last executing test programs: 3.236184438s ago: executing program 4 (id=3254): writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.972750109s ago: executing program 3 (id=3259): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.957485871s ago: executing program 2 (id=3260): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.808340605s ago: executing program 2 (id=3261): socket(0x2, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 2.712101448s ago: executing program 3 (id=3263): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 2.585147027s ago: executing program 0 (id=3264): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae11a973735b36d5b1b63e91c00305d9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263093ca9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c766000a5e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3c901cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ffffff7f000000007f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca405d8c5f64fdb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb40800000077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e5e2c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53dc10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fa6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c02b5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbb25c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x31, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b1"}, @generic={0x80, 0x13, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0"}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x40, 0x29, 0x36, {0x5e, 0x4, '\x00', [@generic={0xff, 0x13, "50d650847249ad288702ebd0d654b985e8908d"}, @pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}]}}}, @rthdr={{0x18}}], 0x118}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200), 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) sendto$inet6(0xffffffffffffffff, &(0x7f0000000ec0)='\n', 0x1, 0x44000, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.517114548s ago: executing program 4 (id=3265): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gre={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 2.413454253s ago: executing program 4 (id=3266): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)='\n\x00', 0x2, 0xc0d0, 0x0, 0x0) close(0xffffffffffffffff) 2.296505122s ago: executing program 0 (id=3267): socket$inet6(0xa, 0x2, 0x3a) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x2) connect$inet6(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$loop(&(0x7f0000000500), 0x47ffffa, 0x60500) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4080015}, 0x4040040) r4 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x1012, 0x221e, 0xffffeff6, 0xc251, 0x0, 0x1}) 2.271564399s ago: executing program 4 (id=3268): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f00000001c0)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) 2.108680838s ago: executing program 1 (id=3269): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) sendmmsg(r2, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000140)="d7feabdb24ee9a3a834bdf124c3c95e3397cd4a7da78b3d740b5750fb87da05d44c115274a80cebaccd2c7cd3a1955975c2abcda85f05160324e71221e4ae73de3981f85ac39d0871d35b2d5862961646ff7", 0x52}, {&(0x7f00000004c0)="b61fe6792b31fde6aa56725320e59a4af43253149524bcbfc4e3409f3557b541310fb56eebea44d9581e6ce957150b328eddbdd43bd96ac3247b6c6e6f6cbd706aa40412967ffef84632d32fd0131ba3cd7e14af1f6d6e42242a62a9a2001966c6eaff2d9a29ee1375ba1ef04328fbbd5b26d9324edb039cfd13590d4b01b9e287de6ba9635315253213964c4c16404435d47377f9c55aff81856da65a671be96200681a66290686d7844280d35e1053168e9937542ad5c94ab8bfcad570d6992c787a2c7addd5f51dc60ffa96a24e2ef35a0f44709f2514831f9b255024a0b9724147f168b82bf888cf173a9bfc53a58b3790491f318a6264ebf8", 0xfb}, {&(0x7f0000000840)="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", 0xd5c}], 0x3}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001a00)="19e97a517727", 0x6}], 0x1, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x378}}, {{0x0, 0x0, 0x0}}], 0x3, 0x24008c00) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.893470615s ago: executing program 1 (id=3270): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.520542078s ago: executing program 1 (id=3271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x80017}, 0x4048080) 1.40916572s ago: executing program 1 (id=3272): r0 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 1.075499724s ago: executing program 1 (id=3273): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000240)={0x0, 0x9, 0x5, 0x3, 0x6, 0x0, [{0x7, 0x7f, 0x0, '\x00', 0x10}, {0xe, 0x1, 0x98}, {0x9, 0x4, 0x3, '\x00', 0x2000}, {0x0, 0x10, 0x10001, '\x00', 0x501}, {0x6, 0x7fff, 0x40, '\x00', 0x1}, {0x5, 0x3, 0x7, '\x00', 0x2002}]}) 914.72572ms ago: executing program 1 (id=3274): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0xff, 0x2270, 0x1000, 0x9, 0x44, 0x8000, 0xfffd, 0xec, 0x100, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x20, 0xa, 0x16, "26736bd77403e06889eacf2e874a391d7d169079eb0b"}, 0x0, 0x0, 0x0, &(0x7f0000000340)}) syz_usb_control_io(r0, 0x0, 0x0) 913.656775ms ago: executing program 2 (id=3275): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gre={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 820.702105ms ago: executing program 4 (id=3276): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 748.767363ms ago: executing program 2 (id=3277): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)='\n\x00', 0x2, 0xc0d0, 0x0, 0x0) close(0xffffffffffffffff) 670.041435ms ago: executing program 3 (id=3278): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 540.555744ms ago: executing program 2 (id=3279): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000000)) r4 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 532.392498ms ago: executing program 0 (id=3280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) sendmmsg(r2, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000140)="d7feabdb24ee9a3a834bdf124c3c95e3397cd4a7da78b3d740b5750fb87da05d44c115274a80cebaccd2c7cd3a1955975c2abcda85f05160324e71221e4ae73de3981f85ac39d0871d35b2d5862961646ff7", 0x52}, {&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000840)="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", 0xd5c}], 0x3}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001a00)="19e97a517727", 0x6}], 0x1, &(0x7f0000001b80)=ANY=[@ANYBLOB="a0000000000000001701000009000000debb5d6c0af9afcbed94d315b49fd2b6b6f08d75be013fa340dcfcf32fb6521c96bdd3a1730ceecf9b42b18115ddf1798318ae812874ad4eb28025597fd6f45dc5ee42a85b050a357838a0a699679f13e85a2fe2844f25cbdd08468faf98ebdb981e0db38cd4dc170650cb3d7cae1d896ee229af760b2fcbae35b71b2218ee27dcef49bc670a4419ebceb40000000000e00000000000000019010000070000001da6946c15027aa0a59ef97e0033d25736c9d8ed5e148585542d1130d8f016f1473068a7956bf29ec26d65b92e14d30c9e94b6f43333729cf2789408071fa31b086be31c289d46d3cc9fb8c3a0b25e719e86bcb22ea2a61d4730b918c53a2e0636fb794c0a77e65e0131f450bc782b4b2827bca454324c12801757e56896d63e93d6a698c8f602cc341dd21667b87025d7ebb9f4b7047ac9cac20729d0d4e2398e76f4fc934631c53ca24741874ba81c8f60e8864fc230b9d9ba91ab65bf317c5b05ae290249ad0e74be64f4e3000000a0000000000000000100000000000000aba3def019f7a48139aca56234d723f58c5681d1a1e62153d0458c8321a0caba9694b3fa0044c4bb62e400ee14e8b971af4856169b5e30049a857a05d423c97ed18b8414efd80e51b16ea79c9af6bb45c57906d51e157a56fcb158946dcab8e1da0132a7d6dd7319ae824104a86e7c36144702595c9351d9de4b9ca5beb17bb461fad2d6d7974788473fe51e5d192e00580000000000000014000000030000006d200faa7dafd580a1e8c1d471f463c60a389846eb84902e6348545f90fee4f49e5a2da1b75b03e3562681bfc0a7604d54fb71c5d3fee6373e72cb118d97043d23528838aa00000030000000000000001100000001000000ad65994c09d2c92b2b26f243fc18fe4de02a745482597fba2a300b67240000007800000000000000020100000900000025e6741d7c5e267811c89c79a40402fa16936f05516ae603f794288085d75c55064efa349b85a6887b88cd590a77399aea83fbe2a3cb0ab46c0ea417ef9837a1c3b525570139e419491345b40500000000000000326974b685b9dfbdc94bef0fe0228d00000000005800"], 0x378}}, {{0x0, 0x0, 0x0}}], 0x3, 0x24008c00) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 379.801281ms ago: executing program 4 (id=3281): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 339.186872ms ago: executing program 3 (id=3282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x80017}, 0x4048080) 338.033892ms ago: executing program 0 (id=3283): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x4, 0x5, 0x4, 0x1ff, 0x4230, 0x500000000000000, 0x0, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x98341}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@arm64={0xfe, 0x1, 0x5, '\x00', 0x62fd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 244.282979ms ago: executing program 3 (id=3284): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)=""/173, 0xad}], 0x1, &(0x7f0000000080)=""/75, 0x4b}, 0xcce1}], 0x1, 0x20, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}}, 0x404c804) 138.299976ms ago: executing program 2 (id=3285): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0x10002) fcntl$addseals(r1, 0x409, 0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00'], 0x40}}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r5, 0x0) 72.298576ms ago: executing program 0 (id=3286): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 72.099548ms ago: executing program 3 (id=3287): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x200000c4) 0s ago: executing program 0 (id=3288): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10) kernel console output (not intermixed with test programs): 1219] macvlan8: entered promiscuous mode [ 231.060935][T11219] macvlan8: entered allmulticast mode [ 231.068438][T11219] bond20: entered promiscuous mode [ 231.074288][T11219] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 231.085064][T11219] bond20: left promiscuous mode [ 231.444540][ T5907] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 231.467729][T11236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2222'. [ 232.052677][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 232.063422][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.082744][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.176665][ T5907] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 232.203163][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 232.216514][ T5907] usb 2-1: Product: syz [ 232.223652][ T5907] usb 2-1: Manufacturer: syz [ 232.228256][ T5907] usb 2-1: SerialNumber: syz [ 232.269585][ T5907] usb 2-1: config 0 descriptor?? [ 232.297448][ T5907] hub 2-1:0.0: bad descriptor, ignoring hub [ 232.314712][ T5907] hub 2-1:0.0: probe with driver hub failed with error -5 [ 232.547421][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'. [ 232.560677][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'. [ 232.572019][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'. [ 232.584535][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'. [ 232.616516][ T5293] usb 2-1: USB disconnect, device number 2 [ 232.691437][T11265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2233'. [ 232.944812][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 233.113376][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 233.121042][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.131255][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.150791][ T10] usb 2-1: string descriptor 0 read error: -22 [ 233.157168][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 233.167304][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 233.178359][ T10] usb 2-1: config 0 descriptor?? [ 233.194121][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 233.200044][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 233.546873][ T10] usb 2-1: USB disconnect, device number 3 [ 234.556699][T11317] tipc: Started in network mode [ 234.562789][T11317] tipc: Node identity 4, cluster identity 4711 [ 234.574915][ T5907] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 234.577187][T11317] tipc: Node number set to 4 [ 234.732662][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 234.760814][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 234.778899][ T5907] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 234.800897][ T5907] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 234.812429][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 234.820987][ T5907] usb 1-1: Product: syz [ 234.826096][ T5907] usb 1-1: Manufacturer: syz [ 234.830709][ T5907] usb 1-1: SerialNumber: syz [ 234.843964][ T5907] usb 1-1: config 0 descriptor?? [ 234.856909][ T5907] hub 1-1:0.0: bad descriptor, ignoring hub [ 234.863832][ T5907] hub 1-1:0.0: probe with driver hub failed with error -5 [ 234.922842][ T5892] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 235.072695][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 235.081753][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.098985][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.114499][ T5892] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 235.123823][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 235.132454][ T5892] usb 2-1: Product: syz [ 235.137027][ T5892] usb 2-1: Manufacturer: syz [ 235.141688][ T5892] usb 2-1: SerialNumber: syz [ 235.157566][ T5892] usb 2-1: config 0 descriptor?? [ 235.159518][T11333] __nla_validate_parse: 2 callbacks suppressed [ 235.159532][T11333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2260'. [ 235.163132][ T797] usb 1-1: USB disconnect, device number 6 [ 235.168421][ T5892] hub 2-1:0.0: bad descriptor, ignoring hub [ 235.191955][ T5892] hub 2-1:0.0: probe with driver hub failed with error -5 [ 235.295972][T11335] netlink: 'syz.2.2261': attribute type 1 has an invalid length. [ 235.391552][T11335] 8021q: adding VLAN 0 to HW filter on device bond13 [ 235.438215][T11341] bond13: entered promiscuous mode [ 235.477549][T11334] bond13: left promiscuous mode [ 235.503475][ T5293] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 235.525373][ T10] usb 2-1: USB disconnect, device number 4 [ 235.612123][T11343] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 235.683890][ T5293] usb 1-1: Using ep0 maxpacket: 32 [ 235.701228][ T5293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 235.731975][ T5293] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 235.748463][ T5293] usb 1-1: string descriptor 0 read error: -22 [ 235.762673][ T5293] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 235.771716][ T5293] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 235.793348][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'. [ 235.805951][ T5293] usb 1-1: config 0 descriptor?? [ 235.813060][ T5293] hub 1-1:0.0: bad descriptor, ignoring hub [ 235.818978][ T5293] hub 1-1:0.0: probe with driver hub failed with error -5 [ 235.882688][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 236.063676][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 236.070594][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.080931][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.123008][ T5892] usb 1-1: USB disconnect, device number 7 [ 236.123376][ T10] usb 2-1: string descriptor 0 read error: -22 [ 236.139006][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 236.158298][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 236.175089][ T10] usb 2-1: config 0 descriptor?? [ 236.188744][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 236.202633][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 236.449788][T11369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2274'. [ 236.502968][ T5892] usb 2-1: USB disconnect, device number 5 [ 236.655433][T11377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2278'. [ 237.199533][T11395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2285'. [ 237.388680][T11403] netlink: 'syz.0.2289': attribute type 1 has an invalid length. [ 237.515416][T11405] syzkaller0: entered promiscuous mode [ 237.520921][T11405] syzkaller0: entered allmulticast mode [ 237.558832][T11409] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 237.590752][T11409] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 237.602121][T11409] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 237.623870][ T5892] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 237.636113][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2292'. [ 237.650282][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2292'. [ 237.701248][T11409] macvlan4: entered promiscuous mode [ 237.708191][T11409] macvlan4: entered allmulticast mode [ 237.714999][T11409] bond8: entered promiscuous mode [ 237.720794][T11409] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 237.730515][T11409] bond8: left promiscuous mode [ 237.792682][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 237.799690][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 237.814893][ T5892] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 237.824688][ T5824] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 237.839305][ T5892] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 237.848809][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 237.857339][ T5892] usb 2-1: Product: syz [ 237.861566][ T5892] usb 2-1: Manufacturer: syz [ 237.881784][ T5892] usb 2-1: SerialNumber: syz [ 237.903530][ T5892] usb 2-1: config 0 descriptor?? [ 237.911296][ T5892] hub 2-1:0.0: bad descriptor, ignoring hub [ 237.989761][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 238.021591][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.054773][ T5824] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 238.070190][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 238.072707][ T5892] hub 2-1:0.0: probe with driver hub failed with error -5 [ 238.106598][ T5824] usb 5-1: Product: syz [ 238.114590][ T5824] usb 5-1: Manufacturer: syz [ 238.122519][ T5824] usb 5-1: SerialNumber: syz [ 238.148335][ T5824] usb 5-1: config 0 descriptor?? [ 238.165319][ T5824] hub 5-1:0.0: bad descriptor, ignoring hub [ 238.174779][ T5892] usb 2-1: USB disconnect, device number 6 [ 238.174783][ T5824] hub 5-1:0.0: probe with driver hub failed with error -5 [ 238.483233][ T5824] usb 5-1: USB disconnect, device number 6 [ 238.624400][ T5892] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 238.750922][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2304'. [ 238.760010][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2304'. [ 238.783072][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 238.790162][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 238.801198][ T5892] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 238.814822][ T5892] usb 2-1: string descriptor 0 read error: -22 [ 238.822039][ T5892] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 238.832316][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 238.832899][ T5824] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 238.843778][ T5892] usb 2-1: config 0 descriptor?? [ 238.858702][ T5892] hub 2-1:0.0: bad descriptor, ignoring hub [ 238.867507][ T5892] hub 2-1:0.0: probe with driver hub failed with error -5 [ 238.873815][T11443] netlink: 'syz.3.2305': attribute type 1 has an invalid length. [ 238.911464][T11443] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 238.922984][T11443] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 238.957944][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 238.977446][T11445] macvlan4: entered promiscuous mode [ 238.983135][T11445] macvlan4: entered allmulticast mode [ 238.988966][T11445] bond9: entered promiscuous mode [ 238.995960][T11445] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 239.004815][T11445] bond9: left promiscuous mode [ 239.016567][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 239.024100][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.040155][ T5824] usb 5-1: string descriptor 0 read error: -22 [ 239.046545][ T5824] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 239.055860][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 239.067580][ T5824] usb 5-1: config 0 descriptor?? [ 239.076294][ T5824] hub 5-1:0.0: bad descriptor, ignoring hub [ 239.082209][ T5824] hub 5-1:0.0: probe with driver hub failed with error -5 [ 239.173900][ T5892] usb 2-1: USB disconnect, device number 7 [ 239.405304][ T5892] usb 5-1: USB disconnect, device number 7 [ 239.622987][T11458] syz_tun: entered allmulticast mode [ 239.640665][T11457] syz_tun: left allmulticast mode [ 239.831940][T11469] netlink: 'syz.0.2314': attribute type 1 has an invalid length. [ 239.950319][T11469] 8021q: adding VLAN 0 to HW filter on device bond17 [ 239.980709][T11471] bond17: entered promiscuous mode [ 240.010326][T11468] bond17: left promiscuous mode [ 240.338837][T11494] lo: entered allmulticast mode [ 240.392828][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 240.552665][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 240.560218][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 240.570206][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 240.582021][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 240.591755][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 240.600041][ T10] usb 4-1: Product: syz [ 240.604539][ T10] usb 4-1: Manufacturer: syz [ 240.609130][ T10] usb 4-1: SerialNumber: syz [ 240.616490][ T10] usb 4-1: config 0 descriptor?? [ 240.622991][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 240.628908][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 240.958149][ T5892] usb 4-1: USB disconnect, device number 7 [ 241.084089][T11508] netlink: 'syz.4.2332': attribute type 1 has an invalid length. [ 241.106223][ T797] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 241.123597][T11508] 8021q: adding VLAN 0 to HW filter on device bond18 [ 241.135714][T11508] bond18: entered promiscuous mode [ 241.141525][T11508] __nla_validate_parse: 3 callbacks suppressed [ 241.141539][T11508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2332'. [ 241.161129][T11507] bond18: left promiscuous mode [ 241.171171][T11493] lo: left allmulticast mode [ 241.283267][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 241.293249][ T797] usb 2-1: Using ep0 maxpacket: 32 [ 241.300494][ T797] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.335570][ T797] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 241.352847][ T797] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 241.365691][ T797] usb 2-1: Product: syz [ 241.369861][ T797] usb 2-1: Manufacturer: syz [ 241.416267][ T797] usb 2-1: SerialNumber: syz [ 241.433652][ T797] usb 2-1: config 0 descriptor?? [ 241.444812][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 241.455705][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 241.461887][ T797] hub 2-1:0.0: bad descriptor, ignoring hub [ 241.479601][ T797] hub 2-1:0.0: probe with driver hub failed with error -5 [ 241.497378][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 241.532143][ T10] usb 4-1: string descriptor 0 read error: -22 [ 241.539991][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 241.567781][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 241.593440][ T10] usb 4-1: config 0 descriptor?? [ 241.615120][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 241.624948][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 241.655410][T11524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2339'. [ 241.741297][T11528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2340'. [ 241.927679][ T10] usb 2-1: USB disconnect, device number 8 [ 241.978233][ T5824] usb 4-1: USB disconnect, device number 8 [ 242.038370][T11536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2337'. [ 242.322676][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 242.601889][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 242.614447][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.672782][ T10] usb 2-1: string descriptor 0 read error: -22 [ 242.679091][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 242.721402][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 242.739689][ T10] usb 2-1: config 0 descriptor?? [ 242.751036][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 242.757752][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 243.074089][ T10] usb 2-1: USB disconnect, device number 9 [ 243.185952][T11556] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2351'. [ 243.238278][T11558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2352'. [ 244.127435][T11584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2359'. [ 244.321094][T11590] netlink: 'syz.0.2364': attribute type 1 has an invalid length. [ 244.365694][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 244.493183][T11595] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address [ 244.576881][T11595] bond18: (slave vxcan3): Error -95 calling set_mac_address [ 244.788170][T11601] macvlan4: entered promiscuous mode [ 244.842694][T11601] macvlan4: entered allmulticast mode [ 244.849194][T11601] bond18: entered promiscuous mode [ 244.856120][T11601] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 244.865648][T11601] bond18: left promiscuous mode [ 244.887898][T11603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.276178][T11611] lo: entered allmulticast mode [ 245.292662][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 245.301169][T11610] syzkaller0: entered promiscuous mode [ 245.317310][T11610] syzkaller0: entered allmulticast mode [ 245.462731][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 245.485386][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.604749][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 245.630267][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 245.638580][ T10] usb 4-1: Product: syz [ 245.646395][ T10] usb 4-1: Manufacturer: syz [ 245.651746][ T10] usb 4-1: SerialNumber: syz [ 245.660370][T11616] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.667653][T11616] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.689680][ T10] usb 4-1: config 0 descriptor?? [ 245.722884][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 245.729843][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 245.811557][T11616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.828406][T11616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.918911][T11616] bond5: left promiscuous mode [ 245.938102][T11616] bond12: left promiscuous mode [ 245.947464][T11616] bond14: left promiscuous mode [ 245.955321][T11616] bond15: left promiscuous mode [ 245.961795][T11616] bond16: left promiscuous mode [ 245.968607][T11616] bond17: left promiscuous mode [ 245.977579][ T65] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.992696][ T65] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.006827][ T65] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.033573][ T65] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.042949][ T797] usb 4-1: USB disconnect, device number 9 [ 246.067742][T11606] lo: left allmulticast mode [ 246.136244][T11625] syzkaller0: entered promiscuous mode [ 246.141822][T11625] syzkaller0: entered allmulticast mode [ 246.175334][T11628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2376'. [ 246.372897][ T5824] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 246.523238][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 246.535950][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.557957][ T5824] usb 4-1: string descriptor 0 read error: -22 [ 246.569795][ T5824] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 246.579326][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 246.615720][ T5824] usb 4-1: config 0 descriptor?? [ 246.650794][ T5824] hub 4-1:0.0: bad descriptor, ignoring hub [ 246.661927][ T5824] hub 4-1:0.0: probe with driver hub failed with error -5 [ 246.942914][ T797] usb 4-1: USB disconnect, device number 10 [ 247.401448][T11643] netlink: 'syz.3.2381': attribute type 1 has an invalid length. [ 247.582367][T11645] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 247.593764][T11645] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 247.707555][T11643] macvlan4: entered promiscuous mode [ 247.713078][T11643] macvlan4: entered allmulticast mode [ 247.720022][T11643] bond10: entered promiscuous mode [ 247.730670][T11658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2386'. [ 247.745136][T11643] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 247.764961][T11643] bond10: left promiscuous mode [ 247.820482][T11662] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 247.937984][T11652] syzkaller0: entered promiscuous mode [ 247.976697][T11652] syzkaller0: entered allmulticast mode [ 249.126868][T11695] netlink: 'syz.3.2397': attribute type 1 has an invalid length. [ 249.241569][T11697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2397'. [ 249.370094][T11695] 8021q: adding VLAN 0 to HW filter on device bond11 [ 249.384674][T11696] bond11: entered promiscuous mode [ 249.414183][T11694] bond11: left promiscuous mode [ 249.709892][T11711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2402'. [ 249.782685][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 249.789316][ C1] bridge0: topology change detected, propagating [ 249.853594][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2407'. [ 249.879264][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2407'. [ 249.887037][T11722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2406'. [ 249.920649][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2406'. [ 250.086535][T11725] syzkaller0: entered promiscuous mode [ 250.092205][T11725] syzkaller0: entered allmulticast mode [ 250.202937][T11736] netlink: 'syz.0.2412': attribute type 1 has an invalid length. [ 250.323011][T11741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2412'. [ 251.286628][T11736] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 251.287999][T11740] syzkaller0: entered promiscuous mode [ 251.302072][T11740] syzkaller0: entered allmulticast mode [ 251.507383][T11756] netlink: 'syz.2.2418': attribute type 1 has an invalid length. [ 251.531667][T11759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2420'. [ 251.600599][T11763] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 251.603290][T11764] netlink: 592 bytes leftover after parsing attributes in process `syz.4.2422'. [ 251.626208][T11763] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 251.749417][T11769] macvlan5: entered promiscuous mode [ 251.755199][T11769] macvlan5: entered allmulticast mode [ 251.761453][T11769] bond14: entered promiscuous mode [ 251.768523][T11769] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 251.791504][T11769] bond14: left promiscuous mode [ 251.978355][T11778] syzkaller0: entered promiscuous mode [ 251.984345][T11778] syzkaller0: entered allmulticast mode [ 251.996203][T11782] netlink: 'syz.2.2427': attribute type 1 has an invalid length. [ 252.030122][T11782] 8021q: adding VLAN 0 to HW filter on device bond15 [ 252.042969][T11782] bond15: entered promiscuous mode [ 252.049036][T11782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2427'. [ 252.061642][T11781] bond15: left promiscuous mode [ 252.163618][T11788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2430'. [ 252.259327][T11786] syzkaller0: entered promiscuous mode [ 252.265236][T11786] syzkaller0: entered allmulticast mode [ 252.432393][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'. [ 252.441841][T11800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2434'. [ 252.490024][T11803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2435'. [ 253.656025][T11821] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2439'. [ 253.799913][T11830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2442'. [ 254.578993][T11844] netlink: 'syz.2.2448': attribute type 13 has an invalid length. [ 254.597147][T11844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2448'. [ 254.924114][T11861] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 254.965602][T11853] syzkaller0: entered promiscuous mode [ 254.976487][T11853] syzkaller0: entered allmulticast mode [ 255.548209][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.554757][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.856484][T11904] __nla_validate_parse: 6 callbacks suppressed [ 256.856503][T11904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2468'. [ 257.023503][T11911] netlink: 'syz.2.2471': attribute type 11 has an invalid length. [ 257.047326][T11911] syzkaller0: entered promiscuous mode [ 257.067607][T11911] syzkaller0: entered allmulticast mode [ 257.255873][T11919] netlink: 'syz.2.2474': attribute type 1 has an invalid length. [ 257.301875][T11919] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address [ 257.313633][T11919] bond16: (slave vxcan3): Error -95 calling set_mac_address [ 257.351416][T11921] macvlan5: entered promiscuous mode [ 257.358253][T11921] macvlan5: entered allmulticast mode [ 257.364807][T11921] bond16: entered promiscuous mode [ 257.370551][T11921] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 257.383832][T11921] bond16: left promiscuous mode [ 257.462459][T11923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2475'. [ 257.534951][T11923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.683423][T11929] syzkaller0: entered promiscuous mode [ 257.708259][T11929] syzkaller0: entered allmulticast mode [ 257.711703][T11934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2480'. [ 257.874889][T11940] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2482'. [ 259.106790][T11958] tipc: Enabling of bearer rejected, failed to enable media [ 259.547838][T11985] netlink: 'syz.4.2499': attribute type 17 has an invalid length. [ 259.556278][T11985] netlink: 'syz.4.2499': attribute type 13 has an invalid length. [ 259.573172][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2499'. [ 259.765413][T11989] syzkaller0: entered promiscuous mode [ 259.771388][T11989] syzkaller0: entered allmulticast mode [ 259.916409][T11999] netlink: 'syz.0.2505': attribute type 1 has an invalid length. [ 261.120209][T12026] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2517'. [ 261.363854][T11999] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 261.552311][T12034] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2519'. [ 261.601267][T12034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2519'. [ 261.657307][T12038] netlink: 'syz.0.2522': attribute type 11 has an invalid length. [ 261.668088][T12038] syzkaller0: entered promiscuous mode [ 261.673931][T12038] syzkaller0: entered allmulticast mode [ 261.820589][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2524'. [ 262.042559][T12053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2529'. [ 262.095659][T12056] tipc: Enabled bearer , priority 0 [ 262.112998][T12056] syzkaller0: entered promiscuous mode [ 262.118468][T12056] syzkaller0: entered allmulticast mode [ 262.156520][T12056] tipc: Resetting bearer [ 262.186429][T12055] tipc: Resetting bearer [ 262.221208][T12055] tipc: Disabling bearer [ 262.307399][T12060] syzkaller0: entered promiscuous mode [ 262.326696][T12060] syzkaller0: entered allmulticast mode [ 262.393645][T12063] netlink: 'syz.4.2532': attribute type 1 has an invalid length. [ 262.922198][T12076] netlink: 'syz.3.2536': attribute type 11 has an invalid length. [ 263.627877][T12063] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 263.656427][T12078] syzkaller0: entered promiscuous mode [ 263.670436][T12078] syzkaller0: entered allmulticast mode [ 263.747395][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2537'. [ 263.872272][T12086] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2540'. [ 264.123299][T12102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2544'. [ 264.171200][T12102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2544'. [ 264.504635][T12115] netlink: 'syz.4.2550': attribute type 1 has an invalid length. [ 264.596256][T12115] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address [ 264.607998][T12115] bond19: (slave vxcan3): Error -95 calling set_mac_address [ 264.663866][T12122] macvlan6: entered promiscuous mode [ 264.669352][T12122] macvlan6: entered allmulticast mode [ 264.703981][T12122] bond19: entered promiscuous mode [ 264.741671][T12122] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 264.775646][T12122] bond19: left promiscuous mode [ 265.028822][T12126] netlink: 'syz.0.2554': attribute type 11 has an invalid length. [ 265.074740][T12126] syzkaller0: entered promiscuous mode [ 265.090345][T12126] syzkaller0: entered allmulticast mode [ 265.181456][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2559'. [ 265.614236][T12153] netlink: 'syz.1.2566': attribute type 1 has an invalid length. [ 265.720848][T12160] bond21: (slave vxcan3): The slave device specified does not support setting the MAC address [ 265.733191][T12160] bond21: (slave vxcan3): Error -95 calling set_mac_address [ 265.743329][T12153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2566'. [ 265.760095][T12159] lo: entered allmulticast mode [ 265.779320][T12166] netlink: 'syz.3.2570': attribute type 11 has an invalid length. [ 265.820225][T12164] syzkaller0: entered promiscuous mode [ 265.826071][T12164] syzkaller0: entered allmulticast mode [ 265.864803][T12153] macvlan8: entered promiscuous mode [ 265.870108][T12153] macvlan8: entered allmulticast mode [ 265.884389][T12153] bond21: entered promiscuous mode [ 265.914086][T12153] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 265.944161][T12153] bond21: left promiscuous mode [ 266.243814][T12184] syzkaller0: entered promiscuous mode [ 266.249310][T12184] syzkaller0: entered allmulticast mode [ 267.820061][T12219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2591'. [ 267.842364][T12222] netlink: 'syz.3.2592': attribute type 1 has an invalid length. [ 267.956060][T12228] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 267.970778][T12228] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 267.989907][T12222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2592'. [ 268.031490][T12222] macvlan4: entered promiscuous mode [ 268.037348][T12222] macvlan4: entered allmulticast mode [ 268.043682][T12222] bond12: entered promiscuous mode [ 268.049818][T12222] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 268.059339][T12222] bond12: left promiscuous mode [ 268.100839][T12236] netlink: 'syz.4.2597': attribute type 11 has an invalid length. [ 268.120384][T12235] syzkaller0: entered promiscuous mode [ 268.126943][T12235] syzkaller0: entered allmulticast mode [ 268.259947][T12243] syz_tun: entered allmulticast mode [ 268.550901][T12256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2607'. [ 268.736181][T12264] netlink: 'syz.4.2611': attribute type 1 has an invalid length. [ 268.748269][T12262] tipc: Enabled bearer , priority 0 [ 268.766411][T12262] syzkaller0: entered promiscuous mode [ 268.771896][T12262] syzkaller0: entered allmulticast mode [ 268.834486][T12266] bond20: (slave vxcan1): The slave device specified does not support setting the MAC address [ 268.846260][T12266] bond20: (slave vxcan1): Error -95 calling set_mac_address [ 268.854925][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2611'. [ 268.893835][T12275] netlink: 'syz.0.2614': attribute type 11 has an invalid length. [ 268.924066][T12262] tipc: Resetting bearer [ 268.932090][T12259] tipc: Resetting bearer [ 268.947773][T12259] tipc: Disabling bearer [ 268.960369][T12276] macvlan6: entered promiscuous mode [ 268.966457][T12276] macvlan6: entered allmulticast mode [ 268.972264][T12276] bond20: entered promiscuous mode [ 268.978024][T12276] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 268.988206][T12276] bond20: left promiscuous mode [ 269.018629][T12270] syzkaller0: entered promiscuous mode [ 269.051779][T12270] syzkaller0: entered allmulticast mode [ 269.265775][T12289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2621'. [ 269.527977][T12304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2626'. [ 269.777931][T12314] netlink: 'syz.2.2631': attribute type 11 has an invalid length. [ 269.793416][T12314] syzkaller0: entered promiscuous mode [ 269.798990][T12314] syzkaller0: entered allmulticast mode [ 269.914471][T12318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2633'. [ 270.017923][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 270.033331][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2636'. [ 270.153744][T12330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2638'. [ 270.579256][T12357] syzkaller0: entered promiscuous mode [ 270.584952][T12357] syzkaller0: entered allmulticast mode [ 271.002372][T12376] netlink: 'syz.2.2659': attribute type 11 has an invalid length. [ 271.270802][T12388] syzkaller0: entered promiscuous mode [ 271.303801][T12388] syzkaller0: entered allmulticast mode [ 272.707542][T12468] netlink: 'syz.2.2701': attribute type 1 has an invalid length. [ 272.771920][T12468] bond17: (slave vxcan3): The slave device specified does not support setting the MAC address [ 272.783941][T12468] bond17: (slave vxcan3): Error -95 calling set_mac_address [ 272.827297][T12475] __nla_validate_parse: 15 callbacks suppressed [ 272.827308][T12475] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2703'. [ 272.853208][T12474] macvlan5: entered promiscuous mode [ 272.860553][T12474] macvlan5: entered allmulticast mode [ 272.867240][T12474] bond17: entered promiscuous mode [ 272.873716][T12474] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 272.883539][T12474] bond17: left promiscuous mode [ 273.086912][T12484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2708'. [ 273.170973][T12489] tipc: Enabling of bearer rejected, failed to enable media [ 273.387228][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2714'. [ 273.408349][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2714'. [ 273.616038][T12511] netlink: 'syz.1.2718': attribute type 1 has an invalid length. [ 273.727169][T12511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2718'. [ 273.758643][T12521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2722'. [ 273.764143][T12515] bond22: (slave vxcan3): The slave device specified does not support setting the MAC address [ 273.783249][T12515] bond22: (slave vxcan3): Error -95 calling set_mac_address [ 273.827626][T12522] macvlan8: entered promiscuous mode [ 273.830144][T12525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2723'. [ 273.843248][T12522] macvlan8: entered allmulticast mode [ 273.850538][T12522] bond22: entered promiscuous mode [ 273.856651][T12522] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 273.867661][T12522] bond22: left promiscuous mode [ 274.077647][T12532] netlink: 'syz.4.2725': attribute type 11 has an invalid length. [ 274.096461][T12532] syzkaller0: entered promiscuous mode [ 274.099031][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2728'. [ 274.102058][T12532] syzkaller0: entered allmulticast mode [ 274.111474][T12536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2728'. [ 274.175215][T12534] syzkaller0: entered promiscuous mode [ 274.196466][T12534] syzkaller0: entered allmulticast mode [ 274.530024][T12550] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2734'. [ 275.617855][T12559] netlink: 'syz.3.2737': attribute type 1 has an invalid length. [ 275.801752][T12567] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 275.850718][T12567] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 275.954237][T12574] macvlan4: entered promiscuous mode [ 275.995550][T12574] macvlan4: entered allmulticast mode [ 276.005693][T12574] bond13: entered promiscuous mode [ 276.013562][T12574] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 276.027041][T12574] bond13: left promiscuous mode [ 276.249128][T12594] netlink: 'syz.3.2751': attribute type 11 has an invalid length. [ 276.259634][T12594] syzkaller0: entered promiscuous mode [ 276.266135][T12594] syzkaller0: entered allmulticast mode [ 276.742505][T12616] tipc: Enabled bearer , priority 0 [ 276.754416][T12616] syzkaller0: entered promiscuous mode [ 276.760105][T12616] syzkaller0: entered allmulticast mode [ 276.800124][T12616] tipc: Resetting bearer [ 276.829735][T12615] tipc: Resetting bearer [ 276.876339][T12615] tipc: Disabling bearer [ 278.297647][T12654] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.321418][T12654] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 278.376950][T12699] syzkaller0: entered promiscuous mode [ 278.378993][T12654] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 278.382595][T12699] syzkaller0: entered allmulticast mode [ 278.411499][T12654] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 278.462285][T12654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.484521][T12654] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 278.510143][T12654] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.531474][T12654] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 278.601634][T12654] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 278.617932][T12654] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 278.632340][T12704] syzkaller0: entered promiscuous mode [ 278.643097][T12704] syzkaller0: entered allmulticast mode [ 279.287537][T12731] syzkaller0: entered promiscuous mode [ 279.295864][T12731] syzkaller0: entered allmulticast mode [ 279.405857][T12738] tipc: Enabled bearer , priority 0 [ 279.420966][T12732] syzkaller0: entered promiscuous mode [ 279.436554][T12732] syzkaller0: entered allmulticast mode [ 279.478842][T12732] tipc: Resetting bearer [ 279.529365][T12729] tipc: Resetting bearer [ 279.581026][T12745] __nla_validate_parse: 11 callbacks suppressed [ 279.581042][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2802'. [ 279.606563][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2802'. [ 279.624318][T12729] tipc: Disabling bearer [ 279.854069][T12757] syzkaller0: entered promiscuous mode [ 279.896894][T12757] syzkaller0: entered allmulticast mode [ 280.095886][ T5146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.109013][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.116777][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.125256][ T5146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.133003][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.167055][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.196835][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.204793][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.223297][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.233237][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.800142][T12799] netlink: 'syz.0.2817': attribute type 1 has an invalid length. [ 280.808502][T12797] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2818'. [ 280.881067][ T7354] bridge0: port 1(syz_tun) entered disabled state [ 280.942324][T12807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2817'. [ 280.958033][ T7354] syz_tun (unregistering): left allmulticast mode [ 280.979437][ T7354] syz_tun (unregistering): left promiscuous mode [ 281.002345][ T7354] bridge0: port 1(syz_tun) entered disabled state [ 281.072086][T12797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2818'. [ 281.109416][T12797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2818'. [ 281.120227][T12805] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address [ 281.160020][T12805] bond19: (slave vxcan3): Error -95 calling set_mac_address [ 281.209258][T12810] macvlan4: entered promiscuous mode [ 281.214674][T12810] macvlan4: entered allmulticast mode [ 281.220500][T12810] bond19: entered promiscuous mode [ 281.229664][T12810] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 281.238941][T12810] bond19: left promiscuous mode [ 281.442343][ T1109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.577588][ T1109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.715482][ T1109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.775042][T12844] tipc: Enabled bearer , priority 0 [ 281.782543][T12840] syzkaller0: entered promiscuous mode [ 281.788228][T12840] syzkaller0: entered allmulticast mode [ 281.876932][T12840] tipc: Resetting bearer [ 281.898061][T12838] tipc: Resetting bearer [ 281.923783][T12838] tipc: Disabling bearer [ 281.950764][ T1109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.007888][T12851] syzkaller0: entered promiscuous mode [ 282.027748][T12851] syzkaller0: entered allmulticast mode [ 282.123372][T12777] chnl_net:caif_netlink_parms(): no params data found [ 282.342703][ T5146] Bluetooth: hci5: command tx timeout [ 282.637347][T12777] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.692273][T12777] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.710916][T12777] bridge_slave_0: entered allmulticast mode [ 282.749648][T12777] bridge_slave_0: entered promiscuous mode [ 282.833467][T12777] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.840792][T12777] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.848406][T12777] bridge_slave_1: entered allmulticast mode [ 282.856104][T12777] bridge_slave_1: entered promiscuous mode [ 283.263367][ T1109] bond2 (unregistering): (slave bridge1): Releasing active interface [ 283.322916][ T1109] bond7 (unregistering): (slave bridge2): Releasing active interface [ 283.389332][ T1109] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 283.399899][ T1109] bond0 (unregistering): Released all slaves [ 283.574703][ T1109] bond1 (unregistering): Released all slaves [ 283.677702][ T1109] bond2 (unregistering): Released all slaves [ 283.808996][ T1109] bond3 (unregistering): left promiscuous mode [ 283.821223][ T1109] team0: Port device macvlan2 removed [ 283.831337][ T1109] bond3 (unregistering): Released all slaves [ 283.925965][ T1109] bond4 (unregistering): left promiscuous mode [ 283.938145][ T1109] team0: Port device macvlan3 removed [ 283.947509][ T1109] bond4 (unregistering): Released all slaves [ 283.982838][ T5824] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 284.027242][ T1109] bond5 (unregistering): Released all slaves [ 284.099327][ T1109] bond6 (unregistering): Released all slaves [ 284.113067][ T1109] bond7 (unregistering): Released all slaves [ 284.153421][ T5824] usb 3-1: Using ep0 maxpacket: 32 [ 284.178299][ T5824] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 284.190995][ T5824] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 284.200767][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 284.209389][ T5824] usb 3-1: Product: syz [ 284.213663][ T5824] usb 3-1: Manufacturer: syz [ 284.218565][ T5824] usb 3-1: SerialNumber: syz [ 284.220141][ T1109] bond8 (unregistering): Released all slaves [ 284.230453][ T5824] usb 3-1: config 0 descriptor?? [ 284.238802][T12913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 284.251356][ T5824] hub 3-1:0.0: bad descriptor, ignoring hub [ 284.257357][ T5824] hub 3-1:0.0: probe with driver hub failed with error -5 [ 284.326940][ T1109] bond9 (unregistering): Released all slaves [ 284.410271][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2846'. [ 284.424642][T12918] netlink: 'syz.3.2846': attribute type 13 has an invalid length. [ 284.432749][ T5146] Bluetooth: hci5: command tx timeout [ 284.451333][ T1109] bond10 (unregistering): Released all slaves [ 284.532818][ T1109] bond11 (unregistering): Released all slaves [ 284.544937][ T1109] bond12 (unregistering): Released all slaves [ 284.620489][ T1109] bond13 (unregistering): left allmulticast mode [ 284.627099][ T1109] bond13 (unregistering): left promiscuous mode [ 284.639303][ T1109] team0: Port device macvlan4 removed [ 284.648276][ T1109] bond13 (unregistering): Released all slaves [ 284.660244][ T1109] bond14 (unregistering): Released all slaves [ 284.745805][ T1109] bond15 (unregistering): left allmulticast mode [ 284.752140][ T1109] bond15 (unregistering): left promiscuous mode [ 284.764622][ T1109] team0: Port device macvlan5 removed [ 284.773411][ T1109] bond15 (unregistering): Released all slaves [ 284.785509][ T1109] bond16 (unregistering): Released all slaves [ 284.800094][ T1109] bond17 (unregistering): Released all slaves [ 284.865845][T12913] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 284.886987][ T1109] bond18 (unregistering): Released all slaves [ 284.899017][ T1109] bond19 (unregistering): Released all slaves [ 284.912803][ T1109] bond20 (unregistering): Released all slaves [ 284.933759][T12895] tipc: Enabled bearer , priority 0 [ 284.940659][T12900] syzkaller0: entered promiscuous mode [ 284.948391][T12900] syzkaller0: entered allmulticast mode [ 284.963880][T12907] tipc: Resetting bearer [ 284.975339][T12894] tipc: Resetting bearer [ 284.995784][T12894] tipc: Disabling bearer [ 285.046858][T12919] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 285.186498][T12918] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.193769][T12918] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.360463][T12918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.378672][T12918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.450962][T12918] tipc: Resetting bearer [ 285.500367][T12918] bond3: left promiscuous mode [ 285.513342][T12918] bond6: left allmulticast mode [ 285.518196][T12918] bond6: left promiscuous mode [ 285.570041][T12929] pim6reg1: left promiscuous mode [ 285.583301][T12929] pim6reg1: left allmulticast mode [ 285.610081][ T65] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.619270][ T65] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.632262][T12777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.641684][ T65] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.663054][ T65] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.684732][T12777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.759729][T12777] team0: Port device team_slave_0 added [ 285.768774][T12777] team0: Port device team_slave_1 added [ 285.804774][T12777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.811939][T12777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.838538][T12777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.853646][T12777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.860826][T12777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.887279][T12777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.962115][T12777] hsr_slave_0: entered promiscuous mode [ 285.970044][T12777] hsr_slave_1: entered promiscuous mode [ 285.977293][T12777] debugfs: 'hsr0' already exists in 'hsr' [ 285.983321][T12777] Cannot create hsr debugfs directory [ 285.989001][ T36] raw-gadget.0 gadget.2: failed to queue suspend event [ 286.072886][T12913] raw-gadget.0 gadget.2: failed to queue resume event [ 286.093997][ T36] raw-gadget.0 gadget.2: failed to queue suspend event [ 286.177050][T12913] raw-gadget.0 gadget.2: failed to queue resume event [ 286.207949][ T50] raw-gadget.0 gadget.2: failed to queue suspend event [ 286.282866][T12913] raw-gadget.0 gadget.2: failed to queue resume event [ 286.307056][ T50] raw-gadget.0 gadget.2: failed to queue suspend event [ 286.384075][T12913] raw-gadget.0 gadget.2: failed to queue resume event [ 286.423821][ T50] raw-gadget.0 gadget.2: failed to queue suspend event [ 286.493033][T12913] raw-gadget.0 gadget.2: failed to queue resume event [ 286.515724][ T5146] Bluetooth: hci5: command tx timeout [ 286.548080][ T50] raw-gadget.0 gadget.2: failed to queue suspend event [ 286.570854][ T1109] tipc: Left network mode [ 286.654935][T12913] raw-gadget.0 gadget.2: failed to queue resume event [ 286.704756][ T65] raw-gadget.0 gadget.2: failed to queue suspend event [ 286.716018][T12777] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 286.767756][T12777] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 286.782701][T12913] raw-gadget.0 gadget.2: failed to queue resume event [ 286.828043][ T50] raw-gadget.0 gadget.2: failed to queue suspend event [ 286.844890][T12777] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 286.872264][T12913] raw-gadget.0 gadget.2: failed to queue disconnect event [ 286.909621][T12777] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 286.936951][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2859'. [ 286.956442][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2859'. [ 286.982954][ T5907] usb 3-1: USB disconnect, device number 7 [ 287.298801][ T1109] hsr_slave_0: left promiscuous mode [ 287.314176][ T1109] hsr_slave_1: left promiscuous mode [ 287.372681][ T1109] veth1_macvtap: left promiscuous mode [ 287.379279][ T1109] veth0_macvtap: left promiscuous mode [ 287.385421][ T1109] veth1_vlan: left promiscuous mode [ 287.390917][ T1109] veth0_vlan: left promiscuous mode [ 288.151649][T13007] syzkaller0: entered promiscuous mode [ 288.162715][T13007] syzkaller0: entered allmulticast mode [ 288.279884][T13016] syzkaller0: entered promiscuous mode [ 288.287414][T13016] syzkaller0: entered allmulticast mode [ 288.338609][T12777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.382416][T12777] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.408512][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.415687][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.422649][ T5907] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 288.456233][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.463401][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.572702][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 288.583405][ T5146] Bluetooth: hci5: command tx timeout [ 288.600913][ T5907] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 288.634605][ T5907] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 288.663239][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 288.681867][ T5907] usb 4-1: Product: syz [ 288.712701][ T5907] usb 4-1: Manufacturer: syz [ 288.717308][ T5907] usb 4-1: SerialNumber: syz [ 288.729766][T12777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.739503][ T5907] usb 4-1: config 0 descriptor?? [ 288.751962][T13014] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 288.783834][ T5907] hub 4-1:0.0: bad descriptor, ignoring hub [ 288.791149][ T5907] hub 4-1:0.0: probe with driver hub failed with error -5 [ 288.828316][T12777] veth0_vlan: entered promiscuous mode [ 288.858832][T12777] veth1_vlan: entered promiscuous mode [ 288.897719][T13033] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.2877'. [ 288.926347][T13033] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.2877'. [ 288.950650][T12777] veth0_macvtap: entered promiscuous mode [ 288.974806][T12777] veth1_macvtap: entered promiscuous mode [ 289.000010][T12777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.029202][T12777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.056379][ T5907] usb 4-1: USB disconnect, device number 11 [ 289.059072][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.091509][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.128644][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.143843][ T65] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.178017][T13044] syzkaller0: entered promiscuous mode [ 289.186214][T13044] syzkaller0: entered allmulticast mode [ 289.293979][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.301822][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.372444][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.387577][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.413510][T13046] bond18: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 289.424955][T13046] bond18 (unregistering): Released all slaves [ 289.457086][T13049] syzkaller0: entered promiscuous mode [ 289.463664][T13049] syzkaller0: entered allmulticast mode [ 289.581573][ T5907] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 289.594621][T13051] netlink: 'syz.4.2807': attribute type 11 has an invalid length. [ 289.762619][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 289.775846][ T5907] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 289.817203][ T5907] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 289.831766][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 289.844748][ T5907] usb 4-1: Product: syz [ 289.848927][ T5907] usb 4-1: Manufacturer: syz [ 289.857909][ T5907] usb 4-1: SerialNumber: syz [ 289.887973][ T5907] usb 4-1: config 0 descriptor?? [ 289.903569][T13014] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 289.925270][ T5907] hub 4-1:0.0: bad descriptor, ignoring hub [ 289.961656][ T5907] hub 4-1:0.0: probe with driver hub failed with error -5 [ 290.091178][T13071] syzkaller0: entered promiscuous mode [ 290.105365][T13071] syzkaller0: entered allmulticast mode [ 290.214755][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.233769][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.241457][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.254277][ T797] usb 4-1: USB disconnect, device number 12 [ 290.262167][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.272052][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.373037][T13080] syzkaller0: entered promiscuous mode [ 290.391794][T13080] syzkaller0: entered allmulticast mode [ 290.443684][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2897'. [ 290.981135][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.140803][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.199317][T13079] chnl_net:caif_netlink_parms(): no params data found [ 291.235471][T13112] syzkaller0: entered promiscuous mode [ 291.241031][T13112] syzkaller0: entered allmulticast mode [ 291.261425][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.278284][T13115] syzkaller0: entered promiscuous mode [ 291.283965][T13115] syzkaller0: entered allmulticast mode [ 291.443274][ T5293] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 291.593730][ T5293] usb 4-1: Using ep0 maxpacket: 32 [ 291.600697][ T5293] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 291.613678][ T5293] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 291.623056][ T5293] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 291.631257][ T5293] usb 4-1: Product: syz [ 291.635581][ T5293] usb 4-1: Manufacturer: syz [ 291.640178][ T5293] usb 4-1: SerialNumber: syz [ 291.650705][ T5293] usb 4-1: config 0 descriptor?? [ 291.661238][T13114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 291.671376][ T5293] hub 4-1:0.0: bad descriptor, ignoring hub [ 291.677379][ T5293] hub 4-1:0.0: probe with driver hub failed with error -5 [ 292.345561][ T5146] Bluetooth: hci1: command tx timeout [ 292.430996][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.563612][T13114] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 292.635323][T13079] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.642817][T13079] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.650037][T13079] bridge_slave_0: entered allmulticast mode [ 292.658625][T13079] bridge_slave_0: entered promiscuous mode [ 292.669656][T13079] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.678924][T13079] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.686323][T13079] bridge_slave_1: entered allmulticast mode [ 292.694127][T13079] bridge_slave_1: entered promiscuous mode [ 292.747721][T13116] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 292.751152][T13079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.809190][T13079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.989155][T13079] team0: Port device team_slave_0 added [ 293.001701][ T50] bridge_slave_1: left allmulticast mode [ 293.024209][ T50] bridge_slave_1: left promiscuous mode [ 293.030721][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.057697][ T50] bridge_slave_0: left allmulticast mode [ 293.069071][ T50] bridge_slave_0: left promiscuous mode [ 293.077994][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.248947][ T50] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 293.507536][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.518208][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.528527][ T50] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 293.537799][ T50] bond0 (unregistering): Released all slaves [ 293.566105][ T153] raw-gadget.0 gadget.3: failed to queue suspend event [ 293.619247][ T50] bond1 (unregistering): Released all slaves [ 293.663727][T13114] raw-gadget.0 gadget.3: failed to queue resume event [ 293.694571][ T12] raw-gadget.0 gadget.3: failed to queue suspend event [ 293.707242][ T50] bond2 (unregistering): Released all slaves [ 293.763703][T13114] raw-gadget.0 gadget.3: failed to queue resume event [ 293.787849][ T50] bond3 (unregistering): Released all slaves [ 293.793763][ T12] raw-gadget.0 gadget.3: failed to queue suspend event [ 293.864750][T13114] raw-gadget.0 gadget.3: failed to queue resume event [ 293.873003][ T50] bond4 (unregistering): Released all slaves [ 293.913903][ T36] raw-gadget.0 gadget.3: failed to queue suspend event [ 293.954198][ T50] bond5 (unregistering): Released all slaves [ 293.993046][T13114] raw-gadget.0 gadget.3: failed to queue resume event [ 294.033695][ T50] bond6 (unregistering): Released all slaves [ 294.036017][ T153] raw-gadget.0 gadget.3: failed to queue suspend event [ 294.111073][ T50] bond7 (unregistering): Released all slaves [ 294.125759][T13114] raw-gadget.0 gadget.3: failed to queue resume event [ 294.153649][ T153] raw-gadget.0 gadget.3: failed to queue suspend event [ 294.196477][ T50] bond8 (unregistering): Released all slaves [ 294.232773][T13114] raw-gadget.0 gadget.3: failed to queue resume event [ 294.263610][ T36] raw-gadget.0 gadget.3: failed to queue suspend event [ 294.290436][T13114] raw-gadget.0 gadget.3: failed to queue disconnect event [ 294.292017][ T50] bond9 (unregistering): Released all slaves [ 294.403051][ T5293] usb 4-1: USB disconnect, device number 13 [ 294.418032][ T50] bond10 (unregistering): Released all slaves [ 294.424263][ T5146] Bluetooth: hci1: command tx timeout [ 294.499525][ T50] bond11 (unregistering): Released all slaves [ 294.574408][ T50] bond12 (unregistering): Released all slaves [ 294.592969][ T50] bond13 (unregistering): Released all slaves [ 294.605653][ T50] bond14 (unregistering): Released all slaves [ 294.618098][ T50] bond15 (unregistering): Released all slaves [ 294.696777][ T50] bond16 (unregistering): left promiscuous mode [ 294.708564][ T50] team0: Port device macvlan3 removed [ 294.717906][ T50] bond16 (unregistering): Released all slaves [ 294.792802][ T50] bond17 (unregistering): Released all slaves [ 294.804709][ T50] bond18 (unregistering): Released all slaves [ 294.816568][ T50] bond19 (unregistering): Released all slaves [ 294.828262][T13137] tipc: Started in network mode [ 294.834245][T13137] tipc: Node identity 462cc3040226, cluster identity 4711 [ 294.842007][T13137] tipc: Enabled bearer , priority 10 [ 294.850255][T13079] team0: Port device team_slave_1 added [ 294.887481][T13140] syzkaller0: entered promiscuous mode [ 294.893972][T13140] syzkaller0: entered allmulticast mode [ 294.971254][T13147] tipc: Resetting bearer [ 295.028555][T13134] tipc: Resetting bearer [ 295.069765][T13134] tipc: Disabling bearer [ 295.136586][T13156] syzkaller0: entered promiscuous mode [ 295.142218][T13156] syzkaller0: entered allmulticast mode [ 295.151566][T13079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.164284][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.217871][T13079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.244129][T13079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.251062][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.291410][T13079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.304971][ T50] tipc: Left network mode [ 295.317226][T13160] tipc: Enabled bearer , priority 0 [ 295.333117][T13163] syzkaller0: entered promiscuous mode [ 295.355306][T13163] syzkaller0: entered allmulticast mode [ 296.504066][ T5146] Bluetooth: hci1: command tx timeout [ 296.692034][T13160] tipc: Resetting bearer [ 296.698562][T13158] tipc: Resetting bearer [ 296.711469][T13158] tipc: Disabling bearer [ 296.995420][T13079] hsr_slave_0: entered promiscuous mode [ 297.001685][T13079] hsr_slave_1: entered promiscuous mode [ 297.008536][T13079] debugfs: 'hsr0' already exists in 'hsr' [ 297.014672][T13079] Cannot create hsr debugfs directory [ 297.204450][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2938'. [ 297.223817][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2938'. [ 297.332285][T13224] netlink: 'syz.3.2940': attribute type 1 has an invalid length. [ 297.542870][T13229] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 297.554881][T13229] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 297.634494][T13235] bond14: (slave bridge4): Enslaving as an active interface with a down link [ 297.691891][T13224] macvlan4: entered promiscuous mode [ 297.701471][T13224] macvlan4: entered allmulticast mode [ 297.765760][T13245] syzkaller0: entered promiscuous mode [ 297.772436][T13245] syzkaller0: entered allmulticast mode [ 297.814458][ T50] hsr_slave_0: left promiscuous mode [ 297.825996][ T50] hsr_slave_1: left promiscuous mode [ 297.837637][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.848018][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.857284][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.864918][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.894143][ T50] veth1_macvtap: left promiscuous mode [ 297.900108][ T50] veth0_macvtap: left promiscuous mode [ 297.906391][ T50] veth1_vlan: left promiscuous mode [ 297.911831][ T50] veth0_vlan: left promiscuous mode [ 298.063222][ T39] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 298.234555][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 298.246299][ T39] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 298.261213][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.275364][ T39] usb 4-1: Product: syz [ 298.279542][ T39] usb 4-1: Manufacturer: syz [ 298.291839][ T39] usb 4-1: SerialNumber: syz [ 298.308878][ T39] usb 4-1: config 0 descriptor?? [ 298.319744][ T39] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 298.428744][ T50] team0 (unregistering): Port device team_slave_1 removed [ 298.592665][ T5146] Bluetooth: hci1: command tx timeout [ 298.728375][ T50] lo (unregistering): left allmulticast mode [ 298.740724][T13244] tipc: Enabled bearer , priority 0 [ 299.747140][T13254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.760135][T13254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.893646][T13251] syzkaller0: entered promiscuous mode [ 299.899248][T13251] syzkaller0: entered allmulticast mode [ 299.910876][T13261] tipc: Resetting bearer [ 299.929383][T13243] tipc: Resetting bearer [ 299.944993][T13243] tipc: Disabling bearer [ 300.063336][ T5892] tipc: Node number set to 1141555972 [ 300.111402][T13266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2947'. [ 300.147200][T13266] openvswitch: netlink: Flow key attr not present in new flow. [ 300.181435][ T39] gspca_ov534_9: reg_w failed -71 [ 300.263688][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056073800: rx timeout, send abort [ 300.422982][ T39] gspca_ov534_9: Unknown sensor 0000 [ 300.423076][ T39] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 300.424797][ T50] IPVS: stop unused estimator thread 0... [ 300.437864][ T39] usb 4-1: USB disconnect, device number 14 [ 300.763914][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056073400: rx timeout, send abort [ 300.772534][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056073800: abort rx timeout. Force session deactivation [ 300.860741][T13079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 300.914297][T13079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 300.936955][T13295] netlink: 'syz.2.2954': attribute type 1 has an invalid length. [ 300.953820][T13079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.047369][T13079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.107191][T13295] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address [ 301.125856][T13295] bond18: (slave vxcan3): Error -95 calling set_mac_address [ 301.154547][T13301] syzkaller0: entered promiscuous mode [ 301.160110][T13301] syzkaller0: entered allmulticast mode [ 301.186801][T13304] bond18: (slave bridge2): Enslaving as an active interface with a down link [ 301.243939][T13308] macvlan5: entered promiscuous mode [ 301.249260][T13308] macvlan5: entered allmulticast mode [ 301.272125][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056073400: abort rx timeout. Force session deactivation [ 301.317599][T13312] tipc: Enabled bearer , priority 0 [ 301.374755][T13318] syzkaller0: entered promiscuous mode [ 301.404336][T13318] syzkaller0: entered allmulticast mode [ 301.487487][T13311] tipc: Resetting bearer [ 301.509414][T13311] tipc: Disabling bearer [ 301.639844][T13079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.657066][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2964'. [ 301.693015][ T5293] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 301.770876][T13332] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 301.799279][T13079] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.828649][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.835813][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.851605][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.858779][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.873100][ T5293] usb 3-1: Using ep0 maxpacket: 32 [ 301.905347][ T5293] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 301.939335][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.962695][ T5293] usb 3-1: Product: syz [ 301.966871][ T5293] usb 3-1: Manufacturer: syz [ 301.974987][ T5293] usb 3-1: SerialNumber: syz [ 301.983360][ T5293] usb 3-1: config 0 descriptor?? [ 301.992502][ T5293] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 302.073920][T13079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.258343][T13079] veth0_vlan: entered promiscuous mode [ 302.307617][T13079] veth1_vlan: entered promiscuous mode [ 302.320288][T13352] syzkaller0: entered promiscuous mode [ 302.326899][T13352] syzkaller0: entered allmulticast mode [ 302.399097][T13357] netlink: 'syz.1.2971': attribute type 1 has an invalid length. [ 302.532051][T13361] bond23: (slave vxcan3): The slave device specified does not support setting the MAC address [ 302.543416][T13361] bond23: (slave vxcan3): Error -95 calling set_mac_address [ 302.568030][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'. [ 302.661076][T13363] bond23: (slave bridge5): Enslaving as an active interface with a down link [ 302.686563][T13357] macvlan8: entered promiscuous mode [ 302.692020][T13357] macvlan8: entered allmulticast mode [ 302.729077][T13369] tipc: Enabled bearer , priority 0 [ 302.746871][T13369] syzkaller0: entered promiscuous mode [ 302.752384][T13369] syzkaller0: entered allmulticast mode [ 302.794285][T13079] veth0_macvtap: entered promiscuous mode [ 302.816422][T13079] veth1_macvtap: entered promiscuous mode [ 302.828545][T13377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2976'. [ 302.839849][T13368] tipc: Resetting bearer [ 302.857029][T13368] tipc: Disabling bearer [ 302.927674][T13079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.971511][T13079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.019196][ T65] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.036035][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.066062][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.085106][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.110300][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 303.142583][T13384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2978'. [ 303.246765][ T5293] gspca_ov534_9: reg_w failed -71 [ 303.258680][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.277726][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.327794][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.348192][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.522994][ T5892] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 303.563059][ T5293] gspca_ov534_9: Unknown sensor 0000 [ 303.563147][ T5293] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 303.638989][ T5293] usb 3-1: USB disconnect, device number 8 [ 303.747863][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 303.763871][ T5892] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 303.767614][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'. [ 303.786272][ T5892] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 303.823830][ T5892] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.875424][ T5892] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 303.934845][ T5892] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 303.981348][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.988518][T13415] netlink: 'syz.2.2985': attribute type 1 has an invalid length. [ 303.997586][ T5892] usb 2-1: Product: syz [ 304.012025][ T5892] usb 2-1: Manufacturer: syz [ 304.016960][ T5892] usb 2-1: SerialNumber: syz [ 304.047035][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 304.074052][ T5892] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input5 [ 304.198135][T13424] syzkaller0: entered promiscuous mode [ 304.224718][T13424] syzkaller0: entered allmulticast mode [ 304.224894][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'. [ 304.273401][ T5892] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 304.291873][ T5892] (id 0x00) [ 304.461464][T13422] bond19: (slave bridge3): making interface the new active one [ 304.500501][T13422] bond19: (slave bridge3): Enslaving as an active interface with an up link [ 304.516352][ T5892] rc_core: IR keymap rc-imon-pad not found [ 304.545776][ T5892] Registered IR keymap rc-empty [ 304.560198][T13434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2986'. [ 304.594161][ T5892] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 304.594870][T13426] macvlan6: entered promiscuous mode [ 304.604504][ T5892] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 304.625403][T13426] macvlan6: entered allmulticast mode [ 304.631269][ T5892] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 304.682971][ T5892] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input6 [ 304.751623][ T5892] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:10> initialized [ 304.990966][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2989'. [ 305.004380][T13446] tipc: Enabled bearer , priority 0 [ 305.030248][T13448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2989'. [ 305.045384][T13442] syzkaller0: entered promiscuous mode [ 305.056540][T13442] syzkaller0: entered allmulticast mode [ 305.147034][T13441] tipc: Resetting bearer [ 305.167176][T13441] tipc: Disabling bearer [ 306.010423][T13481] netlink: 'syz.0.2998': attribute type 1 has an invalid length. [ 306.151472][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2998'. [ 306.183028][T13489] syzkaller0: entered promiscuous mode [ 306.196059][T13489] syzkaller0: entered allmulticast mode [ 306.213986][T13481] macvlan2: entered promiscuous mode [ 306.219285][T13481] macvlan2: entered allmulticast mode [ 306.457567][T13498] tipc: Enabled bearer , priority 0 [ 306.505358][T13498] syzkaller0: entered promiscuous mode [ 306.510945][T13498] syzkaller0: entered allmulticast mode [ 306.529911][T13497] tipc: Resetting bearer [ 306.567222][T13497] tipc: Disabling bearer [ 306.748021][ T39] usb 2-1: USB disconnect, device number 10 [ 306.832864][ T797] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 306.882717][ T5824] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 306.992711][ T797] usb 1-1: Using ep0 maxpacket: 16 [ 307.016449][ T797] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.032614][ T797] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.052802][ T797] usb 1-1: config 0 interface 0 has no altsetting 0 [ 307.059428][ T797] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 307.071653][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 307.093124][ T5824] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 307.106098][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.112585][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 307.125939][ T797] usb 1-1: config 0 descriptor?? [ 307.145296][ T5824] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 307.158810][ T5824] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 307.168673][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.176996][ T5824] usb 3-1: Product: syz [ 307.181686][ T5824] usb 3-1: Manufacturer: syz [ 307.192355][ T5824] usb 3-1: SerialNumber: syz [ 307.226638][ T5824] usb 3-1: config 0 descriptor?? [ 307.236924][ T5824] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 307.512169][ T5824] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 307.559937][ T797] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 307.578002][ T797] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 307.606032][ T797] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 307.622784][ T797] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 307.630685][ T797] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 307.650165][ T5892] usb 3-1: USB disconnect, device number 9 [ 307.689562][ T797] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 307.818227][ T797] usb 1-1: USB disconnect, device number 8 [ 307.900565][T13549] fido_id[13549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 308.412335][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.433701][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.443094][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.466477][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.474118][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.671165][ T5841] syz_tun (unregistering): left allmulticast mode [ 308.691906][ T5841] syz_tun (unregistering): left promiscuous mode [ 308.912923][ T5824] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 309.074332][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 309.087678][ T5824] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 309.105046][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.123411][ T5824] usb 3-1: Product: syz [ 309.132110][ T5824] usb 3-1: Manufacturer: syz [ 309.149688][ T5824] usb 3-1: SerialNumber: syz [ 309.192073][ T5824] usb 3-1: config 0 descriptor?? [ 309.270561][ T36] bridge_slave_1: left allmulticast mode [ 309.277101][ T36] bridge_slave_1: left promiscuous mode [ 309.287390][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.298630][ T36] bridge_slave_0: left allmulticast mode [ 309.304630][ T36] bridge_slave_0: left promiscuous mode [ 309.310715][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.370188][ T36] ip6gretap0 (unregistering): left promiscuous mode [ 309.388986][ T36] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 309.440918][ T5824] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 309.477535][ T36] gretap0 (unregistering): left promiscuous mode [ 309.522869][ T5892] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 309.565889][ T36] tipc: Disabling bearer [ 309.682639][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 309.689424][ T5892] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 309.699898][ T5892] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 309.711797][ T5892] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.722979][ T5892] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 309.740868][ T5892] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 309.750095][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.758610][ T5892] usb 5-1: Product: syz [ 309.762950][ T5892] usb 5-1: Manufacturer: syz [ 309.767583][ T5892] usb 5-1: SerialNumber: syz [ 309.775149][ T36] bond14 (unregistering): (slave bridge4): Releasing active interface [ 309.779788][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 309.797144][ T5892] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input7 [ 309.869597][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.881287][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.892052][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 309.902213][ T36] bond0 (unregistering): Released all slaves [ 310.010624][ T36] bond1 (unregistering): Released all slaves [ 310.023740][ T5892] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 310.039489][ T5892] (id 0x00) [ 310.124388][ T5892] rc_core: IR keymap rc-imon-pad not found [ 310.130230][ T5892] Registered IR keymap rc-empty [ 310.146303][ T36] bond2 (unregistering): Released all slaves [ 310.152324][ T5892] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 310.162609][ T5892] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 310.236113][ T5892] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 310.257939][ T5892] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input8 [ 310.275710][ T36] team0: Port device macvlan2 removed [ 310.289113][ T36] bond3 (unregistering): Released all slaves [ 310.295441][ T5892] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:8> initialized [ 310.474114][ T36] bond4 (unregistering): Released all slaves [ 310.504491][ T5146] Bluetooth: hci4: command tx timeout [ 310.575741][ T36] bond5 (unregistering): Released all slaves [ 310.649705][ T5824] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 310.667703][ T5824] usb 3-1: USB disconnect, device number 10 [ 310.689191][ T36] team0: Port device macvlan3 removed [ 310.699204][ T36] bond6 (unregistering): Released all slaves [ 310.775406][ T36] bond7 (unregistering): Released all slaves [ 310.788277][ T36] bond8 (unregistering): Released all slaves [ 310.800236][ T36] bond9 (unregistering): Released all slaves [ 310.814526][ T36] bond10 (unregistering): Released all slaves [ 310.896909][ T36] bond11 (unregistering): Released all slaves [ 310.910146][ T36] bond12 (unregistering): Released all slaves [ 310.921744][ T36] bond13 (unregistering): Released all slaves [ 310.937107][ T36] bond14 (unregistering): Released all slaves [ 310.951523][T13582] chnl_net:caif_netlink_parms(): no params data found [ 311.139969][T13626] __nla_validate_parse: 2 callbacks suppressed [ 311.139987][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3056'. [ 311.174751][ T36] tipc: Left network mode [ 311.270222][T13582] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.294874][T13582] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.319195][T13582] bridge_slave_0: entered allmulticast mode [ 311.335050][T13582] bridge_slave_0: entered promiscuous mode [ 311.417376][T13582] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.432277][T13582] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.453105][T13582] bridge_slave_1: entered allmulticast mode [ 311.459728][ T1213] usb 5-1: USB disconnect, device number 8 [ 311.461676][T13582] bridge_slave_1: entered promiscuous mode [ 311.487061][T13627] imon:send_packet: packet tx failed (-71) [ 311.527077][T13627] imon:vfd_write: send packet #3 failed [ 311.682131][T13582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.709615][T13582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.799558][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3063'. [ 311.808687][T13654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3063'. [ 311.824259][ T36] hsr_slave_0: left promiscuous mode [ 311.848507][ T36] hsr_slave_1: left promiscuous mode [ 311.864296][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.881546][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.297817][ T36] team0 (unregistering): Port device team_slave_1 removed [ 312.331578][ T36] team0 (unregistering): Port device team_slave_0 removed [ 312.585455][ T5146] Bluetooth: hci4: command tx timeout [ 312.597044][T13582] team0: Port device team_slave_0 added [ 312.670893][T13582] team0: Port device team_slave_1 added [ 312.743867][T13582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.753458][T13668] netlink: 'syz.0.3067': attribute type 1 has an invalid length. [ 312.775458][T13582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.833094][T13582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.860404][T13582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.876013][T13582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.927610][T13582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.149313][T13582] hsr_slave_0: entered promiscuous mode [ 313.161791][T13582] hsr_slave_1: entered promiscuous mode [ 313.380801][T13689] syzkaller0: entered promiscuous mode [ 313.387432][T13689] syzkaller0: entered allmulticast mode [ 313.439110][T13696] syzkaller1: entered promiscuous mode [ 313.450483][T13696] syzkaller1: entered allmulticast mode [ 313.522730][ T1213] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 313.687882][ T1213] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 313.703546][T13705] syzkaller1: entered promiscuous mode [ 313.706854][ T1213] usb 2-1: config 0 has no interface number 0 [ 313.711614][T13705] syzkaller1: entered allmulticast mode [ 313.715602][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 313.743930][ T1213] usb 2-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 313.766515][T13708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3077'. [ 313.778545][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.817728][ T1213] usb 2-1: config 0 descriptor?? [ 313.860552][T13712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3078'. [ 314.040991][ T1213] usb 2-1: string descriptor 0 read error: -71 [ 314.056924][ T1213] usb-storage 2-1:0.168: USB Mass Storage device detected [ 314.117240][ T1213] usb-storage 2-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 314.221591][T13727] netlink: 'syz.0.3082': attribute type 1 has an invalid length. [ 314.222980][ T1213] usb 2-1: USB disconnect, device number 11 [ 314.313061][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 314.433586][T13727] macvlan3: entered promiscuous mode [ 314.438915][T13727] macvlan3: entered allmulticast mode [ 314.476920][T13582] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.483785][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 314.505547][ T10] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 314.527713][ T10] usb 3-1: config 0 has no interface number 0 [ 314.536135][T13582] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.555302][ T10] usb 3-1: config 0 interface 251 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 16 [ 314.585304][ T10] usb 3-1: config 0 interface 251 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64 [ 314.609176][T13582] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.612843][ T10] usb 3-1: config 0 interface 251 has no altsetting 0 [ 314.655720][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 314.665263][ T5146] Bluetooth: hci4: command tx timeout [ 314.666860][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.671541][T13582] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.692347][ T10] usb 3-1: Product: syz [ 314.697141][ T10] usb 3-1: Manufacturer: syz [ 314.720263][ T10] usb 3-1: SerialNumber: syz [ 314.736652][ T10] usb 3-1: config 0 descriptor?? [ 314.756601][T13742] syzkaller0: entered promiscuous mode [ 314.769014][T13742] syzkaller0: entered allmulticast mode [ 314.775686][T13717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 314.784061][T13717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 314.976245][T13582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.025972][T13717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.034682][T13767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3089'. [ 315.042929][T13717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.046340][T13582] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.073839][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.081006][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.099458][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.106616][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.249381][T13582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.340708][T13582] veth0_vlan: entered promiscuous mode [ 315.380546][T13582] veth1_vlan: entered promiscuous mode [ 315.429476][T13582] veth0_macvtap: entered promiscuous mode [ 315.446922][T13582] veth1_macvtap: entered promiscuous mode [ 315.469856][T13582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.489138][T13582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.550669][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.562497][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.577864][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.596426][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.670419][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 315.710432][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 315.741103][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.750527][ T10] asix 3-1:0.251: probe with driver asix failed with error -71 [ 315.781396][ T10] usb 3-1: USB disconnect, device number 11 [ 315.790143][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.798116][T13782] netlink: 'syz.4.3094': attribute type 11 has an invalid length. [ 315.834318][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.842144][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.855883][T13782] syzkaller0: entered promiscuous mode [ 315.861360][T13782] syzkaller0: entered allmulticast mode [ 315.943099][T13787] tipc: Started in network mode [ 315.962711][T13787] tipc: Node identity da0447396119, cluster identity 4711 [ 315.980900][T13787] tipc: Enabled bearer , priority 0 [ 315.997614][T13791] tipc: Resetting bearer [ 316.018143][T13785] tipc: Disabling bearer [ 316.081711][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3099'. [ 316.115338][T13797] syzkaller0: entered promiscuous mode [ 316.120884][T13797] syzkaller0: entered allmulticast mode [ 316.235985][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056527800: rx timeout, send abort [ 316.466485][T13810] syzkaller1: entered promiscuous mode [ 316.471993][T13810] syzkaller1: entered allmulticast mode [ 316.548938][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.557979][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.565965][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.575773][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.584523][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.672454][T13818] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 316.736081][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d960000: rx timeout, send abort [ 316.745695][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056527800: abort rx timeout. Force session deactivation [ 316.745924][ T5146] Bluetooth: hci4: command tx timeout [ 316.860853][T13821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3111'. [ 316.968221][T13827] tipc: Enabled bearer , priority 0 [ 316.991796][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.995303][T13828] netlink: 'syz.4.3109': attribute type 11 has an invalid length. [ 316.998295][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.034899][T13824] tipc: Resetting bearer [ 317.094114][T13823] tipc: Disabling bearer [ 317.106673][T13828] syzkaller0: entered promiscuous mode [ 317.112256][T13828] syzkaller0: entered allmulticast mode [ 317.196038][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.244336][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d960000: abort rx timeout. Force session deactivation [ 317.285838][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.357760][T13835] syzkaller0: entered promiscuous mode [ 317.365314][T13835] syzkaller0: entered allmulticast mode [ 317.379396][T13819] chnl_net:caif_netlink_parms(): no params data found [ 317.427730][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.521739][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.577373][T13844] syzkaller1: entered promiscuous mode [ 317.583686][T13844] syzkaller1: entered allmulticast mode [ 317.656718][T13819] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.665952][T13819] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.673551][T13819] bridge_slave_0: entered allmulticast mode [ 317.681377][T13819] bridge_slave_0: entered promiscuous mode [ 317.690183][T13819] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.697670][T13819] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.705817][T13819] bridge_slave_1: entered allmulticast mode [ 317.713586][T13819] bridge_slave_1: entered promiscuous mode [ 317.810805][T13819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.830030][T13819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.839253][T13857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3121'. [ 317.965458][T13819] team0: Port device team_slave_0 added [ 317.997870][T13819] team0: Port device team_slave_1 added [ 318.013010][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 318.061704][ T36] vlan2: left promiscuous mode [ 318.067044][ T36] dummy0: left promiscuous mode [ 318.075154][ T36] bridge0: port 3(vlan2) entered disabled state [ 318.084109][ T36] bridge_slave_1: left allmulticast mode [ 318.089819][ T36] bridge_slave_1: left promiscuous mode [ 318.096459][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.109358][ T36] bridge_slave_0: left allmulticast mode [ 318.115298][ T36] bridge_slave_0: left promiscuous mode [ 318.121098][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.136488][T13868] netlink: 'syz.4.3125': attribute type 11 has an invalid length. [ 318.174613][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 318.181009][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.192230][ T10] usb 1-1: config 0 has no interface number 0 [ 318.198686][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.219781][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.247666][ T10] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 318.257994][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.269693][ T10] usb 1-1: config 0 descriptor?? [ 318.550885][ T36] bond18 (unregistering): (slave bridge2): Releasing active interface [ 318.593010][ T36] bond19 (unregistering): (slave bridge3): Releasing active interface [ 318.657329][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.666081][ T5146] Bluetooth: hci3: command tx timeout [ 318.674651][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.687304][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 318.701359][ T36] bond0 (unregistering): Released all slaves [ 318.785330][ T36] bond1 (unregistering): Released all slaves [ 318.873082][ T36] bond2 (unregistering): left promiscuous mode [ 318.887037][ T36] team0: Port device macvlan2 removed [ 318.888498][ T10] uclogic 0003:28BD:0071.0002: pen parameters not found [ 318.902489][ T10] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring [ 318.915895][ T36] bond2 (unregistering): Released all slaves [ 318.916470][ T10] usb 1-1: USB disconnect, device number 9 [ 319.016555][ T36] bond3 (unregistering): left promiscuous mode [ 319.028802][ T36] team0: Port device macvlan3 removed [ 319.037587][ T36] bond3 (unregistering): Released all slaves [ 319.112522][ T36] bond4 (unregistering): Released all slaves [ 319.189663][ T36] bond5 (unregistering): Released all slaves [ 319.263755][ T36] bond6 (unregistering): Released all slaves [ 319.336618][ T36] bond7 (unregistering): Released all slaves [ 319.413414][ T36] bond8 (unregistering): Released all slaves [ 319.425209][ T36] bond9 (unregistering): Released all slaves [ 319.524486][ T36] bond10 (unregistering): Released all slaves [ 319.600779][ T36] bond11 (unregistering): Released all slaves [ 319.614595][ T36] bond12 (unregistering): Released all slaves [ 319.689694][ T36] bond13 (unregistering): Released all slaves [ 319.701427][ T36] bond14 (unregistering): Released all slaves [ 319.779524][ T36] bond15 (unregistering): Released all slaves [ 319.791592][ T36] bond16 (unregistering): Released all slaves [ 319.803646][ T36] bond17 (unregistering): Released all slaves [ 319.821086][ T36] bond18 (unregistering): Released all slaves [ 319.840546][ T36] bond19 (unregistering): Released all slaves [ 319.910813][T13819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.933101][T13819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.962046][T13819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.976724][T13819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.022654][T13819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.137710][T13819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.228104][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3133'. [ 320.314129][T13819] hsr_slave_0: entered promiscuous mode [ 320.343990][T13819] hsr_slave_1: entered promiscuous mode [ 320.381522][T13819] debugfs: 'hsr0' already exists in 'hsr' [ 320.387489][T13819] Cannot create hsr debugfs directory [ 320.492300][T13901] syzkaller1: entered promiscuous mode [ 320.510754][T13901] syzkaller1: entered allmulticast mode [ 320.743036][ T5146] Bluetooth: hci3: command tx timeout [ 321.305343][T13925] netlink: 'syz.4.3141': attribute type 11 has an invalid length. [ 321.354741][T13925] syzkaller0: entered promiscuous mode [ 321.360237][T13925] syzkaller0: entered allmulticast mode [ 321.440914][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3144'. [ 321.474091][T13819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.488289][T13819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 321.503102][ T39] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 321.540171][T13819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 321.580935][T13819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 321.667776][T13938] syzkaller0: entered promiscuous mode [ 321.688013][T13938] syzkaller0: entered allmulticast mode [ 321.710820][ T39] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 321.732662][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.753696][ T39] usb 1-1: Product: syz [ 321.781138][ T39] usb 1-1: Manufacturer: syz [ 321.797087][ T39] usb 1-1: SerialNumber: syz [ 321.821963][ T36] m1Ie5ияб: left promiscuous mode [ 321.831122][ T39] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 321.933307][ T5892] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 322.003530][ T36] tipc: Left network mode [ 322.087289][T13819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.191917][T13961] binder: 13960:13961 ioctl c0306201 80000680 returned -14 [ 322.316652][T13819] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.370935][ T39] usb 1-1: USB disconnect, device number 10 [ 322.456272][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.463449][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.557974][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.565174][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.717236][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3156'. [ 322.764825][T13979] syz_tun: entered allmulticast mode [ 322.822699][ T5146] Bluetooth: hci3: command tx timeout [ 322.833299][T13976] syz_tun: left allmulticast mode [ 322.974591][T13819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.986590][ T5892] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 323.008409][ T5892] ath9k_htc: Failed to initialize the device [ 323.026672][T13986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3159'. [ 323.062929][ T39] usb 1-1: ath9k_htc: USB layer deinitialized [ 323.132710][ T36] hsr_slave_0: left promiscuous mode [ 323.148196][ T36] hsr_slave_1: left promiscuous mode [ 323.164884][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.172272][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.194765][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.202150][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.246476][ T36] veth1_macvtap: left promiscuous mode [ 323.252101][ T36] veth0_macvtap: left promiscuous mode [ 323.260282][ T36] veth1_vlan: left promiscuous mode [ 323.268468][ T36] veth0_vlan: left promiscuous mode [ 323.473486][ T5293] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 323.627853][ T36] team0 (unregistering): Port device team_slave_1 removed [ 323.637303][ T5293] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 323.649199][ T5293] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.663220][ T5293] usb 2-1: config 0 interface 0 has no altsetting 0 [ 323.669865][ T5293] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 323.679125][ T5293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.694415][ T5293] usb 2-1: config 0 descriptor?? [ 324.127264][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3166'. [ 324.177138][ T5293] holtek 0003:1241:5015.0003: report_id 941343636 is invalid [ 324.185988][T13819] veth0_vlan: entered promiscuous mode [ 324.194256][ T5293] holtek 0003:1241:5015.0003: item 0 4 1 8 parsing failed [ 324.203248][ T5293] holtek 0003:1241:5015.0003: parse failed [ 324.210083][ T5293] holtek 0003:1241:5015.0003: probe with driver holtek failed with error -22 [ 324.213006][T14007] syz_tun: entered allmulticast mode [ 324.301173][T13819] veth1_vlan: entered promiscuous mode [ 324.321631][T14006] syz_tun: left allmulticast mode [ 324.527061][T13819] veth0_macvtap: entered promiscuous mode [ 324.536887][T13819] veth1_macvtap: entered promiscuous mode [ 324.588617][T13819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.616340][T13819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.677973][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.706639][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.797551][ T5293] usb 2-1: USB disconnect, device number 12 [ 324.858686][T14020] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.866112][T14020] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.903234][ T5146] Bluetooth: hci3: command tx timeout [ 324.942411][T14020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.956847][T14020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.215931][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.231672][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.278302][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.292621][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.301501][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.347061][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.460745][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.491166][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.550860][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.561102][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.733131][T14043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3178'. [ 325.767557][T14049] syz_tun: entered allmulticast mode [ 325.786769][T14044] syz_tun: left allmulticast mode [ 325.854518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 325.892967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 325.901626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 326.163772][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.173965][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.185802][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.195021][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.204399][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.282934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 326.332009][ T36] IPVS: stop unused estimator thread 0... [ 326.412688][T14061] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 326.419344][T14061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 326.442440][T14061] vhci_hcd vhci_hcd.0: Device attached [ 326.642997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 326.652763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 326.661302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 326.670151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 326.679263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 326.689387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 326.719628][ T5892] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 326.761589][T14062] vhci_hcd: connection closed [ 326.765209][ T50] vhci_hcd vhci_hcd.0: stop threads [ 326.799552][ T50] vhci_hcd vhci_hcd.0: release socket [ 326.815331][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 327.391789][T14059] chnl_net:caif_netlink_parms(): no params data found [ 327.999172][T14059] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.042724][T14059] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.049895][T14059] bridge_slave_0: entered allmulticast mode [ 328.080773][T14059] bridge_slave_0: entered promiscuous mode [ 328.140965][T14059] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.182729][T14059] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.202745][T14059] bridge_slave_1: entered allmulticast mode [ 328.210842][T14059] bridge_slave_1: entered promiscuous mode [ 328.262946][ T5146] Bluetooth: hci0: command tx timeout [ 328.386010][T14059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.405881][T14059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.567331][T14059] team0: Port device team_slave_0 added [ 328.579221][T14059] team0: Port device team_slave_1 added [ 328.741033][T14059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.769883][T14059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.848104][T14059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.927771][T14059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.964520][T14059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.026838][T14059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.128628][T14059] hsr_slave_0: entered promiscuous mode [ 329.141695][T14059] hsr_slave_1: entered promiscuous mode [ 329.175290][T14059] debugfs: 'hsr0' already exists in 'hsr' [ 329.181030][T14059] Cannot create hsr debugfs directory [ 329.406044][T14124] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3202'. [ 329.585575][ T36] bridge_slave_1: left allmulticast mode [ 329.591249][ T36] bridge_slave_1: left promiscuous mode [ 329.616091][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.634583][ T36] bridge_slave_0: left allmulticast mode [ 329.651020][ T36] bridge_slave_0: left promiscuous mode [ 329.660725][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.919777][ T36] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 330.342733][ T5146] Bluetooth: hci0: command tx timeout [ 330.368892][ T36] bond6 (unregistering): (slave bridge1): Releasing active interface [ 330.437145][ T36] bond7 (unregistering): (slave bridge2): Releasing active interface [ 330.504410][ T36] bond8 (unregistering): (slave bridge3): Releasing active interface [ 330.610032][ T36] bond23 (unregistering): (slave bridge5): Releasing active interface [ 330.666776][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.677161][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.686810][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 330.696445][ T36] bond0 (unregistering): Released all slaves [ 330.769371][ T36] bond1 (unregistering): Released all slaves [ 330.872782][ T36] bond2 (unregistering): Released all slaves [ 330.998947][ T36] bond3 (unregistering): Released all slaves [ 331.094599][ T36] bond4 (unregistering): Released all slaves [ 331.201409][ T36] team0: Port device macvlan2 removed [ 331.225626][ T36] bond5 (unregistering): Released all slaves [ 331.277874][ T36] bond6 (unregistering): Released all slaves [ 331.297122][ T36] bond7 (unregistering): Released all slaves [ 331.331581][ T36] bond8 (unregistering): Released all slaves [ 331.440701][ T36] bond9 (unregistering): Released all slaves [ 331.544271][ T36] bond10 (unregistering): Released all slaves [ 331.586426][ T36] bond11 (unregistering): Released all slaves [ 331.720987][ T36] team0: Port device macvlan3 removed [ 331.746967][ T36] bond12 (unregistering): Released all slaves [ 331.862671][ T5892] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 331.926176][ T36] bond13 (unregistering): Released all slaves [ 332.011028][ T36] team0: Port device macvlan4 removed [ 332.029142][ T36] bond14 (unregistering): Released all slaves [ 332.127126][ T36] team0: Port device macvlan5 removed [ 332.135762][ T36] bond15 (unregistering): Released all slaves [ 332.265738][ T36] team0: Port device macvlan6 removed [ 332.277147][ T36] bond16 (unregistering): Released all slaves [ 332.363974][ T36] team0: Port device macvlan7 removed [ 332.373228][ T36] bond17 (unregistering): Released all slaves [ 332.432742][ T5146] Bluetooth: hci0: command tx timeout [ 332.451236][ T36] bond18 (unregistering): Released all slaves [ 332.463390][ T36] bond19 (unregistering): Released all slaves [ 332.475278][ T36] bond20 (unregistering): Released all slaves [ 332.488644][ T36] bond21 (unregistering): Released all slaves [ 332.502313][ T36] bond22 (unregistering): Released all slaves [ 332.526794][ T36] bond23 (unregistering): Released all slaves [ 332.789671][T14183] netlink: 'syz.0.3217': attribute type 1 has an invalid length. [ 332.986016][T14194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3217'. [ 333.103190][T14188] bond1: (slave geneve2): making interface the new active one [ 333.141924][T14188] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 333.182418][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3222'. [ 333.230351][T14194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.246489][ T153] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 333.266389][ T153] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 333.329096][ T153] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 333.434194][T14218] netlink: 'syz.4.3224': attribute type 1 has an invalid length. [ 333.499702][ T153] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 333.663895][T14233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3224'. [ 333.705913][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3224'. [ 333.760151][T14222] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 333.782346][T14222] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 333.831164][T14227] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 333.868456][T14235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.205917][T14059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.316218][T14059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 334.445967][T14059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 334.502742][ T5146] Bluetooth: hci0: command tx timeout [ 334.526809][T14059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 334.593346][ T36] tipc: Left network mode [ 335.136837][ T36] hsr_slave_0: left promiscuous mode [ 335.154663][ T36] hsr_slave_1: left promiscuous mode [ 335.163027][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.180626][T14290] netlink: 'syz.3.3245': attribute type 1 has an invalid length. [ 335.181168][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.349636][T14296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3245'. [ 335.398641][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'. [ 335.526750][T14301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3246'. [ 336.039801][T14322] IPVS: length: 218 != 24 [ 336.090325][ T36] team0 (unregistering): Port device team_slave_1 removed [ 336.135046][ T36] team0 (unregistering): Port device team_slave_0 removed [ 336.528971][T14290] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 336.675379][T14316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3250'. [ 336.692924][T14322] syz_tun: entered allmulticast mode [ 336.705096][T14319] syz_tun: left allmulticast mode [ 336.722096][T14059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.780447][T14059] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.856432][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.863628][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.894770][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.901934][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.938150][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3256'. [ 337.080810][T14059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.181972][T14059] veth0_vlan: entered promiscuous mode [ 337.208268][T14059] veth1_vlan: entered promiscuous mode [ 337.291878][T14059] veth0_macvtap: entered promiscuous mode [ 337.330882][T14059] veth1_macvtap: entered promiscuous mode [ 337.367965][T14059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.408588][T14059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.431111][ T1115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.453203][ T1115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.461916][ T1115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.491173][ T1115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.641441][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.669422][ T5293] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 337.683562][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.743917][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.755742][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.840450][ T5293] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 337.876578][ T5293] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.907194][ T5293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 337.922595][ T5293] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 337.951968][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.971108][ T5293] usb 4-1: config 0 descriptor?? [ 338.069486][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'. [ 338.563306][ T5293] lenovo 0003:17EF:60EE.0004: unknown main item tag 0x0 [ 338.571500][ T5293] lenovo 0003:17EF:60EE.0004: unknown main item tag 0x0 [ 338.593255][ T5293] lenovo 0003:17EF:60EE.0004: unknown main item tag 0x0 [ 338.600743][ T5293] lenovo 0003:17EF:60EE.0004: unknown main item tag 0x0 [ 338.609017][ T5293] lenovo 0003:17EF:60EE.0004: unknown main item tag 0x0 [ 338.633624][ T5293] lenovo 0003:17EF:60EE.0004: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 338.795000][ T5293] lenovo 0003:17EF:60EE.0004: Failed to switch middle button: -71 [ 338.823376][ T5293] lenovo 0003:17EF:60EE.0004: Fn-lock setting failed: -71 [ 338.836326][ T5293] lenovo 0003:17EF:60EE.0004: Sensitivity setting failed: -71 [ 338.858876][ T5293] usb 4-1: USB disconnect, device number 15 [ 339.241800][T14401] vlan2: entered allmulticast mode [ 339.252855][T14401] bond0: entered allmulticast mode [ 339.257986][T14401] bond_slave_0: entered allmulticast mode [ 339.285153][T14401] bond_slave_1: entered allmulticast mode [ 339.288342][T14402] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3276'. [ 339.376089][T14402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.389792][T14402] bond_slave_0: left allmulticast mode [ 339.403227][T14402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.412636][ T39] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 339.423241][T14402] bond_slave_1: left allmulticast mode [ 339.429077][T14402] bond0 (unregistering): Released all slaves [ 339.612272][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.637571][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.666610][ T39] usb 2-1: Product: syz [ 339.670788][ T39] usb 2-1: Manufacturer: syz [ 339.691487][ T39] usb 2-1: SerialNumber: syz [ 339.792720][T14417] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 340.048384][T14426] ------------[ cut here ]------------ [ 340.054140][T14426] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 340.054166][T14426] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#0: syz.2.3285/14426 [ 340.073802][T14426] Modules linked in: [ 340.077988][T14426] CPU: 0 UID: 0 PID: 14426 Comm: syz.2.3285 Not tainted syzkaller #0 PREEMPT(full) [ 340.087897][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 340.098473][T14426] RIP: 0010:path_noexec+0x1af/0x200 [ 340.103807][T14426] Code: 02 31 ff 48 89 de e8 70 f3 83 ff d1 eb eb 07 e8 87 ee 83 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 88 5a 59 09 cc e8 72 ee 83 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 340.123592][T14426] RSP: 0018:ffffc9000ce0fbb8 EFLAGS: 00010287 [ 340.129679][T14426] RAX: ffffffff824088de RBX: ffff88803226c080 RCX: 0000000000080000 [ 340.138103][T14426] RDX: ffffc90005451000 RSI: 0000000000000068 RDI: 0000000000000069 [ 340.146165][T14426] RBP: 0000000000080000 R08: ffff88802705bd00 R09: 0000000000000003 [ 340.154237][T14426] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 340.162211][T14426] R13: 1ffff920019c1f8c R14: 0000000000000000 R15: dffffc0000000000 [ 340.170231][T14426] FS: 0000000000000000(0000) GS:ffff8881256f5000(0063) knlGS:00000000f54a6b40 [ 340.179375][T14426] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 340.186080][T14426] CR2: 000000000c385a5c CR3: 000000005c4ee000 CR4: 00000000003526f0 [ 340.194654][T14426] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 340.198353][T14426] [ 340.201297][T14426] do_mmap+0xa32/0x10c0 [ 340.205514][T14426] ? __pfx_do_mmap+0x10/0x10 [ 340.210115][T14426] ? down_write_killable+0x180/0x240 [ 340.215434][T14426] ? __pfx_down_write_killable+0x10/0x10 [ 340.221081][T14426] ? apparmor_mmap_file+0x23e/0x2b0 [ 340.226357][T14426] vm_mmap_pgoff+0x2c9/0x4f0 [ 340.230980][T14426] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 340.236180][T14426] ? __fget_files+0x2a/0x420 [ 340.241203][T14426] ? __fget_files+0x3a0/0x420 [ 340.245950][T14426] ? __fget_files+0x2a/0x420 [ 340.250556][T14426] ksys_mmap_pgoff+0x51e/0x760 [ 340.255414][T14426] __do_fast_syscall_32+0x1d2/0x540 [ 340.261961][T14426] ? do_fast_syscall_32+0x33/0x70 [ 340.267042][T14426] ? irqentry_exit+0x10e/0x620 [ 340.271830][T14426] do_fast_syscall_32+0x33/0x70 [ 340.276739][T14426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 340.283097][T14426] RIP: 0023:0xf7fe7539 [ 340.287181][T14426] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 340.307417][T14426] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 340.316731][T14426] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000 [ 340.324816][T14426] RDX: 0000000003000007 RSI: 0000000000000011 RDI: 0000000000000008 [ 340.332822][T14426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.340796][T14426] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 340.348823][T14426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.356860][T14426] [ 340.359885][T14426] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 340.367160][T14426] CPU: 0 UID: 0 PID: 14426 Comm: syz.2.3285 Not tainted syzkaller #0 PREEMPT(full) [ 340.376521][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 340.386563][T14426] Call Trace: [ 340.389828][T14426] [ 340.392746][T14426] vpanic+0x1e0/0x670 [ 340.396729][T14426] panic+0xc5/0xd0 [ 340.400439][T14426] ? __pfx_panic+0x10/0x10 [ 340.404860][T14426] __warn+0x315/0x4a0 [ 340.408834][T14426] ? path_noexec+0x1af/0x200 [ 340.413414][T14426] ? path_noexec+0x1af/0x200 [ 340.417999][T14426] __report_bug+0x29a/0x540 [ 340.422490][T14426] ? path_noexec+0x1af/0x200 [ 340.427070][T14426] ? __pfx___report_bug+0x10/0x10 [ 340.432078][T14426] ? futex_unqueue+0x211/0x240 [ 340.436838][T14426] ? arch_get_unmapped_area_topdown+0x264/0xb60 [ 340.443067][T14426] ? path_noexec+0x1af/0x200 [ 340.447648][T14426] report_bug+0x16a/0x220 [ 340.451962][T14426] ? path_noexec+0x1af/0x200 [ 340.456537][T14426] ? path_noexec+0x1b1/0x200 [ 340.461115][T14426] handle_bug+0x98/0x200 [ 340.465349][T14426] exc_invalid_op+0x1a/0x50 [ 340.469845][T14426] asm_exc_invalid_op+0x1a/0x20 [ 340.474683][T14426] RIP: 0010:path_noexec+0x1af/0x200 [ 340.479870][T14426] Code: 02 31 ff 48 89 de e8 70 f3 83 ff d1 eb eb 07 e8 87 ee 83 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 88 5a 59 09 cc e8 72 ee 83 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 340.499459][T14426] RSP: 0018:ffffc9000ce0fbb8 EFLAGS: 00010287 [ 340.505518][T14426] RAX: ffffffff824088de RBX: ffff88803226c080 RCX: 0000000000080000 [ 340.513485][T14426] RDX: ffffc90005451000 RSI: 0000000000000068 RDI: 0000000000000069 [ 340.521443][T14426] RBP: 0000000000080000 R08: ffff88802705bd00 R09: 0000000000000003 [ 340.529397][T14426] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 340.537357][T14426] R13: 1ffff920019c1f8c R14: 0000000000000000 R15: dffffc0000000000 [ 340.545322][T14426] ? path_noexec+0x1ae/0x200 [ 340.549912][T14426] ? path_noexec+0x1ae/0x200 [ 340.554491][T14426] do_mmap+0xa32/0x10c0 [ 340.558646][T14426] ? __pfx_do_mmap+0x10/0x10 [ 340.563229][T14426] ? down_write_killable+0x180/0x240 [ 340.568507][T14426] ? __pfx_down_write_killable+0x10/0x10 [ 340.574125][T14426] ? apparmor_mmap_file+0x23e/0x2b0 [ 340.579319][T14426] vm_mmap_pgoff+0x2c9/0x4f0 [ 340.583904][T14426] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 340.589009][T14426] ? __fget_files+0x2a/0x420 [ 340.593594][T14426] ? __fget_files+0x3a0/0x420 [ 340.598258][T14426] ? __fget_files+0x2a/0x420 [ 340.602851][T14426] ksys_mmap_pgoff+0x51e/0x760 [ 340.607624][T14426] __do_fast_syscall_32+0x1d2/0x540 [ 340.612814][T14426] ? do_fast_syscall_32+0x33/0x70 [ 340.617826][T14426] ? irqentry_exit+0x10e/0x620 [ 340.622579][T14426] do_fast_syscall_32+0x33/0x70 [ 340.627415][T14426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 340.633734][T14426] RIP: 0023:0xf7fe7539 [ 340.637789][T14426] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 340.657380][T14426] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 340.665783][T14426] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000 [ 340.673742][T14426] RDX: 0000000003000007 RSI: 0000000000000011 RDI: 0000000000000008 [ 340.681697][T14426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.689652][T14426] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 340.697611][T14426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.705583][T14426] [ 340.708930][T14426] Kernel Offset: disabled [ 340.713237][T14426] Rebooting in 86400 seconds..