is unknown, defaulting to 1000 [ 524.496458][T11362] netlink: 'syz.0.2138': attribute type 10 has an invalid length. [ 524.517570][T11362] team0: Port device dummy0 added [ 524.722078][T11364] device syzkaller0 entered promiscuous mode [ 524.924404][T11369] tipc: Enabled bearer , priority 0 [ 524.937926][T11369] device syzkaller0 entered promiscuous mode [ 524.953450][T11369] sch_fq: defrate 1 ignored. [ 525.047586][T11369] tipc: Resetting bearer [ 525.086478][T11368] tipc: Resetting bearer [ 525.169142][T11368] tipc: Disabling bearer [ 525.231421][T11374] device syzkaller0 entered promiscuous mode [ 526.298319][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2145'. [ 526.627418][T11382] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 526.636223][T11382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 526.673777][T11386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 526.682761][T11386] infiniband syz1: set down [ 526.689988][T11386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.698233][T11386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.725844][ T6755] bond0 speed is unknown, defaulting to 1000 [ 526.902780][T11391] device syzkaller0 entered promiscuous mode [ 527.338436][T11400] netlink: 'syz.0.2153': attribute type 10 has an invalid length. [ 527.390209][T11403] device syzkaller0 entered promiscuous mode [ 527.676545][T11411] tipc: Enabled bearer , priority 0 [ 527.688896][T11411] device syzkaller0 entered promiscuous mode [ 527.772966][T11411] tipc: Resetting bearer [ 527.812208][T11410] tipc: Resetting bearer [ 527.935505][T11410] tipc: Disabling bearer [ 528.686981][T11423] device syzkaller0 entered promiscuous mode [ 528.796246][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'. [ 529.189201][T11431] team0: Port device dummy0 removed [ 529.201092][T11436] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 529.210397][T11436] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 529.567692][T11443] device syzkaller0 entered promiscuous mode [ 530.103716][T11448] device syzkaller0 entered promiscuous mode [ 531.173583][T11456] lo speed is unknown, defaulting to 1000 [ 531.260954][T11456] bond0 speed is unknown, defaulting to 1000 [ 531.276857][T11459] tipc: Enabled bearer , priority 0 [ 531.294595][T11459] device syzkaller0 entered promiscuous mode [ 531.311977][T11458] lo speed is unknown, defaulting to 1000 [ 531.385627][T11462] device syzkaller0 entered promiscuous mode [ 531.441512][T11459] tipc: Resetting bearer [ 533.763486][T11457] tipc: Resetting bearer [ 533.783123][T11457] tipc: Disabling bearer [ 533.794288][T11458] bond0 speed is unknown, defaulting to 1000 [ 533.805122][T11471] device syzkaller0 entered promiscuous mode [ 533.818692][ T4326] tipc: Node number set to 877572518 [ 534.142738][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 534.152823][T11488] infiniband syz1: set down [ 534.173694][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 534.190561][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 534.239763][ T4333] bond0 speed is unknown, defaulting to 1000 [ 534.261502][T11491] device syzkaller0 entered promiscuous mode [ 534.945972][T11501] device syzkaller0 entered promiscuous mode [ 536.026993][T11516] netlink: 'syz.1.2187': attribute type 10 has an invalid length. [ 536.104546][T11516] team0: Port device dummy0 added [ 536.367483][T11519] tipc: Enabled bearer , priority 0 [ 536.399153][T11519] device syzkaller0 entered promiscuous mode [ 536.550437][T11524] tipc: Resetting bearer [ 536.608885][T11525] device syzkaller0 entered promiscuous mode [ 536.623062][T11518] tipc: Resetting bearer [ 536.665185][T11518] tipc: Disabling bearer [ 536.834303][T11529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2192'. [ 536.997592][T11532] team0: Port device dummy0 removed [ 538.117116][T11545] device syzkaller0 entered promiscuous mode [ 538.302605][T11553] overlayfs: missing 'lowerdir' [ 538.494777][T11557] netlink: 'syz.4.2202': attribute type 10 has an invalid length. [ 538.529793][T11557] team0: Port device dummy0 added [ 539.284425][T11569] tipc: Enabled bearer , priority 0 [ 539.335063][T11569] device syzkaller0 entered promiscuous mode [ 539.490118][T11570] tipc: Resetting bearer [ 539.530524][T11568] tipc: Resetting bearer [ 539.706943][T11568] tipc: Disabling bearer [ 539.808924][T11572] device syzkaller0 entered promiscuous mode [ 540.120626][T11574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2207'. [ 541.158143][T11585] lo speed is unknown, defaulting to 1000 [ 541.183851][T11585] bond0 speed is unknown, defaulting to 1000 [ 541.297761][T11597] netlink: 'syz.2.2214': attribute type 10 has an invalid length. [ 541.363715][T11595] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 541.396985][T11595] infiniband syz1: set down [ 541.430211][T11595] team0: Port device dummy0 removed [ 541.457141][T11595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 541.484791][T11595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 541.543670][ T4318] bond0 speed is unknown, defaulting to 1000 [ 541.881155][T11609] tipc: Enabled bearer , priority 0 [ 541.904823][T11609] device syzkaller0 entered promiscuous mode [ 541.986168][T11609] tipc: Resetting bearer [ 542.008735][T11608] tipc: Resetting bearer [ 542.044734][T11608] tipc: Disabling bearer [ 543.219578][T11629] device syzkaller0 entered promiscuous mode [ 543.365372][T11630] overlayfs: missing 'lowerdir' [ 543.413227][T11635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2228'. [ 543.664697][T11642] netlink: 'syz.0.2229': attribute type 10 has an invalid length. [ 543.750065][T11644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.054684][T11644] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 544.189872][T11652] tipc: Enabled bearer , priority 0 [ 544.215240][T11652] device syzkaller0 entered promiscuous mode [ 544.361286][T11649] tipc: Resetting bearer [ 544.504004][T11649] tipc: Disabling bearer [ 545.509586][T11664] lo speed is unknown, defaulting to 1000 [ 545.556822][T11664] bond0 speed is unknown, defaulting to 1000 [ 545.632378][T11670] device syzkaller0 entered promiscuous mode [ 546.113073][T11685] netlink: 'syz.0.2245': attribute type 10 has an invalid length. [ 546.150323][T11684] netlink: 'syz.2.2244': attribute type 1 has an invalid length. [ 546.234251][T11684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 546.311670][T11688] device syzkaller0 entered promiscuous mode [ 546.331964][T11695] tipc: Enabled bearer , priority 0 [ 546.503179][T11686] tipc: Resetting bearer [ 546.861911][T11686] tipc: Disabling bearer [ 546.870560][T11701] overlayfs: missing 'workdir' [ 549.252614][T11726] device syzkaller0 entered promiscuous mode [ 552.423222][T11754] tipc: Enabling of bearer rejected, failed to enable media [ 552.432727][T11740] device syzkaller0 entered promiscuous mode [ 553.985917][T11797] overlayfs: missing 'workdir' [ 554.189864][T11796] device syzkaller0 entered promiscuous mode [ 558.731308][T11877] device syzkaller0 entered promiscuous mode [ 558.842379][T11879] netlink: 'syz.2.2286': attribute type 1 has an invalid length. [ 558.903182][T11879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 559.411518][T11884] overlayfs: missing 'workdir' [ 559.631409][T11890] device syzkaller0 entered promiscuous mode [ 562.656285][T11952] netlink: 'syz.0.2301': attribute type 1 has an invalid length. [ 562.800125][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.806535][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.001961][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2304'. [ 564.222102][T11980] device syzkaller0 entered promiscuous mode [ 564.525925][T11983] netlink: 'syz.1.2312': attribute type 1 has an invalid length. [ 564.844986][T11983] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.990375][T11988] tipc: Enabling of bearer rejected, failed to enable media [ 565.054040][T11990] device syzkaller0 entered promiscuous mode [ 565.146220][T11992] device syzkaller0 entered promiscuous mode [ 565.205957][T11994] device syzkaller0 entered promiscuous mode [ 565.382521][T12004] lo speed is unknown, defaulting to 1000 [ 565.403892][T12004] bond0 speed is unknown, defaulting to 1000 [ 569.232158][T12006] lo speed is unknown, defaulting to 1000 [ 569.264538][T12035] netlink: 'syz.4.2330': attribute type 1 has an invalid length. [ 569.325072][T12035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 569.363246][T12006] bond0 speed is unknown, defaulting to 1000 [ 569.547192][T12039] tipc: Enabling of bearer rejected, failed to enable media [ 569.635138][T12042] device syzkaller0 entered promiscuous mode [ 571.023005][T12065] device syzkaller0 entered promiscuous mode [ 571.147783][T12070] device syzkaller0 entered promiscuous mode [ 571.297513][T12073] netlink: 'syz.2.2343': attribute type 1 has an invalid length. [ 571.351476][T12073] 8021q: adding VLAN 0 to HW filter on device bond4 [ 575.515811][T12094] lo speed is unknown, defaulting to 1000 [ 575.528800][T12094] bond0 speed is unknown, defaulting to 1000 [ 575.529821][T12093] lo speed is unknown, defaulting to 1000 [ 575.955496][T12118] netlink: 'syz.2.2354': attribute type 1 has an invalid length. [ 576.009991][T12118] 8021q: adding VLAN 0 to HW filter on device bond5 [ 576.032640][T12093] bond0 speed is unknown, defaulting to 1000 [ 576.371900][T12134] netlink: 'syz.1.2359': attribute type 10 has an invalid length. [ 576.580876][T12141] device syzkaller0 entered promiscuous mode [ 576.886452][T12144] device syzkaller0 entered promiscuous mode [ 577.053539][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2365'. [ 577.276665][T12155] netlink: 'syz.3.2368': attribute type 1 has an invalid length. [ 577.326282][T12155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.429938][T12160] device syzkaller0 entered promiscuous mode [ 577.714382][T12167] netlink: 'syz.2.2372': attribute type 10 has an invalid length. [ 577.774126][T12169] device syzkaller0 entered promiscuous mode [ 578.141538][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2377'. [ 578.260505][T12185] lo speed is unknown, defaulting to 1000 [ 578.279361][T12185] bond0 speed is unknown, defaulting to 1000 [ 578.368721][T12187] lo speed is unknown, defaulting to 1000 [ 578.376041][T12189] device syzkaller0 entered promiscuous mode [ 579.264775][T12187] bond0 speed is unknown, defaulting to 1000 [ 579.325993][ T4310] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 579.431883][T12199] device syzkaller0 entered promiscuous mode [ 579.474235][T12202] netlink: 'syz.1.2382': attribute type 1 has an invalid length. [ 579.539134][ T4310] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 579.555790][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.572012][T12202] 8021q: adding VLAN 0 to HW filter on device bond5 [ 579.574164][ T4310] usb 1-1: Product: syz [ 579.583593][ T4310] usb 1-1: Manufacturer: syz [ 579.590705][ T4310] usb 1-1: SerialNumber: syz [ 579.605316][ T4310] usb 1-1: config 0 descriptor?? [ 579.742492][T12208] netlink: 'syz.3.2385': attribute type 10 has an invalid length. [ 579.783217][T12208] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 579.817270][ T4310] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 580.022299][T12217] tipc: Enabled bearer , priority 0 [ 580.044669][T12217] tipc: Resetting bearer [ 580.068711][T12215] tipc: Disabling bearer [ 580.163429][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2391'. [ 582.074460][ T4310] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 582.473951][T12239] device syzkaller0 entered promiscuous mode [ 582.475862][ T22] usb 1-1: USB disconnect, device number 4 [ 582.505501][T12241] netlink: 'syz.2.2397': attribute type 1 has an invalid length. [ 582.644819][T12241] 8021q: adding VLAN 0 to HW filter on device bond6 [ 582.727982][T12247] netlink: 'syz.0.2400': attribute type 10 has an invalid length. [ 582.761882][T12247] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 583.003457][T12256] tipc: Enabled bearer , priority 0 [ 583.045717][T12256] tipc: Resetting bearer [ 583.146525][T12254] tipc: Disabling bearer [ 583.289221][T12265] device syzkaller0 entered promiscuous mode [ 584.741575][ T4326] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 584.962848][ T4326] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 584.972124][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.980531][ T4326] usb 2-1: Product: syz [ 584.984724][ T4326] usb 2-1: Manufacturer: syz [ 584.989617][ T4326] usb 2-1: SerialNumber: syz [ 585.003956][ T4326] usb 2-1: config 0 descriptor?? [ 585.214060][ T4326] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 586.656213][T12289] netlink: 'syz.2.2411': attribute type 1 has an invalid length. [ 586.677370][T12272] lo speed is unknown, defaulting to 1000 [ 586.693408][T12272] bond0 speed is unknown, defaulting to 1000 [ 586.695104][T12269] lo speed is unknown, defaulting to 1000 [ 586.861674][T12295] device syzkaller0 entered promiscuous mode [ 586.956980][T12297] netlink: 'syz.2.2413': attribute type 10 has an invalid length. [ 586.977566][T12269] bond0 speed is unknown, defaulting to 1000 [ 587.395422][T12306] tipc: Enabled bearer , priority 0 [ 587.446200][T12306] tipc: Resetting bearer [ 587.452408][T12308] device syzkaller0 entered promiscuous mode [ 587.528302][ T4326] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 587.571613][T12305] tipc: Disabling bearer [ 587.590547][ T4326] usb 2-1: USB disconnect, device number 4 [ 587.895386][T12312] device syzkaller0 entered promiscuous mode [ 589.281647][T12330] netlink: 'syz.1.2425': attribute type 10 has an invalid length. [ 589.471663][T12325] device syzkaller0 entered promiscuous mode [ 589.695426][T12334] device syzkaller0 entered promiscuous mode [ 594.796081][T12363] device syzkaller0 entered promiscuous mode [ 595.214101][T12386] netlink: 'syz.1.2436': attribute type 10 has an invalid length. [ 595.816127][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2436'. [ 597.310246][T12403] device syzkaller0 entered promiscuous mode [ 600.442552][T12442] lo speed is unknown, defaulting to 1000 [ 600.451268][T12442] bond0 speed is unknown, defaulting to 1000 [ 600.457838][T12445] lo speed is unknown, defaulting to 1000 [ 600.578297][T12463] netlink: 'syz.2.2450': attribute type 10 has an invalid length. [ 600.592767][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2450'. [ 600.792005][T12445] bond0 speed is unknown, defaulting to 1000 [ 601.911358][T12486] device syzkaller0 entered promiscuous mode [ 602.440511][T12493] device syzkaller0 entered promiscuous mode [ 602.695932][ T4310] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 602.900727][ T4310] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 602.924693][ T4310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.953578][ T4310] usb 5-1: Product: syz [ 602.965453][ T4310] usb 5-1: Manufacturer: syz [ 602.980942][ T4310] usb 5-1: SerialNumber: syz [ 602.988748][T12498] netlink: 'syz.0.2463': attribute type 10 has an invalid length. [ 603.041816][ T4310] usb 5-1: config 0 descriptor?? [ 603.061633][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 603.173062][T12501] device syzkaller0 entered promiscuous mode [ 603.254447][ T4310] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 603.966505][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 604.156176][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 604.168909][ T22] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 604.189739][ T22] usb 2-1: config 0 has no interface number 0 [ 604.208482][ T22] usb 2-1: config 0 interface 12 has no altsetting 0 [ 604.233938][ T22] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 604.287233][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.308828][ T22] usb 2-1: Product: syz [ 604.318631][ T22] usb 2-1: Manufacturer: syz [ 604.329084][ T22] usb 2-1: SerialNumber: syz [ 604.365217][ T22] usb 2-1: config 0 descriptor?? [ 604.643535][T12526] device syzkaller0 entered promiscuous mode [ 605.124273][T12528] lo speed is unknown, defaulting to 1000 [ 605.138424][T12528] bond0 speed is unknown, defaulting to 1000 [ 605.333440][T12529] lo speed is unknown, defaulting to 1000 [ 605.439008][T12529] bond0 speed is unknown, defaulting to 1000 [ 605.509231][ T4310] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 605.628394][ T4310] usb 5-1: USB disconnect, device number 7 [ 606.315310][T12538] netlink: 'syz.2.2475': attribute type 10 has an invalid length. [ 606.351376][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 606.410305][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.456734][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.849478][T12543] netlink: 'syz.3.2477': attribute type 1 has an invalid length. [ 606.930516][T12543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 607.010715][ T22] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 607.026580][ T22] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 607.035906][ T22] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 607.043579][ T22] f81534: probe of 2-1:0.12 failed with error -71 [ 607.056078][ T22] usb 2-1: USB disconnect, device number 5 [ 607.105955][T12543] bond2: (slave geneve3): making interface the new active one [ 607.134122][T12543] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 607.186167][T12282] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 607.271266][T12552] device syzkaller0 entered promiscuous mode [ 608.442005][T12571] netlink: 'syz.4.2486': attribute type 10 has an invalid length. [ 608.453145][T12571] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 608.478536][ T4451] infiniband syz1: set active [ 608.484447][ T4318] bond0 speed is unknown, defaulting to 1000 [ 608.491903][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'. [ 608.539324][T12572] device syzkaller0 entered promiscuous mode [ 608.584106][ T4333] bond0 speed is unknown, defaulting to 1000 [ 608.596074][ T4318] bond0 speed is unknown, defaulting to 1000 [ 609.091655][T12595] device syzkaller0 entered promiscuous mode [ 609.385817][ T4333] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 610.163584][ T4333] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.208690][ T4333] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 610.243529][ T4333] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 610.257424][ T4333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.294890][ T4333] usb 5-1: config 0 descriptor?? [ 610.308115][ T4333] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 610.317443][ T4333] dvb-usb: bulk message failed: -22 (3/0) [ 610.344329][ T4333] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 610.354396][ T4333] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 610.363311][ T4333] usb 5-1: media controller created [ 610.372167][ T4333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 610.448582][ T4333] dvb-usb: bulk message failed: -22 (6/0) [ 610.461013][ T4333] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 610.487224][ T4333] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 610.548502][ T4333] dvb-usb: schedule remote query interval to 150 msecs. [ 610.569662][T12608] netlink: 'syz.2.2500': attribute type 10 has an invalid length. [ 610.578095][ T4333] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 610.605118][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'. [ 610.740590][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 610.748778][ T4333] dvb-usb: error while querying for an remote control event. [ 610.919746][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 610.926314][ T4333] dvb-usb: error while querying for an remote control event. [ 611.095847][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 611.105285][ T4333] dvb-usb: error while querying for an remote control event. [ 611.223895][T12618] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 611.306048][ T4333] dvb-usb: bulk message failed: -22 (1/0) [ 611.312275][ T4333] dvb-usb: error while querying for an remote control event. [ 611.444764][T12620] device syzkaller0 entered promiscuous mode [ 611.526015][ T4326] dvb-usb: bulk message failed: -22 (1/0) [ 611.534097][ T4326] dvb-usb: error while querying for an remote control event. [ 611.731838][ T4326] dvb-usb: bulk message failed: -22 (1/0) [ 611.751395][ T4326] dvb-usb: error while querying for an remote control event. [ 611.916028][ T4326] dvb-usb: bulk message failed: -22 (1/0) [ 611.925401][ T4326] dvb-usb: error while querying for an remote control event. [ 612.105981][ T4326] dvb-usb: bulk message failed: -22 (1/0) [ 612.122551][ T4326] dvb-usb: error while querying for an remote control event. [ 612.299354][ T4326] usb 5-1: USB disconnect, device number 8 [ 612.420559][ T4326] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 616.713215][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2505'. [ 616.742547][T12652] lo speed is unknown, defaulting to 1000 [ 616.788722][T12652] bond0 speed is unknown, defaulting to 1000 [ 616.788743][T12651] lo speed is unknown, defaulting to 1000 [ 616.921391][T12658] capability: warning: `syz.2.2514' uses deprecated v2 capabilities in a way that may be insecure [ 617.236385][T12651] bond0 speed is unknown, defaulting to 1000 [ 619.713690][T12705] netlink: 'syz.2.2531': attribute type 10 has an invalid length. [ 621.118140][T12719] lo speed is unknown, defaulting to 1000 [ 621.181656][T12719] bond0 speed is unknown, defaulting to 1000 [ 621.416197][ T4326] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 621.583213][T12731] lo speed is unknown, defaulting to 1000 [ 621.625913][ T4326] usb 1-1: Using ep0 maxpacket: 32 [ 621.633366][ T4326] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 621.674917][ T4326] usb 1-1: config 0 has no interface number 0 [ 621.690621][ T4326] usb 1-1: config 0 interface 23 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 621.734865][ T4326] usb 1-1: config 0 interface 23 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 621.775252][ T4326] usb 1-1: config 0 interface 23 altsetting 2 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 621.820970][ T4326] usb 1-1: config 0 interface 23 altsetting 2 has an invalid endpoint with address 0x1E, skipping [ 621.862211][ T4326] usb 1-1: config 0 interface 23 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64 [ 621.901376][ T4326] usb 1-1: config 0 interface 23 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 621.945207][ T4326] usb 1-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 621.984689][ T4326] usb 1-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 622.041627][ T4326] usb 1-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 622.056256][T12731] bond0 speed is unknown, defaulting to 1000 [ 622.088079][ T4326] usb 1-1: config 0 interface 23 has no altsetting 0 [ 622.100172][ T4326] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 622.113705][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.153604][ T4326] usb 1-1: config 0 descriptor?? [ 622.170842][T12724] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 622.328857][T12743] netlink: 'syz.1.2544': attribute type 10 has an invalid length. [ 622.393575][ T4326] usb 1-1: string descriptor 0 read error: -71 [ 622.411209][ T4326] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 622.441734][ T4326] gspca_mr97310a: reg write [21] error -8 [ 622.469139][ T4326] mr97310a: probe of 1-1:0.23 failed with error -8 [ 622.502713][ T4326] usb 1-1: USB disconnect, device number 5 [ 622.555595][T12745] lo speed is unknown, defaulting to 1000 [ 622.577779][T12745] bond0 speed is unknown, defaulting to 1000 [ 622.627592][T12748] lo speed is unknown, defaulting to 1000 [ 622.952335][T12748] bond0 speed is unknown, defaulting to 1000 [ 624.228418][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.234793][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.354686][T12782] netlink: 'syz.3.2556': attribute type 10 has an invalid length. [ 624.391138][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2556'. [ 625.617468][T12791] lo speed is unknown, defaulting to 1000 [ 625.623885][T12791] bond0 speed is unknown, defaulting to 1000 [ 626.104405][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2563'. [ 626.229073][T12806] device bond6 entered promiscuous mode [ 626.261436][T12806] 8021q: adding VLAN 0 to HW filter on device bond6 [ 626.401627][T12807] 8021q: adding VLAN 0 to HW filter on device bond6 [ 626.454279][T12807] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 626.542118][T12807] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 626.649829][T12809] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 626.667535][T12809] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 630.355956][ T4340] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 630.399333][T12845] device syzkaller0 entered promiscuous mode [ 630.557356][ T4340] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.589170][ T4340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.634009][ T4340] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 630.662685][ T4340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.691557][ T4340] usb 3-1: Product: syz [ 630.703497][ T4340] usb 3-1: Manufacturer: syz [ 630.732732][ T4340] usb 3-1: SerialNumber: syz [ 631.181749][ T4340] usb 3-1: cannot find UAC_HEADER [ 631.323463][ T4340] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 631.395909][ T4340] usb 3-1: USB disconnect, device number 7 [ 631.407989][T10508] udevd[10508]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.340289][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 632.544450][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 632.572362][ T22] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 632.598071][ T22] usb 5-1: config 8 has no interface number 0 [ 632.604360][ T22] usb 5-1: config 8 interface 203 altsetting 1 has an invalid endpoint with address 0x93, skipping [ 632.622037][ T22] usb 5-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 632.633873][ T22] usb 5-1: config 8 interface 203 has no altsetting 0 [ 632.658917][ T22] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 632.684008][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.712860][ T22] usb 5-1: Product: syz [ 632.723113][ T22] usb 5-1: Manufacturer: syz [ 632.754993][ T22] usb 5-1: SerialNumber: syz [ 632.773799][T12856] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 633.012785][ T22] port100 5-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 633.046017][ T22] usb 5-1: USB disconnect, device number 9 [ 633.975871][ T4326] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 634.165776][ T4326] usb 5-1: Using ep0 maxpacket: 32 [ 634.186033][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.208202][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.218875][ T4326] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 634.229789][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.252516][ T4326] usb 5-1: config 0 descriptor?? [ 634.261737][ T4326] hub 5-1:0.0: USB hub found [ 634.462741][ T4326] hub 5-1:0.0: 1 port detected [ 634.690204][ T4326] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 634.706367][ T4326] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 634.719363][ T4326] usbhid 5-1:0.0: can't add hid device: -71 [ 634.736537][ T4326] usbhid: probe of 5-1:0.0 failed with error -71 [ 634.766421][ T4326] usb 5-1: USB disconnect, device number 10 [ 635.420564][T12869] lo speed is unknown, defaulting to 1000 [ 635.445119][T12869] bond0 speed is unknown, defaulting to 1000 [ 635.485563][T12870] lo speed is unknown, defaulting to 1000 [ 636.442501][T12870] bond0 speed is unknown, defaulting to 1000 [ 636.483838][T12883] loop8: detected capacity change from 0 to 8 [ 636.524225][T10508] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 636.538545][T10508] loop8: p1 start 1701603686 is beyond EOD, truncated [ 636.545523][T10508] loop8: p2 start 3872895774 is beyond EOD, truncated [ 636.569342][T10508] loop8: p3 start 2561007017 is beyond EOD, truncated [ 636.591094][T10508] loop8: p4 start 2432665254 is beyond EOD, truncated [ 636.598925][T10508] loop8: p5 start 3922843517 is beyond EOD, truncated [ 636.613511][ T4340] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 636.624898][T10508] loop8: p6 start 1499266338 is beyond EOD, truncated [ 636.650281][T10508] loop8: p7 start 3132875511 is beyond EOD, truncated [ 636.670361][T10508] loop8: p8 start 4293599519 is beyond EOD, truncated [ 636.685495][T10508] loop8: p9 start 1953740414 is beyond EOD, truncated [ 636.704536][T10508] loop8: p10 start 1771393324 is beyond EOD, truncated [ 636.727268][T10508] loop8: p11 start 2100272536 is beyond EOD, truncated [ 636.741085][T10508] loop8: p12 start 3258933002 is beyond EOD, truncated [ 636.786094][T12883] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 636.797493][ T4340] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 636.809861][ T4340] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 636.825958][T12883] loop8: p1 start 1701603686 is beyond EOD, truncated [ 636.833307][T12883] loop8: p2 start 3872895774 is beyond EOD, truncated [ 636.842694][T12883] loop8: p3 start 2561007017 is beyond EOD, truncated [ 636.849606][ T4340] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 636.862655][T12883] loop8: p4 start 2432665254 is beyond EOD, truncated [ 636.871903][T12883] loop8: p5 start 3922843517 is beyond EOD, truncated [ 636.880153][T12883] loop8: p6 start 1499266338 is beyond EOD, truncated [ 636.889732][ T4340] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 636.904210][T12883] loop8: p7 start 3132875511 is beyond EOD, truncated [ 636.913459][T12883] loop8: p8 start 4293599519 is beyond EOD, truncated [ 636.929741][ T4340] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 636.945294][T12883] loop8: p9 start 1953740414 is beyond EOD, truncated [ 636.953371][T12883] loop8: p10 start 1771393324 is beyond EOD, truncated [ 636.964592][T12883] loop8: p11 start 2100272536 is beyond EOD, truncated [ 636.975180][T12883] loop8: p12 start 3258933002 is beyond EOD, truncated [ 636.979058][ T4340] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 637.005565][ T4340] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 637.017430][ T4340] usb 4-1: Product: syz [ 637.054821][ T4340] usb 4-1: Manufacturer: syz [ 637.144854][ T4340] cdc_wdm 4-1:1.0: skipping garbage [ 637.169206][ T4340] cdc_wdm 4-1:1.0: skipping garbage [ 637.225381][ T4340] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 637.250222][ T4340] cdc_wdm 4-1:1.0: Unknown control protocol [ 637.354124][ T4340] usb 4-1: USB disconnect, device number 2 [ 637.967154][T12903] netlink: 'syz.1.2593': attribute type 2 has an invalid length. [ 637.999455][T12903] netlink: 'syz.1.2593': attribute type 2 has an invalid length. [ 638.008062][T12903] netlink: 'syz.1.2593': attribute type 2 has an invalid length. [ 638.035905][ T4340] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 638.080691][T12903] netlink: 'syz.1.2593': attribute type 2 has an invalid length. [ 638.094183][T12900] lo speed is unknown, defaulting to 1000 [ 638.104351][T12903] netlink: 'syz.1.2593': attribute type 2 has an invalid length. [ 638.158095][T12900] bond0 speed is unknown, defaulting to 1000 [ 638.276052][ T4340] usb 3-1: Using ep0 maxpacket: 8 [ 638.353845][ T4340] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 638.380538][ T4340] usb 3-1: config 1 interface 0 has no altsetting 0 [ 638.433608][ T4340] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 638.519300][ T4340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.595727][ T4340] usb 3-1: Product: syz [ 638.599972][ T4340] usb 3-1: Manufacturer: syz [ 638.766936][ T4340] usb 3-1: SerialNumber: syz [ 639.604932][T12902] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 639.665886][ T4326] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 639.885706][ T4326] usb 4-1: Using ep0 maxpacket: 32 [ 639.955500][ T4326] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 640.095553][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.249670][ T4326] usb 4-1: config 0 descriptor?? [ 643.898167][T12962] lo speed is unknown, defaulting to 1000 [ 643.948736][T12962] bond0 speed is unknown, defaulting to 1000 [ 644.076622][T12964] lo speed is unknown, defaulting to 1000 [ 644.202344][ T4326] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 644.246026][ T4326] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 644.254450][ T4326] dib0700: firmware download failed at 7 with -22 [ 644.294225][ T4326] usb 4-1: USB disconnect, device number 3 [ 644.691829][ T4340] usb 3-1: USB disconnect, device number 8 [ 644.722043][T12964] bond0 speed is unknown, defaulting to 1000 [ 646.094366][T12985] device syzkaller0 entered promiscuous mode [ 646.423180][T12988] random: crng reseeded on system resumption [ 647.676234][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2620'. [ 649.958844][T12980] lo speed is unknown, defaulting to 1000 [ 649.961817][T13016] netlink: 'syz.1.2621': attribute type 10 has an invalid length. [ 649.991822][T13017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2621'. [ 650.045808][T12980] bond0 speed is unknown, defaulting to 1000 [ 650.519519][T13028] lo speed is unknown, defaulting to 1000 [ 650.534325][T13028] bond0 speed is unknown, defaulting to 1000 [ 650.537516][T13025] lo speed is unknown, defaulting to 1000 [ 650.885573][T13025] bond0 speed is unknown, defaulting to 1000 [ 652.264639][T13039] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 652.676308][T13050] device syzkaller0 entered promiscuous mode [ 654.906110][ T4340] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 655.136005][ T4340] usb 4-1: Using ep0 maxpacket: 32 [ 655.161121][ T4340] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 655.185851][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.243281][ T4340] usb 4-1: config 0 descriptor?? [ 655.721117][ T4340] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 655.740742][ T4340] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 655.764996][ T4340] dib0700: firmware download failed at 7 with -22 [ 658.350921][T13076] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2641'. [ 658.397564][T13079] lo speed is unknown, defaulting to 1000 [ 658.404869][T13079] bond0 speed is unknown, defaulting to 1000 [ 658.614757][ T127] usb 4-1: USB disconnect, device number 4 [ 659.106463][ T4340] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 659.308808][ T4340] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 659.324223][ T4340] usb 2-1: config 0 has no interface number 0 [ 659.341220][ T4340] usb 2-1: config 0 interface 122 has no altsetting 0 [ 659.397091][T13107] device syzkaller0 entered promiscuous mode [ 659.413263][ T4340] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 659.499307][ T127] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 659.555131][ T4340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.651402][ T4340] usb 2-1: Product: syz [ 659.703082][ T4340] usb 2-1: Manufacturer: syz [ 659.706056][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 659.731545][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 659.736024][ T4340] usb 2-1: SerialNumber: syz [ 659.772225][ T127] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 659.794564][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.807974][ T127] usb 4-1: Product: syz [ 659.812374][ T127] usb 4-1: Manufacturer: syz [ 659.834341][ T127] usb 4-1: SerialNumber: syz [ 659.849721][ T4340] usb 2-1: config 0 descriptor?? [ 659.870736][ T127] usb 4-1: config 0 descriptor?? [ 659.898129][ T127] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 659.960766][ T127] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 660.492693][T13096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.494850][ T127] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 660.552402][T13096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.572108][T13121] netlink: 'syz.0.2654': attribute type 1 has an invalid length. [ 660.591355][T13121] netlink: 'syz.0.2654': attribute type 2 has an invalid length. [ 660.992937][ T127] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 661.055783][ T127] em28xx 4-1:0.0: board has no eeprom [ 661.106291][ T4340] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 661.201641][T13127] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 661.219303][T13127] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 661.230027][T13127] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 661.384511][ T4340] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 661.454702][ T4340] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.497340][ T4340] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 661.535697][T13127] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 661.560830][ T4340] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 661.614114][ T4340] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 661.652584][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 661.690072][ T4340] usb 5-1: Product: syz [ 661.703767][ T4340] usb 5-1: Manufacturer: syz [ 661.758678][ T4340] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 661.863396][T13127] device geneve4 entered promiscuous mode [ 662.199040][ T4318] usb 5-1: USB disconnect, device number 11 [ 662.295840][ T127] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 662.320696][ T127] em28xx 4-1:0.0: dvb set to bulk mode. [ 662.387201][T12954] em28xx 4-1:0.0: Binding DVB extension [ 662.480506][T13127] IPv6: ADDRCONF(NETDEV_CHANGE): geneve4: link becomes ready [ 662.631673][T13127] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 662.643081][T13127] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 662.655895][T13127] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 662.687029][T13127] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 662.727980][T12954] em28xx 4-1:0.0: Registering input extension [ 662.822406][T12954] usb 4-1: USB disconnect, device number 5 [ 662.856315][T12954] em28xx 4-1:0.0: Disconnecting em28xx [ 662.907040][T12954] em28xx 4-1:0.0: Closing input extension [ 662.922611][ T4340] usb 2-1: USB disconnect, device number 6 [ 662.934817][ T4340] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 663.004829][T12954] em28xx 4-1:0.0: Freeing device [ 663.048350][T13130] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2656'. [ 663.453319][T13134] device syzkaller0 entered promiscuous mode [ 664.433519][T13151] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 664.486090][T13151] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 666.984345][T13158] netlink: 'syz.4.2666': attribute type 10 has an invalid length. [ 667.003780][T13161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2666'. [ 667.016206][T13142] lo speed is unknown, defaulting to 1000 [ 667.036534][T13143] lo speed is unknown, defaulting to 1000 [ 667.043335][T13146] lo speed is unknown, defaulting to 1000 [ 667.045499][T13142] bond0 speed is unknown, defaulting to 1000 [ 667.231433][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2671'. [ 667.431659][T13146] bond0 speed is unknown, defaulting to 1000 [ 667.702970][T13143] bond0 speed is unknown, defaulting to 1000 [ 669.083579][T13207] netlink: 'syz.3.2679': attribute type 10 has an invalid length. [ 669.182482][T13207] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.228040][T13207] bond0: (slave team0): Enslaving as an active interface with an up link [ 669.713649][T13215] netlink: 'syz.2.2682': attribute type 10 has an invalid length. [ 669.744303][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2682'. [ 670.528706][T13230] lo speed is unknown, defaulting to 1000 [ 670.600406][T13231] lo speed is unknown, defaulting to 1000 [ 670.643527][T13230] bond0 speed is unknown, defaulting to 1000 [ 671.025269][T13241] loop7: detected capacity change from 0 to 7 [ 671.034645][T13241] Dev loop7: unable to read RDB block 7 [ 671.046856][T13241] loop7: unable to read partition table [ 671.052911][T13241] loop7: partition table beyond EOD, truncated [ 671.065486][T13241] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 671.257194][T13231] bond0 speed is unknown, defaulting to 1000 [ 671.326500][T13247] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 671.403043][T13249] device syzkaller0 entered promiscuous mode [ 671.516104][ T22] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 671.717886][ T22] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 671.732332][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.753499][ T22] usb 1-1: config 0 descriptor?? [ 672.809708][ T22] pegasus: probe of 1-1:0.0 failed with error -71 [ 672.851487][ T22] usb 1-1: USB disconnect, device number 6 [ 674.879932][T13267] device syzkaller0 entered promiscuous mode [ 675.271749][T13287] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2704'. [ 675.331953][T13289] loop7: detected capacity change from 0 to 7 [ 675.409648][T13289] Dev loop7: unable to read RDB block 7 [ 675.431518][T13289] loop7: unable to read partition table [ 675.486343][T13289] loop7: partition table beyond EOD, truncated [ 675.514437][T13289] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 675.629059][ T3638] Dev loop7: unable to read RDB block 7 [ 675.639645][ T3638] loop7: unable to read partition table [ 675.676601][ T3638] loop7: partition table beyond EOD, truncated [ 676.161702][T13302] netlink: 'syz.2.2707': attribute type 4 has an invalid length. [ 676.334442][T13307] netlink: 'syz.2.2707': attribute type 4 has an invalid length. [ 676.652410][ T4318] lo speed is unknown, defaulting to 1000 [ 676.932861][T13307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 677.195870][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 677.619177][T13331] tipc: Enabled bearer , priority 0 [ 677.654281][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2717'. [ 677.879300][T13334] device syzkaller0 entered promiscuous mode [ 678.003181][T13336] tipc: Resetting bearer [ 678.046652][T13299] block device autoloading is deprecated and will be removed. [ 678.056772][T13330] tipc: Resetting bearer [ 678.254494][T13330] tipc: Disabling bearer [ 678.795881][ T4340] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 678.817870][T13343] lo speed is unknown, defaulting to 1000 [ 678.868294][T13343] bond0 speed is unknown, defaulting to 1000 [ 678.935721][T13346] lo speed is unknown, defaulting to 1000 [ 678.995862][ T4340] usb 4-1: Using ep0 maxpacket: 16 [ 679.003198][ T4340] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 679.025092][ T4340] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 679.052946][ T4340] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 679.079550][ T4340] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 679.105871][T12954] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 679.115440][ T4340] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 679.157331][ T4340] usb 4-1: config 0 has no interface number 0 [ 679.179236][ T4340] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 679.211111][ T4340] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 679.250372][ T4340] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 679.283146][ T4340] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.323299][ T4340] usb 4-1: config 0 interface 125 has no altsetting 0 [ 679.335769][T12954] usb 5-1: Using ep0 maxpacket: 16 [ 679.344152][T12954] usb 5-1: config 0 has no interfaces? [ 679.353584][ T4340] usb 4-1: config 0 interface 125 has no altsetting 2 [ 679.381379][ T4340] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 679.404012][T12954] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 679.412581][ T4340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.444927][T12954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.461430][ T4340] usb 4-1: Product: syz [ 679.481585][ T4340] usb 4-1: Manufacturer: syz [ 679.494514][ T4340] usb 4-1: SerialNumber: syz [ 679.527895][T12954] usb 5-1: config 0 descriptor?? [ 679.531149][ T4340] usb 4-1: config 0 descriptor?? [ 679.638933][T13346] bond0 speed is unknown, defaulting to 1000 [ 679.668879][ T4340] usb 4-1: selecting invalid altsetting 2 [ 679.768356][T12954] usb 5-1: USB disconnect, device number 12 [ 680.484155][ T4340] parport0: fix this legacy no-device port driver! [ 681.727780][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 681.744028][ T22] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 681.763908][ T22] usb 2-1: can't read configurations, error -71 [ 682.415792][ T4340] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 682.627899][ T4340] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 682.648297][ T4340] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.691292][ T4340] usb 1-1: config 0 has no interface number 0 [ 682.706612][ T4340] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 682.751722][ T4340] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.794729][ T127] usb 4-1: USB disconnect, device number 6 [ 682.853866][ T4340] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 682.904635][ T4340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.932488][T13382] lo speed is unknown, defaulting to 1000 [ 682.945657][ T4340] usb 1-1: Product: syz [ 682.965861][ T4340] usb 1-1: Manufacturer: syz [ 682.970556][ T4340] usb 1-1: SerialNumber: syz [ 682.988092][T13382] bond0 speed is unknown, defaulting to 1000 [ 683.007245][ T4340] usb 1-1: config 0 descriptor?? [ 683.100466][T13388] lo speed is unknown, defaulting to 1000 [ 683.215845][ T4340] usbtouchscreen: probe of 1-1:0.117 failed with error -32 [ 683.242568][ T4340] usb 1-1: USB disconnect, device number 7 [ 683.470848][T13388] bond0 speed is unknown, defaulting to 1000 [ 684.022317][T13401] device syzkaller0 entered promiscuous mode [ 685.677305][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.683726][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.393657][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2740'. [ 688.564554][T13442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2749'. [ 688.748889][T13446] device syzkaller0 entered promiscuous mode [ 689.336133][ T4340] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 689.467734][T13463] device syzkaller0 entered promiscuous mode [ 689.537134][ T4340] usb 1-1: Using ep0 maxpacket: 16 [ 689.544446][ T4340] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 689.584063][ T4340] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 689.608390][ T4340] usb 1-1: config 254 has no interface number 0 [ 689.622935][ T4340] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 689.676362][ T4340] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 0 [ 689.696793][ T4340] usb 1-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 689.759685][ T4340] usb 1-1: config 254 interface 235 has no altsetting 0 [ 689.778891][ T4340] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 689.799807][ T4340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.824002][ T4340] usb 1-1: Product: syz [ 689.833231][ T4340] usb 1-1: Manufacturer: syz [ 689.853520][ T4340] usb 1-1: SerialNumber: syz [ 689.891599][ T4340] usbtest 1-1:254.235: couldn't get endpoints, -22 [ 689.912000][ T4340] usbtest: probe of 1-1:254.235 failed with error -22 [ 690.094405][ T4318] usb 1-1: USB disconnect, device number 8 [ 692.063045][ T27] audit: type=1400 audit(1768254459.385:34): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=13509 comm="syz.0.2772" [ 693.459841][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2768'. [ 693.507409][T13506] lo speed is unknown, defaulting to 1000 [ 693.525158][T13506] bond0 speed is unknown, defaulting to 1000 [ 695.498058][T13539] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 695.524328][T13543] device syzkaller0 entered promiscuous mode [ 695.565114][T13552] netlink: 'syz.4.2783': attribute type 1 has an invalid length. [ 695.761061][T13558] device syzkaller0 entered promiscuous mode [ 697.111710][T13569] lo speed is unknown, defaulting to 1000 [ 697.170667][T13570] lo speed is unknown, defaulting to 1000 [ 697.198175][T13569] bond0 speed is unknown, defaulting to 1000 [ 697.670970][T13584] netlink: 'syz.0.2795': attribute type 5 has an invalid length. [ 697.707882][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2795'. [ 697.767564][T13584] (unnamed net_device) (uninitialized): down delay (48426) is not a multiple of miimon (2558), value rounded to 46044 ms [ 697.852124][T13584] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (2558), value rounded to 0 ms [ 698.061853][T13570] bond0 speed is unknown, defaulting to 1000 [ 698.081814][T13587] netlink: 'syz.0.2795': attribute type 5 has an invalid length. [ 698.166884][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2795'. [ 698.210678][T13587] bond3: down delay (48426) is not a multiple of miimon (2558), value rounded to 46044 ms [ 698.275749][T13587] bond3: peer notification delay (2365) is not a multiple of miimon (2558), value rounded to 0 ms [ 699.625479][T13598] ipt_CLUSTERIP: Please specify destination IP [ 699.732257][T13604] device syzkaller0 entered promiscuous mode [ 700.107137][T13614] tipc: Enabled bearer , priority 0 [ 700.150229][T13610] device syzkaller0 entered promiscuous mode [ 700.259491][T13614] tipc: Resetting bearer [ 700.320043][T13609] tipc: Resetting bearer [ 700.663946][T13609] tipc: Disabling bearer [ 701.611013][T13635] netlink: 4164 bytes leftover after parsing attributes in process `syz.0.2811'. [ 701.704354][T13637] device syzkaller0 entered promiscuous mode [ 701.986190][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 702.175699][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 702.184647][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 702.247502][ T22] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 703.972077][T13665] lo speed is unknown, defaulting to 1000 [ 704.001221][T13665] bond0 speed is unknown, defaulting to 1000 [ 704.296616][T13672] lo speed is unknown, defaulting to 1000 [ 704.369040][T13676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2823'. [ 704.539072][T13672] bond0 speed is unknown, defaulting to 1000 [ 704.682341][ T22] usb 1-1: string descriptor 0 read error: -71 [ 704.694148][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 704.781799][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.849622][ T22] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 704.878768][ T22] usb 1-1: no configuration chosen from 1 choice [ 704.902046][ T22] usb 1-1: USB disconnect, device number 9 [ 705.384382][T13683] device syzkaller0 entered promiscuous mode [ 706.069825][ T4340] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 706.277436][ T4340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.315802][ T4340] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 706.364083][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.433728][ T4340] usb 4-1: config 0 descriptor?? [ 706.872268][ T4340] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 707.022754][ T4340] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input9 [ 707.307750][ T4340] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 708.023176][ T4318] usb 4-1: USB disconnect, device number 7 [ 708.029535][ C1] keytouch 0003:0926:3333.0001: usb_submit_urb(ctrl) failed: -19 Stopping sshd: stopped /usr/sbin/sshd (pid 4026) OK Stopping crond: stopped /usr/sbin/crond (pid 4013) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3932) Stopping network: [ 711.575845][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2836'. [ 711.584820][T13744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2837'. [ 712.134120][T13767] lo speed is unknown, defaulting to 1000 [ 712.253876][T13767] bond0 speed is unknown, defaulting to 1000 [ 712.476156][ T4340] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 712.667609][ T4340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.682583][T13783] netlink: 'syz.1.2845': attribute type 10 has an invalid length. [ 712.690958][ T4340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 OK [ 712.752937][ T4340] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 712.775643][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Stopping iptables: [ 712.870178][ T4340] usb 4-1: config 0 descriptor?? [ 712.955834][ T22] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 712.976691][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 713.125952][ T22] usb 5-1: device descriptor read/64, error -32 [ 713.317210][ T4340] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 713.360911][ T4340] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 713.397433][ T22] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 713.432322][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 713.515795][ T4340] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 713.586992][ T22] usb 5-1: device descriptor read/64, error -32 OK [ 713.706059][ T22] usb usb5-port1: attempt power cycle [ 713.717126][T13794] netlink: 'syz.2.2846': attribute type 3 has an invalid length. Stopping system message bus: [ 714.046167][ T4318] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 714.115896][ T22] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 714.124132][T13776] ================================================================== [ 714.132233][T13776] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x60b/0xdd0 [ 714.139663][T13776] Read of size 42 at addr ffffc90003b07d41 by task syz.3.2844/13776 [ 714.147644][T13776] [ 714.149977][T13776] CPU: 1 PID: 13776 Comm: syz.3.2844 Not tainted syzkaller #0 [ 714.157449][T13776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.167533][T13776] Call Trace: [ 714.170837][T13776] [ 714.173788][T13776] dump_stack_lvl+0x168/0x22e [ 714.178518][T13776] ? cp2112_xfer+0x60b/0xdd0 [ 714.183148][T13776] ? show_regs_print_info+0x12/0x12 [ 714.188376][T13776] ? load_image+0x3b0/0x3b0 [ 714.192904][T13776] ? register_lock_class+0xb1/0x860 [ 714.198142][T13776] ? __virt_addr_valid+0xbf/0x540 [ 714.203189][T13776] ? cp2112_xfer+0x60b/0xdd0 [ 714.207790][T13776] print_report+0xa8/0x210 [ 714.212228][T13776] kasan_report+0x10b/0x140 [ 714.216761][T13776] ? mark_lock+0x94/0x320 [ 714.221147][T13776] ? cp2112_xfer+0x60b/0xdd0 [ 714.225770][T13776] ? cp2112_xfer+0x60b/0xdd0 [ 714.230391][T13776] kasan_check_range+0x27b/0x290 [ 714.235376][T13776] memcpy+0x25/0x60 [ 714.239234][T13776] cp2112_xfer+0x60b/0xdd0 [ 714.243693][T13776] ? cp2112_i2c_xfer+0xed0/0xed0 [ 714.248647][T13776] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 714.254654][T13776] __i2c_smbus_xfer+0x771/0x1fc0 [ 714.259620][T13776] ? _raw_spin_unlock+0x40/0x40 [ 714.264491][T13776] ? cp2112_i2c_xfer+0xed0/0xed0 [ 714.269467][T13776] ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0 [ 714.275735][T13776] ? rt_mutex_adjust_prio_chain+0x22c0/0x22c0 [ 714.281830][T13776] ? __might_fault+0xa6/0x120 [ 714.286526][T13776] ? i2c_smbus_xfer+0x11d/0x3a0 [ 714.291400][T13776] i2c_smbus_xfer+0x263/0x3a0 [ 714.296128][T13776] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 714.301445][T13776] ? __might_fault+0xc2/0x120 [ 714.306137][T13776] ? __might_fault+0xa6/0x120 [ 714.310844][T13776] i2cdev_ioctl_smbus+0x3e3/0x650 [ 714.315920][T13776] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0 [ 714.321052][T13776] ? __might_fault+0xa6/0x120 [ 714.325747][T13776] ? __might_fault+0xc2/0x120 [ 714.330438][T13776] ? __might_fault+0xa6/0x120 [ 714.335147][T13776] i2cdev_ioctl+0x545/0x750 [ 714.339662][T13776] ? i2cdev_write+0x120/0x120 [ 714.344354][T13776] ? bpf_lsm_file_ioctl+0x5/0x10 [ 714.349346][T13776] ? security_file_ioctl+0x7c/0xa0 [ 714.354487][T13776] ? i2cdev_write+0x120/0x120 [ 714.359177][T13776] __se_sys_ioctl+0xfa/0x170 [ 714.363794][T13776] do_syscall_64+0x4c/0xa0 [ 714.368242][T13776] ? clear_bhb_loop+0x60/0xb0 [ 714.372961][T13776] ? clear_bhb_loop+0x60/0xb0 [ 714.377676][T13776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.383593][T13776] RIP: 0033:0x7f97cc78f749 [ 714.388034][T13776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.407660][T13776] RSP: 002b:00007f97cd586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 714.416094][T13776] RAX: ffffffffffffffda RBX: 00007f97cc9e5fa0 RCX: 00007f97cc78f749 [ 714.424093][T13776] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 714.432080][T13776] RBP: 00007f97cc813f91 R08: 0000000000000000 R09: 0000000000000000 [ 714.440070][T13776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.448057][T13776] R13: 00007f97cc9e6038 R14: 00007f97cc9e5fa0 R15: 00007fffabc84628 [ 714.456052][T13776] [ 714.459087][T13776] [ 714.461421][T13776] The buggy address belongs to stack of task syz.3.2844/13776 [ 714.468891][T13776] and is located at offset 33 in frame: [ 714.474538][T13776] i2cdev_ioctl_smbus+0x0/0x650 [ 714.479422][T13776] [ 714.481765][T13776] This frame has 1 object: [ 714.486204][T13776] [32, 66) 'temp' [ 714.486215][T13776] [ 714.492266][T13776] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90003b00000 allocated at copy_process+0x5bd/0x4020 [ 714.505266][T13776] The buggy address belongs to the physical page: [ 714.511706][T13776] page:ffffea00007bfb80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1efee [ 714.521874][T13776] memcg:ffff88807e26ea82 [ 714.526123][T13776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 714.533260][T13776] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 714.541873][T13776] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff88807e26ea82 [ 714.550474][T13776] page dumped because: kasan: bad access detected [ 714.556905][T13776] page_owner tracks the page as allocated [ 714.562637][T13776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 4021, tgid 4021 (sshd), ts 48097592859, free_ts 41618064365 [ 714.581149][T13776] post_alloc_hook+0x173/0x1a0 [ 714.585944][T13776] get_page_from_freelist+0x1a26/0x1ac0 [ 714.591518][T13776] __alloc_pages+0x1df/0x4e0 [ 714.596132][T13776] __vmalloc_node_range+0x959/0x1390 [ 714.601438][T13776] dup_task_struct+0x3d3/0x6b0 [ 714.606223][T13776] copy_process+0x5bd/0x4020 [ 714.610839][T13776] kernel_clone+0x225/0x8b0 [ 714.615363][T13776] __x64_sys_clone+0x17c/0x1d0 [ 714.620149][T13776] do_syscall_64+0x4c/0xa0 [ 714.624591][T13776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.630509][T13776] page last free stack trace: [ 714.635191][T13776] free_unref_page_prepare+0x8b4/0x9a0 [ 714.640674][T13776] free_unref_page+0x2e/0x3f0 [ 714.645375][T13776] qlist_free_all+0x76/0xe0 [ 714.649903][T13776] kasan_quarantine_reduce+0x144/0x160 [ 714.655382][T13776] __kasan_slab_alloc+0x1e/0x80 [ 714.660271][T13776] slab_post_alloc_hook+0x4b/0x480 [ 714.665429][T13776] kmem_cache_alloc+0x123/0x2f0 [ 714.670325][T13776] getname_flags+0xb7/0x500 [ 714.674853][T13776] __x64_sys_mkdir+0x5b/0x80 [ 714.679458][T13776] do_syscall_64+0x4c/0xa0 [ 714.683909][T13776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.689874][T13776] [ 714.692214][T13776] Memory state around the buggy address: [ 714.697857][T13776] ffffc90003b07c00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 714.705932][T13776] ffffc90003b07c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 714.714005][T13776] >ffffc90003b07d00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 02 f3 f3 f3 [ 714.722078][T13776] ^ [ 714.729294][T13776] ffffc90003b07d80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 714.737367][T13776] ffffc90003b07e00: f1 f1 f1 f1 04 f2 00 00 f2 f2 00 00 f3 f3 f3 f3 [ 714.745440][T13776] ================================================================== [ 714.786200][T13776] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 714.793436][T13776] CPU: 0 PID: 13776 Comm: syz.3.2844 Not tainted syzkaller #0 [ 714.800908][T13776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.810993][T13776] Call Trace: [ 714.814277][T13776] [ 714.817271][T13776] dump_stack_lvl+0x168/0x22e [ 714.822002][T13776] ? memcpy+0x3c/0x60 [ 714.826007][T13776] ? show_regs_print_info+0x12/0x12 [ 714.831254][T13776] ? load_image+0x3b0/0x3b0 [ 714.835793][T13776] panic+0x2c9/0x710 [ 714.839734][T13776] ? bpf_jit_dump+0xd0/0xd0 [ 714.844270][T13776] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 714.850187][T13776] ? _raw_spin_unlock+0x40/0x40 [ 714.855097][T13776] ? print_memory_metadata+0x314/0x400 [ 714.860605][T13776] check_panic_on_warn+0x80/0xa0 [ 714.865593][T13776] ? cp2112_xfer+0x60b/0xdd0 [ 714.870241][T13776] end_report+0x66/0x110 [ 714.874529][T13776] kasan_report+0x118/0x140 [ 714.879063][T13776] ? mark_lock+0x94/0x320 [ 714.883427][T13776] ? cp2112_xfer+0x60b/0xdd0 [ 714.888068][T13776] ? cp2112_xfer+0x60b/0xdd0 [ 714.892682][T13776] kasan_check_range+0x27b/0x290 [ 714.897641][T13776] memcpy+0x25/0x60 [ 714.901470][T13776] cp2112_xfer+0x60b/0xdd0 [ 714.905932][T13776] ? cp2112_i2c_xfer+0xed0/0xed0 [ 714.910901][T13776] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 714.916927][T13776] __i2c_smbus_xfer+0x771/0x1fc0 [ 714.921904][T13776] ? _raw_spin_unlock+0x40/0x40 [ 714.926773][T13776] ? cp2112_i2c_xfer+0xed0/0xed0 [ 714.931767][T13776] ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0 [ 714.938049][T13776] ? rt_mutex_adjust_prio_chain+0x22c0/0x22c0 [ 714.944157][T13776] ? __might_fault+0xa6/0x120 [ 714.948870][T13776] ? i2c_smbus_xfer+0x11d/0x3a0 [ 714.953765][T13776] i2c_smbus_xfer+0x263/0x3a0 [ 714.958478][T13776] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 714.963818][T13776] ? __might_fault+0xc2/0x120 [ 714.968513][T13776] ? __might_fault+0xa6/0x120 [ 714.973234][T13776] i2cdev_ioctl_smbus+0x3e3/0x650 [ 714.978311][T13776] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0 [ 714.983459][T13776] ? __might_fault+0xa6/0x120 [ 714.988174][T13776] ? __might_fault+0xc2/0x120 [ 714.992866][T13776] ? __might_fault+0xa6/0x120 [ 714.997589][T13776] i2cdev_ioctl+0x545/0x750 [ 715.002112][T13776] ? i2cdev_write+0x120/0x120 [ 715.006813][T13776] ? bpf_lsm_file_ioctl+0x5/0x10 [ 715.011782][T13776] ? security_file_ioctl+0x7c/0xa0 [ 715.016939][T13776] ? i2cdev_write+0x120/0x120 [ 715.021650][T13776] __se_sys_ioctl+0xfa/0x170 [ 715.026275][T13776] do_syscall_64+0x4c/0xa0 [ 715.030726][T13776] ? clear_bhb_loop+0x60/0xb0 [ 715.035442][T13776] ? clear_bhb_loop+0x60/0xb0 [ 715.040170][T13776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.046119][T13776] RIP: 0033:0x7f97cc78f749 [ 715.050547][T13776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.070193][T13776] RSP: 002b:00007f97cd586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 715.078649][T13776] RAX: ffffffffffffffda RBX: 00007f97cc9e5fa0 RCX: 00007f97cc78f749 [ 715.086649][T13776] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 715.094644][T13776] RBP: 00007f97cc813f91 R08: 0000000000000000 R09: 0000000000000000 [ 715.102657][T13776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.110659][T13776] R13: 00007f97cc9e6038 R14: 00007f97cc9e5fa0 R15: 00007fffabc84628 [ 715.118670][T13776] [ 715.122810][T13776] Kernel Offset: disabled [ 715.127170][T13776] Rebooting in 86400 seconds..