last executing test programs: 9m46.255092566s ago: executing program 1 (id=572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20004800) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'syz_tun\x00', @random="6c3e7d65df10"}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={r5, 0x4, 0x400, 0x7}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) write$ppp(r6, &(0x7f00000004c0)="c701e712c5129cf4bd600f8cd73e93e6a08a0cd3cd182da989491752ec14a82e3448e06365d4d9a535f979c20b6861c2cbeef3c2abc9", 0x36) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) 9m45.015381278s ago: executing program 1 (id=579): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x13, 0x3, 0x2, 0x8001}, 0x50) 9m44.386908006s ago: executing program 1 (id=583): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc054) socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 9m43.519318596s ago: executing program 1 (id=587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x18, r1, 0x1, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) 9m42.814881784s ago: executing program 1 (id=591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x20004000) 9m41.959156918s ago: executing program 1 (id=596): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @multicast2}, 0x84, 0x0, 0x0, 0x0, 0xfff7, &(0x7f0000000000)='ip6_vti0\x00', 0x1000, 0xfffffffffffffff9, 0x6}) recvfrom(r0, &(0x7f00000001c0)=""/16, 0x10, 0x40000000, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) 9m26.542743872s ago: executing program 32 (id=596): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @multicast2}, 0x84, 0x0, 0x0, 0x0, 0xfff7, &(0x7f0000000000)='ip6_vti0\x00', 0x1000, 0xfffffffffffffff9, 0x6}) recvfrom(r0, &(0x7f00000001c0)=""/16, 0x10, 0x40000000, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) 26.34814126s ago: executing program 2 (id=2926): keyctl$update(0x2, 0x0, &(0x7f0000000300)="31a7", 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x100089) r2 = dup(r0) unshare(0x2010000) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="44010000000000000000000000000000000000005c29008007ed98ca4945e9bb613185507aaf605d209b44433c1d00c48ba4aa090000446fd411ece71e1fea839ccc37a86a43db6445ecf547d3d5f1d48057f5e1205408743b75da090b6a809b02d1bf5cc7f4170c84e3f22fc20525eb03b83818712f542a4f8d73f6cec1126ec2298d7c54a080b1f4223872cdf8ecc8a0b4c296d65993a59883dc5d849b03b90198c772d77e99c4fd5a8d1c2d1db2714123689346c47b1372951d193baa", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900880000000500010001000000"], 0x44}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x12, r6, 0x0) unshare(0x22020400) vmsplice(r6, &(0x7f0000000300)=[{&(0x7f0000000340)='N', 0x1}], 0x1, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000080)=ANY=[@ANYBLOB]) 24.742920842s ago: executing program 2 (id=2930): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc", @ANYRES16=r1], 0x398}}, 0x0) 23.947778728s ago: executing program 2 (id=2935): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000980)={0x2, [0x0, 0x0]}, &(0x7f00000009c0)=0xc) 23.168605248s ago: executing program 2 (id=2937): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x4}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x2d, 0x0, 0x3}, {}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r2, 0x3) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$key(0xf, 0x3, 0x2) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x84, r6, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x65ade1f2076ea7fe) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) 22.23263166s ago: executing program 2 (id=2940): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 21.15122605s ago: executing program 2 (id=2943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "88634d58"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 9.516241406s ago: executing program 3 (id=2965): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 8.427398351s ago: executing program 0 (id=2968): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc47", @ANYRES16=r1], 0x398}}, 0x0) 8.338884824s ago: executing program 5 (id=2969): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000000000001a0000000c000c400000000000000003"], 0x28}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@initdev={0xac, 0x1e, 0xfe, 0x0}]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@broadcast, 0x4e26, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {0x2, 0x53, 0x200000000000fff, 0x100000, 0xfffffffffffffffc, 0x6, 0xfffffffffffffffe, 0x8001}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x1000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010100, 0x0, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x9}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000002c0)={r9, 0xff, 0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[], 0x0, 0x32}, 0x28) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0101000000000000af628628ea0008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x20090}, 0x4840) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 8.291308425s ago: executing program 3 (id=2970): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 8.063031666s ago: executing program 4 (id=2971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x4}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x2d, 0x0, 0x3}, {}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r2, 0x3) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$key(0xf, 0x3, 0x2) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x88, r6, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x65ade1f2076ea7fe) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) 7.631903819s ago: executing program 0 (id=2972): syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@broadcast}, {@private=0xa010102}]}, @ssrr={0x89, 0x7, 0xce, [@private=0xa010101]}, @lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.56641516s ago: executing program 3 (id=2973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20004800) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, 0x0, 0x4000080) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'syz_tun\x00', @random="6c3e7d65df10"}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={r5, 0x4, 0x400, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) write$ppp(r6, &(0x7f00000004c0)="c701e712c5129cf4bd600f8cd73e93e6a08a0cd3cd182da989491752ec14a82e3448e06365d4d9a535f979c20b6861c2cbeef3c2abc9", 0x36) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) 7.549998746s ago: executing program 5 (id=2974): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0) 7.21306604s ago: executing program 4 (id=2975): keyctl$update(0x2, 0x0, &(0x7f0000000300)="31a7", 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x100089) r2 = dup(r0) unshare(0x2010000) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="44010000000000000000000000000000000000005c29008007ed98ca4945e9bb613185507aaf605d209b44433c1d00c48ba4aa090000446fd411ece71e1fea839ccc37a86a43db6445ecf547d3d5f1d48057f5e1205408743b75da090b6a809b02d1bf5cc7f4170c84e3f22fc20525eb03b83818712f542a4f8d73f6cec1126ec2298d7c54a080b1f4223872cdf8ecc8a0b4c296d65993a59883dc5d849b03b90198c772d77e99c4fd5a8d1c2d1db2714123689346c47b1372951d193baa", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900880000000500010001000000"], 0x44}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x12, r6, 0x0) unshare(0x22020400) vmsplice(r6, &(0x7f0000000300)=[{&(0x7f0000000340)='N', 0x1}], 0x1, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004c87c810cd0615011e1a0102030109022407000000000009040000026048fe0009050b000000000000090503030000000000"], 0x0) 6.842426981s ago: executing program 0 (id=2976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0x2}}]}}]}, 0x38}}, 0x8040) 6.811901125s ago: executing program 5 (id=2977): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd6f}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r0}, 0x18) r1 = socket(0x10, 0x2, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/34, 0x22}, {0x0}], 0x4, &(0x7f00000017c0)=""/114, 0x72}, 0x10100) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x0, 0x2, 0x0) 6.45795177s ago: executing program 3 (id=2978): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000200)={0x6, 0x2, 0x6, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x10) 5.920958029s ago: executing program 0 (id=2979): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="010000201000"}) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, 0x0) getpeername$unix(r4, &(0x7f0000000240)=@abs, &(0x7f00000000c0)=0x6e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5, 0x3, "c4"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) 5.354636404s ago: executing program 5 (id=2980): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)={0x24, r2, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xfffffffffffffef6, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x24}}, 0x0) r3 = openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r4 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r3) close(r4) 4.303089169s ago: executing program 3 (id=2981): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc47", @ANYRES16=r1], 0x398}}, 0x0) 3.663015384s ago: executing program 4 (id=2982): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0d385aa3d49100dc6626c8920400436aa503aaab45983bf3acbea37cec9a6c3920", 0x21) 3.478623692s ago: executing program 5 (id=2983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000000000001a0000000c000c400000000000000003"], 0x28}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@initdev={0xac, 0x1e, 0xfe, 0x0}]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@broadcast, 0x4e26, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {0x2, 0x53, 0x200000000000fff, 0x100000, 0xfffffffffffffffc, 0x6, 0xfffffffffffffffe, 0x8001}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x1000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010100, 0x0, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x9}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000002c0)={r9, 0xff, 0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[], 0x0, 0x32}, 0x28) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0101000000000000af628628ea0008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x20090}, 0x4840) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 3.072232986s ago: executing program 3 (id=2984): openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x250}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 2.32472306s ago: executing program 0 (id=2985): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r1, &(0x7f0000000500), 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r2 = socket$kcm(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080) 2.022878904s ago: executing program 4 (id=2986): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0) 1.462811302s ago: executing program 4 (id=2987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20004800) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, 0x0, 0x4000080) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'syz_tun\x00', @random="6c3e7d65df10"}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={r5, 0x4, 0x400, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) write$ppp(r6, &(0x7f00000004c0)="c701e712c5129cf4bd600f8cd73e93e6a08a0cd3cd182da989491752ec14a82e3448e06365d4d9a535f979c20b6861c2cbeef3c2abc9", 0x36) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) 1.251192912s ago: executing program 5 (id=2988): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000440)={0x20, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000680)={0x1, 0x2, 0x3, &(0x7f0000000400)={0x1b, "65c28678ec59b73ade02da39a66f440cfa56ec4319a52702236bf319b49de48232"}}) 597.285685ms ago: executing program 0 (id=2989): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd6f}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r0}, 0x18) r1 = socket(0x10, 0x2, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/34, 0x22}, {0x0}], 0x4, &(0x7f00000017c0)=""/114, 0x72}, 0x10100) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x0, 0x2, 0x0) 0s ago: executing program 4 (id=2990): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) kernel console output (not intermixed with test programs): 2] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.761242][ T4172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.209840][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.218536][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.595307][ T5925] usb 5-1: USB disconnect, device number 6 [ 481.857144][ T1736] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 482.067668][ T1736] usb 6-1: Using ep0 maxpacket: 32 [ 482.103281][ T1736] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 482.112198][ T1736] usb 6-1: config 0 has no interface number 0 [ 482.301870][ T1736] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 482.311701][ T1736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.325604][ T1736] usb 6-1: Product: syz [ 482.331498][ T1736] usb 6-1: Manufacturer: syz [ 482.336491][ T1736] usb 6-1: SerialNumber: syz [ 482.480595][ T1736] usb 6-1: config 0 descriptor?? [ 482.540584][ T1736] smsc95xx v2.0.0 [ 482.979914][ T1736] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 482.991387][ T1736] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 484.280238][ T1736] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 484.292817][ T1736] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 484.637349][ T8240] netlink: 'syz.3.788': attribute type 10 has an invalid length. [ 484.647520][ T8240] vlan1: entered allmulticast mode [ 484.652946][ T8240] veth0_vlan: entered allmulticast mode [ 484.698076][ T8240] team0: Port device vlan1 added [ 485.064676][ T8245] netlink: 'syz.4.789': attribute type 1 has an invalid length. [ 485.073779][ T8245] netlink: 72 bytes leftover after parsing attributes in process `syz.4.789'. [ 486.221360][ T1736] usb 6-1: USB disconnect, device number 2 [ 489.104238][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.5.798'. [ 489.155113][ T5082] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.466918][ T5082] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.734347][ T5082] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.393183][ T5082] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.068136][ T5082] bridge_slave_1: left allmulticast mode [ 491.074395][ T5082] bridge_slave_1: left promiscuous mode [ 491.081610][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.247908][ T5082] bridge_slave_0: left allmulticast mode [ 491.253972][ T5082] bridge_slave_0: left promiscuous mode [ 491.261340][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.843155][ T5082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.921819][ T5082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.023918][ T5082] bond0 (unregistering): Released all slaves [ 494.351691][ T8325] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 494.365216][ T8325] netlink: 72 bytes leftover after parsing attributes in process `syz.4.815'. [ 494.502583][ T24] IPVS: starting estimator thread 0... [ 494.599079][ T8328] IPVS: using max 192 ests per chain, 9600 per kthread [ 495.567918][ T5082] hsr_slave_0: left promiscuous mode [ 495.643778][ T5082] hsr_slave_1: left promiscuous mode [ 495.652564][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.660699][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.754371][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.762689][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.976499][ T5082] veth1_macvtap: left promiscuous mode [ 495.982453][ T5082] veth0_macvtap: left promiscuous mode [ 495.988922][ T5082] veth1_vlan: left promiscuous mode [ 495.994584][ T5082] veth0_vlan: left promiscuous mode [ 496.527473][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 497.499068][ T5082] team0 (unregistering): Port device team_slave_1 removed [ 497.603980][ T5082] team0 (unregistering): Port device team_slave_0 removed [ 501.959151][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.5.838'. [ 503.096312][ T7163] Bluetooth: hci4: command 0x0406 tx timeout [ 504.836242][ T1736] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 505.056594][ T1736] usb 4-1: Using ep0 maxpacket: 32 [ 505.109478][ T1736] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 505.118201][ T1736] usb 4-1: config 0 has no interface number 0 [ 505.124602][ T1736] usb 4-1: config 0 interface 184 has no altsetting 0 [ 505.178487][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'. [ 505.286540][ T1736] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 505.296125][ T1736] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 505.304528][ T1736] usb 4-1: Product: syz [ 505.308992][ T1736] usb 4-1: Manufacturer: syz [ 505.313759][ T1736] usb 4-1: SerialNumber: syz [ 505.422041][ T1736] usb 4-1: config 0 descriptor?? [ 505.490282][ T1736] smsc75xx v1.0.0 [ 506.164539][ T1736] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 506.179150][ T1736] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 506.421719][ T1736] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 506.433450][ T1736] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 506.443464][ T1736] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 506.454067][ T1736] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 507.150672][ T8462] netlink: 136 bytes leftover after parsing attributes in process `syz.5.857'. [ 507.160089][ T8462] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 507.857322][ T8470] netlink: 1 bytes leftover after parsing attributes in process `syz.2.859'. [ 507.881543][ T24] usb 4-1: USB disconnect, device number 3 [ 509.199558][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'. [ 510.916427][ T1736] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 511.146656][ T1736] usb 6-1: Using ep0 maxpacket: 32 [ 511.220573][ T1736] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 511.230707][ T1736] usb 6-1: config 0 has no interface number 0 [ 511.238203][ T1736] usb 6-1: config 0 interface 184 has no altsetting 0 [ 511.386895][ T1736] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 511.396587][ T1736] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 511.409264][ T1736] usb 6-1: Product: syz [ 511.413700][ T1736] usb 6-1: Manufacturer: syz [ 511.420126][ T1736] usb 6-1: SerialNumber: syz [ 511.468991][ T8517] netlink: 27 bytes leftover after parsing attributes in process `syz.0.874'. [ 511.549405][ T1736] usb 6-1: config 0 descriptor?? [ 511.572017][ T1736] smsc75xx v1.0.0 [ 511.874243][ T8514] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 511.903025][ T8514] syzkaller0: entered promiscuous mode [ 511.908991][ T8514] syzkaller0: entered allmulticast mode [ 512.268557][ T1736] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 512.280097][ T1736] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 512.509938][ T1736] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 512.521683][ T1736] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 512.539193][ T1736] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 512.552881][ T1736] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 514.206014][ T1736] usb 6-1: USB disconnect, device number 3 [ 515.047030][ T8557] netlink: 'syz.4.887': attribute type 1 has an invalid length. [ 515.055517][ T8557] netlink: 72 bytes leftover after parsing attributes in process `syz.4.887'. [ 516.850576][ T8578] netlink: 27 bytes leftover after parsing attributes in process `syz.5.891'. [ 517.781521][ T8575] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 517.810291][ T8575] syzkaller0: entered promiscuous mode [ 517.816211][ T8575] syzkaller0: entered allmulticast mode [ 518.004994][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 518.196070][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 518.213824][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 518.223029][ T24] usb 1-1: config 0 has no interface number 0 [ 518.230021][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 518.340801][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 518.351027][ T24] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 518.359675][ T24] usb 1-1: Product: syz [ 518.367497][ T24] usb 1-1: Manufacturer: syz [ 518.372386][ T24] usb 1-1: SerialNumber: syz [ 518.679511][ T24] usb 1-1: config 0 descriptor?? [ 518.710261][ T24] smsc75xx v1.0.0 [ 519.437178][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 519.448966][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 519.669269][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 519.680662][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 519.690772][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 519.708947][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 521.105613][ T24] usb 1-1: USB disconnect, device number 5 [ 522.267933][ T8635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.910'. [ 522.521324][ T8640] netlink: 'syz.0.912': attribute type 1 has an invalid length. [ 522.530057][ T8640] netlink: 72 bytes leftover after parsing attributes in process `syz.0.912'. [ 526.971058][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.924'. [ 530.748408][ T8731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.941'. [ 531.949748][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 533.967739][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.957'. [ 535.213433][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'. [ 536.890257][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.897446][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.779445][ T8826] netlink: 'syz.4.977': attribute type 1 has an invalid length. [ 537.788033][ T8826] netlink: 72 bytes leftover after parsing attributes in process `syz.4.977'. [ 538.758988][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 541.485178][ T8869] netlink: 72 bytes leftover after parsing attributes in process `syz.5.989'. [ 542.755612][ T8881] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1004'. [ 543.167775][ T8893] netlink: 'syz.2.997': attribute type 1 has an invalid length. [ 543.177219][ T8893] netlink: 72 bytes leftover after parsing attributes in process `syz.2.997'. [ 547.006650][ T8930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1010'. [ 549.990659][ T8961] netlink: 'syz.0.1020': attribute type 1 has an invalid length. [ 549.999473][ T8961] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1020'. [ 551.643005][ T8978] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1025'. [ 556.121701][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'. [ 556.536751][ T9027] netlink: 'syz.5.1042': attribute type 1 has an invalid length. [ 556.545397][ T9027] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1042'. [ 558.413128][ T9047] IPv6: Can't replace route, no match found [ 560.038058][ T9065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1054'. [ 560.309124][ T9067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1055'. [ 561.438368][ T9084] netlink: 'syz.2.1063': attribute type 1 has an invalid length. [ 561.447313][ T9084] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1063'. [ 564.492552][ T9118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1073'. [ 564.544987][ T7163] Bluetooth: hci5: command 0x0406 tx timeout [ 566.166032][ T9144] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 566.174483][ T9144] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1082'. [ 566.928192][ T9158] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1085'. [ 567.707851][ T9166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1088'. [ 570.907252][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1099'. [ 571.262525][ T9211] netlink: 'syz.4.1101': attribute type 1 has an invalid length. [ 571.271292][ T9211] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1101'. [ 572.267168][ T9221] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1104'. [ 575.248427][ T9254] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1113'. [ 576.738878][ T9279] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1118'. [ 576.748961][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1118'. [ 578.258286][ T9298] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 578.267142][ T9298] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1126'. [ 578.852334][ T9307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1128'. [ 581.159266][ T9329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1133'. [ 581.169274][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'. [ 582.849046][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1141'. [ 583.056725][ T9353] sctp: [Deprecated]: syz.5.1140 (pid 9353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 583.056725][ T9353] Use struct sctp_sack_info instead [ 583.719973][ T9359] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.729336][ T9359] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.738768][ T9359] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.748087][ T9359] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.879642][ T9359] team0: Port device vxlan0 added [ 584.471802][ T9368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1147'. [ 584.481544][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 584.969105][ T9373] netlink: 'syz.3.1149': attribute type 1 has an invalid length. [ 584.977941][ T9373] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1149'. [ 586.682734][ T9392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1155'. [ 589.337899][ T9416] macsec1: entered promiscuous mode [ 589.343875][ T9416] macsec1: entered allmulticast mode [ 589.779452][ T9422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1162'. [ 591.229073][ T9441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1168'. [ 591.520278][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 592.347670][ T9457] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1174'. [ 593.030939][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1176'. [ 595.494510][ T9502] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1191'. [ 596.522608][ T9507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1192'. [ 598.334359][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.346879][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 599.051757][ T9542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1201'. [ 599.638996][ T9551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1204'. [ 602.724843][ T9589] tipc: Started in network mode [ 602.731881][ T9589] tipc: Node identity 2da655f0a2cc7dba002e, cluster identity 4711 [ 603.094672][ T9595] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.103995][ T9595] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.113278][ T9595] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.122549][ T9595] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.143922][ T9595] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 607.900679][ T9647] tipc: Started in network mode [ 607.906148][ T9647] tipc: Node identity -, cluster identity 4711 [ 608.128912][ T9648] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.138279][ T9648] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.147699][ T9648] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.159306][ T9648] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.185602][ T9648] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 611.100771][ T9689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1243'. [ 611.367513][ T9694] tipc: Cannot configure node identity twice [ 614.357283][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1257'. [ 614.736738][ T9739] tipc: Cannot configure node identity twice [ 615.420259][ T9744] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.429576][ T9744] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.439163][ T9744] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.452580][ T9744] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.472573][ T9744] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 617.650982][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'. [ 618.085963][ T9772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1270'. [ 621.459139][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 621.603410][ T9819] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1283'. [ 621.613006][ T9819] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1283'. [ 624.602012][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1297'. [ 624.639573][ T9852] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1297'. [ 624.649385][ T9852] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1297'. [ 628.193006][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'. [ 628.237903][ T9892] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1311'. [ 628.250978][ T9892] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1311'. [ 628.868439][ T9902] netlink: 'syz.4.1316': attribute type 1 has an invalid length. [ 628.877316][ T9902] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1316'. [ 631.952645][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 632.005388][ T9936] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1328'. [ 632.015294][ T9936] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1328'. [ 633.499197][ T9956] netlink: 'syz.5.1336': attribute type 1 has an invalid length. [ 633.507916][ T9956] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1336'. [ 635.309336][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'. [ 635.390656][ T9980] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1344'. [ 635.400315][ T9980] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1344'. [ 637.522029][T10003] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1354'. [ 637.707452][T10007] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1356'. [ 638.204970][T10014] netlink: 'syz.2.1359': attribute type 1 has an invalid length. [ 638.214173][T10014] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1359'. [ 638.441451][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'. [ 638.734994][T10018] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1361'. [ 638.744756][T10018] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1361'. [ 639.645300][T10030] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.654647][T10030] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.663828][T10030] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.673313][T10030] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.691628][T10030] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 640.035250][T10034] sctp: [Deprecated]: syz.3.1366 (pid 10034) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.035250][T10034] Use struct sctp_sack_info instead [ 641.081632][T10042] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1370'. [ 641.914965][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1375'. [ 642.478740][T10060] sctp: [Deprecated]: syz.5.1379 (pid 10060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.478740][T10060] Use struct sctp_sack_info instead [ 642.617606][T10063] netlink: 'syz.2.1380': attribute type 1 has an invalid length. [ 642.626884][T10063] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1380'. [ 644.453127][T10087] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1386'. [ 645.246887][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'. [ 645.912850][T10104] sctp: [Deprecated]: syz.0.1394 (pid 10104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.912850][T10104] Use struct sctp_sack_info instead [ 646.331546][T10111] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 646.340746][T10111] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1398'. [ 647.291670][T10123] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1402'. [ 648.358403][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 650.539599][T10154] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1415'. [ 651.446850][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 653.605537][T10180] tipc: Cannot configure node identity twice [ 654.403258][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1431'. [ 654.568076][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 658.018885][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1447'. [ 658.368972][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 658.472950][T10236] tipc: Started in network mode [ 658.478512][T10236] tipc: Node identity 2da655f0a2cc7dba002e, cluster identity 4711 [ 658.797215][T10238] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1450'. [ 659.244333][T10246] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1454'. [ 659.778106][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.786970][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.977361][T10272] tipc: Started in network mode [ 661.982851][T10272] tipc: Node identity 2da655f0a2cc7dba002e, cluster identity 4711 [ 662.018046][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 662.038458][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1462'. [ 662.670296][T10285] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1465'. [ 662.727056][T10284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1467'. [ 664.393078][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 664.841818][T10311] tipc: Cannot configure node identity twice [ 665.518090][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 666.020262][T10322] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1482'. [ 667.108323][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1489'. [ 667.726864][T10345] tipc: Cannot configure node identity twice [ 668.572372][T10362] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1497'. [ 668.612375][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1496'. [ 670.357557][T10377] warning: `syz.5.1503' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 670.539435][T10381] tipc: Cannot configure node identity twice [ 671.092331][T10388] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1508'. [ 671.726554][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 675.046005][T10422] netlink: 'syz.4.1520': attribute type 1 has an invalid length. [ 675.057089][T10424] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1521'. [ 676.139204][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 678.087779][T10467] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1535'. [ 679.806433][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 679.922355][T10488] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1543'. [ 680.705082][T10501] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1548'. [ 681.071380][T10506] netlink: 'syz.0.1551': attribute type 9 has an invalid length. [ 681.088921][T10506] netlink: 'syz.0.1551': attribute type 6 has an invalid length. [ 681.100154][T10506] netlink: 'syz.0.1551': attribute type 7 has an invalid length. [ 681.109209][T10506] netlink: 'syz.0.1551': attribute type 8 has an invalid length. [ 682.678890][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'. [ 682.749095][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 682.937118][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 682.989913][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 682.998850][ T24] usb 3-1: config 0 has no interface number 0 [ 683.005264][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 683.094938][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 683.104591][ T24] usb 3-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 683.113370][ T24] usb 3-1: Product: syz [ 683.118089][ T24] usb 3-1: Manufacturer: syz [ 683.122960][ T24] usb 3-1: SerialNumber: syz [ 683.254096][ T24] usb 3-1: config 0 descriptor?? [ 683.280468][ T24] smsc75xx v1.0.0 [ 683.417406][T10527] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1560'. [ 683.851408][T10533] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1562'. [ 683.985956][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 683.997681][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 684.863782][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 684.881908][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 684.895235][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 684.907234][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 686.118480][ T24] usb 3-1: USB disconnect, device number 8 [ 687.729520][T10575] tipc: Cannot configure node identity twice [ 689.281940][ T5856] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 689.466117][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 689.503308][ T5856] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 689.512328][ T5856] usb 1-1: config 0 has no interface number 0 [ 689.518924][ T5856] usb 1-1: config 0 interface 184 has no altsetting 0 [ 689.584141][ T5856] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 689.594121][ T5856] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 689.602875][ T5856] usb 1-1: Product: syz [ 689.607579][ T5856] usb 1-1: Manufacturer: syz [ 689.612462][ T5856] usb 1-1: SerialNumber: syz [ 689.634482][ T5856] usb 1-1: config 0 descriptor?? [ 689.650980][ T5856] smsc75xx v1.0.0 [ 690.317027][ T5856] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 690.328648][ T5856] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 691.273380][ T5856] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 691.285887][ T5856] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 691.296218][ T5856] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 691.306902][ T5856] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 692.606501][ T24] usb 1-1: USB disconnect, device number 6 [ 693.237355][T10642] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1606'. [ 695.461283][T10674] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 696.049092][T10685] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1622'. [ 697.273086][T10705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1630'. [ 698.850997][T10724] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1637'. [ 699.699572][T10736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1642'. [ 700.783075][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1648'. [ 702.539929][T10781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1657'. [ 702.749422][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1659'. [ 702.970876][T10790] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1660'. [ 704.119118][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1666'. [ 704.355042][T10808] tipc: Cannot configure node identity twice [ 705.296537][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 705.853929][T10831] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1676'. [ 705.902833][T10831] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1676'. [ 706.749238][T10842] tipc: Started in network mode [ 706.754621][T10842] tipc: Node identity 2da655f0a2cc7dba002e, cluster identity 4711 [ 707.575344][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1687'. [ 708.288130][T10870] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1691'. [ 708.362209][T10873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1691'. [ 709.029165][T10877] tipc: Cannot configure node identity twice [ 709.242928][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 709.447717][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 709.512777][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 709.521593][ T24] usb 1-1: config 0 has no interface number 0 [ 709.529338][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 709.619868][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 709.629637][ T24] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 709.638357][ T24] usb 1-1: Product: syz [ 709.642775][ T24] usb 1-1: Manufacturer: syz [ 709.651238][ T24] usb 1-1: SerialNumber: syz [ 709.728905][ T24] usb 1-1: config 0 descriptor?? [ 709.765501][ T24] smsc75xx v1.0.0 [ 710.402526][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 710.414137][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 710.726952][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1701'. [ 711.238462][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 711.251411][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 711.261973][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 711.272730][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 711.306912][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 711.361388][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 711.931765][T10909] tipc: Cannot configure node identity twice [ 712.442898][ T5856] usb 1-1: USB disconnect, device number 7 [ 713.499391][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 713.565469][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1715'. [ 713.567302][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 714.556666][T10947] tipc: Cannot configure node identity twice [ 715.045970][ T5884] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 715.215552][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 715.229406][ T5884] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 715.238228][ T5884] usb 5-1: config 0 has no interface number 0 [ 715.244619][ T5884] usb 5-1: config 0 interface 184 has no altsetting 0 [ 715.349201][ T5884] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 715.359523][ T5884] usb 5-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 715.368153][ T5884] usb 5-1: Product: syz [ 715.372581][ T5884] usb 5-1: Manufacturer: syz [ 715.377559][ T5884] usb 5-1: SerialNumber: syz [ 715.528317][ T5884] usb 5-1: config 0 descriptor?? [ 715.552942][ T5884] smsc75xx v1.0.0 [ 716.212865][ T5884] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 716.224418][ T5884] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 716.280471][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1730'. [ 716.345823][T10972] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1730'. [ 716.355328][T10972] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1730'. [ 716.616703][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1731'. [ 716.651092][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1731'. [ 717.070920][ T5884] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 717.082730][ T5884] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 717.092886][ T5884] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 717.103703][ T5884] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 717.865232][T10989] tipc: Cannot configure node identity twice [ 718.433640][ T5884] usb 5-1: USB disconnect, device number 7 [ 718.859977][T11004] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1741'. [ 718.874245][T11004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 718.881951][T11004] IPv6: NLM_F_CREATE should be set when creating new route [ 719.139143][T11004] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1741'. [ 719.240727][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1743'. [ 719.300165][T11011] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1743'. [ 719.310201][T11011] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1743'. [ 720.597529][T11030] tipc: Cannot configure node identity twice [ 721.198981][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.206320][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.726924][T11047] __nla_validate_parse: 2 callbacks suppressed [ 721.727009][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'. [ 721.818991][T11047] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1757'. [ 721.828885][T11047] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1757'. [ 722.792655][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1765'. [ 724.842096][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1772'. [ 724.895323][T11085] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1772'. [ 724.909549][T11085] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1772'. [ 726.887516][T11119] tipc: Enabled bearer , priority 10 [ 727.446210][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1788'. [ 727.496908][T11126] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1788'. [ 727.506444][T11126] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1788'. [ 727.890404][ T5884] tipc: Node number set to 2403608650 [ 729.498091][T11155] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1798'. [ 729.714927][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1801'. [ 729.791095][T11163] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1801'. [ 729.800919][T11163] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1801'. [ 730.786094][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1804'. [ 732.985518][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1813'. [ 733.067811][T11201] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1813'. [ 733.077634][T11201] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1813'. [ 733.118267][T11205] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1814'. [ 734.350688][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1819'. [ 735.580478][T11240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1825'. [ 735.795932][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1827'. [ 735.859355][T11249] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1827'. [ 735.873281][T11249] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1827'. [ 736.225572][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1828'. [ 738.497848][T11281] __nla_validate_parse: 1 callbacks suppressed [ 738.497943][T11281] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1838'. [ 738.514747][T11281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.807956][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1841'. [ 739.932741][T11294] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1841'. [ 739.942325][T11294] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1841'. [ 741.191829][T11313] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1845'. [ 742.777367][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 742.861879][T11336] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1854'. [ 742.871697][T11336] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1854'. [ 742.911639][T11334] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1853'. [ 742.922732][T11334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 742.930263][T11334] IPv6: NLM_F_CREATE should be set when creating new route [ 745.393881][T11365] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1862'. [ 746.619291][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'. [ 746.669909][T11372] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1867'. [ 746.679485][T11372] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1867'. [ 746.957487][T11380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1866'. [ 746.967785][T11380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 746.975341][T11380] IPv6: NLM_F_CREATE should be set when creating new route [ 750.923616][T11417] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1879'. [ 751.403205][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1882'. [ 751.467851][T11425] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1882'. [ 751.478047][T11425] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1882'. [ 751.992100][T11427] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1883'. [ 752.001797][T11427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 754.641694][T11456] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1893'. [ 755.814883][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1896'. [ 755.867095][T11464] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1896'. [ 755.876986][T11464] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1896'. [ 756.646116][T11472] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1898'. [ 756.658712][T11472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 756.666453][T11472] IPv6: NLM_F_CREATE should be set when creating new route [ 757.634777][T11488] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 758.324133][T11498] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1907'. [ 759.009734][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1909'. [ 759.114074][T11504] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1909'. [ 759.124685][T11504] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1909'. [ 760.067027][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 760.120748][T11514] team_slave_0: entered promiscuous mode [ 760.127043][T11514] team_slave_1: entered promiscuous mode [ 760.139747][T11514] macvtap1: entered promiscuous mode [ 760.145369][T11514] team0: entered promiscuous mode [ 760.154482][T11514] macvtap1: entered allmulticast mode [ 760.160589][T11514] team0: entered allmulticast mode [ 760.166165][T11514] team_slave_0: entered allmulticast mode [ 760.172167][T11514] team_slave_1: entered allmulticast mode [ 760.184305][T11514] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 760.267667][T11515] tipc: Cannot configure node identity twice [ 760.362461][T11518] team0: left allmulticast mode [ 760.368750][T11518] team_slave_0: left allmulticast mode [ 760.374630][T11518] team_slave_1: left allmulticast mode [ 760.380910][T11518] team0: left promiscuous mode [ 760.389605][T11518] team_slave_0: left promiscuous mode [ 760.395311][T11518] team_slave_1: left promiscuous mode [ 761.148116][T11528] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1917'. [ 761.162215][T11528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 761.169898][T11528] IPv6: NLM_F_CREATE should be set when creating new route [ 761.301735][T11529] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 762.218054][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1924'. [ 762.320077][T11538] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1923'. [ 762.817342][T11541] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1924'. [ 762.826943][T11541] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1924'. [ 763.571249][T11554] tipc: Cannot configure node identity twice [ 764.582027][T11570] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1934'. [ 764.592431][T11570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 765.052178][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1938'. [ 765.109978][T11578] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1937'. [ 765.127536][T11579] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1938'. [ 765.137202][T11579] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1938'. [ 765.432230][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1940'. [ 765.548235][T11585] vxlan0: entered promiscuous mode [ 765.554167][T11585] macvtap1: entered promiscuous mode [ 765.562907][T11585] bond0: entered promiscuous mode [ 765.571063][T11585] macvtap1: entered allmulticast mode [ 765.578797][T11585] bond0: entered allmulticast mode [ 765.584165][T11585] vxlan0: entered allmulticast mode [ 765.595463][T11585] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 765.772081][T11585] bond0: left allmulticast mode [ 765.777526][T11585] vxlan0: left allmulticast mode [ 765.782904][T11585] bond0: left promiscuous mode [ 765.790078][T11585] vxlan0: left promiscuous mode [ 766.630353][T11599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 767.238916][T11608] __nla_validate_parse: 5 callbacks suppressed [ 767.239001][T11608] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1951'. [ 769.140636][T11633] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1963'. [ 769.154171][T11633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 769.185363][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1964'. [ 769.226506][T11635] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1964'. [ 769.236612][T11635] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1964'. [ 769.511217][T11640] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1966'. [ 771.147132][T11667] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1979'. [ 771.156868][T11667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 772.276470][T11678] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1984'. [ 772.937191][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 773.478275][T11700] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1993'. [ 773.491870][T11700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 773.650420][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 774.609424][T11719] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2001'. [ 775.021025][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2004'. [ 775.702553][T11737] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2008'. [ 775.712536][T11737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 775.873906][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'. [ 776.868975][T11758] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2016'. [ 777.037403][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 777.863837][T11774] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2023'. [ 777.873500][T11774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 778.817461][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 779.766389][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2036'. [ 780.427183][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'. [ 780.574079][T11816] netlink: 'syz.3.2039': attribute type 10 has an invalid length. [ 780.583950][T11816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2039'. [ 780.681329][T11816] team0: Port device netdevsim1 added [ 781.170587][T11825] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2043'. [ 782.409600][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 782.655169][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.664001][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 783.207626][T11852] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2055'. [ 783.254137][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 783.409932][T11854] syzkaller1: entered promiscuous mode [ 783.416103][T11854] syzkaller1: entered allmulticast mode [ 783.488552][T11854] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2056'. [ 783.827925][T11860] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2058'. [ 786.251061][T11888] syzkaller1: entered promiscuous mode [ 786.260758][T11888] syzkaller1: entered allmulticast mode [ 786.406476][T11888] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2070'. [ 786.633959][T11898] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2074'. [ 786.750689][T11902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2072'. [ 787.339877][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'. [ 787.965909][T11919] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2080'. [ 787.976707][T11919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 788.938506][T11931] syzkaller1: entered promiscuous mode [ 788.944542][T11931] syzkaller1: entered allmulticast mode [ 789.089561][T11931] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2085'. [ 789.098549][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2083'. [ 789.231884][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2083'. [ 789.349358][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 789.404970][T11943] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2087'. [ 790.093078][T11936] bridge_slave_1: left allmulticast mode [ 790.100707][T11936] bridge_slave_1: left promiscuous mode [ 790.108098][T11936] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.181892][T11936] bridge_slave_0: left allmulticast mode [ 790.189133][T11936] bridge_slave_0: left promiscuous mode [ 790.196775][T11936] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.332228][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2093'. [ 791.570277][T11969] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2095'. [ 791.581395][T11969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 792.351519][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2100'. [ 793.256452][T11996] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2103'. [ 793.337601][T11998] netlink: 'syz.2.2104': attribute type 10 has an invalid length. [ 793.346232][T11998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2104'. [ 793.429921][T11998] team0: Port device netdevsim1 added [ 794.148705][T12009] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2109'. [ 794.158502][T12009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 794.478508][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2111'. [ 794.731111][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2113'. [ 795.777876][T12034] netlink: 'syz.0.2118': attribute type 10 has an invalid length. [ 795.786328][T12034] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2118'. [ 795.890834][T12034] team0: Port device netdevsim1 added [ 796.125504][T12036] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2119'. [ 796.876360][T12051] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2124'. [ 796.886191][T12051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.446110][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2127'. [ 797.479860][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 798.009938][T12069] netlink: 'syz.5.2132': attribute type 10 has an invalid length. [ 798.022658][T12069] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2132'. [ 798.267137][T12069] team0: Port device netdevsim1 added [ 798.979911][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'. [ 799.170587][T12077] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2135'. [ 799.993607][T12090] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2140'. [ 800.003466][T12090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 800.519098][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2144'. [ 801.360288][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'. [ 802.092833][T12119] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2152'. [ 802.254152][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2154'. [ 802.851142][T12130] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2157'. [ 802.860732][T12130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 803.226482][T12137] netlink: 'syz.4.2160': attribute type 10 has an invalid length. [ 803.234615][T12137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2160'. [ 803.314186][T12137] team0: Port device netdevsim1 added [ 803.705393][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2162'. [ 805.472801][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2169'. [ 806.095276][T12177] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2173'. [ 806.104977][T12177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 806.962933][T12192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2179'. [ 807.547143][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2184'. [ 808.808566][T12219] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2190'. [ 808.818165][T12219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 809.185922][T12228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2194'. [ 809.762013][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2197'. [ 811.628569][T12263] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2209'. [ 811.729220][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2212'. [ 813.837708][T12303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2226'. [ 813.937224][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2227'. [ 815.182960][ T5925] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 815.369092][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 815.412845][ T5925] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 815.422028][ T5925] usb 4-1: config 0 has no interface number 0 [ 815.432522][ T5925] usb 4-1: config 0 interface 184 has no altsetting 0 [ 815.513260][ T5925] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 815.523816][ T5925] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 815.536275][ T5925] usb 4-1: Product: syz [ 815.540722][ T5925] usb 4-1: Manufacturer: syz [ 815.547441][ T5925] usb 4-1: SerialNumber: syz [ 815.621339][ T5925] usb 4-1: config 0 descriptor?? [ 815.672677][ T5925] smsc75xx v1.0.0 [ 816.126669][T12334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2240'. [ 816.318422][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 816.329863][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 816.868425][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2242'. [ 816.975973][T12338] bond_slave_0: entered promiscuous mode [ 816.982275][T12338] bond_slave_1: entered promiscuous mode [ 816.988596][T12338] vxlan0: entered promiscuous mode [ 816.994680][T12338] macvtap2: entered promiscuous mode [ 817.000428][T12338] bond0: entered promiscuous mode [ 817.010020][T12338] macvtap2: entered allmulticast mode [ 817.016000][T12338] bond0: entered allmulticast mode [ 817.021376][T12338] bond_slave_0: entered allmulticast mode [ 817.028205][T12338] bond_slave_1: entered allmulticast mode [ 817.034292][T12338] vxlan0: entered allmulticast mode [ 817.045667][T12338] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 817.120674][T12341] bond0: left allmulticast mode [ 817.126454][T12341] bond_slave_0: left allmulticast mode [ 817.132682][T12341] bond_slave_1: left allmulticast mode [ 817.139437][T12341] vxlan0: left allmulticast mode [ 817.145128][T12341] bond0: left promiscuous mode [ 817.157322][T12341] bond_slave_0: left promiscuous mode [ 817.163035][T12341] bond_slave_1: left promiscuous mode [ 817.168885][T12341] vxlan0: left promiscuous mode [ 817.728467][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 817.741247][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 817.751523][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 817.762271][ T5925] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 817.943043][ T5856] usb 4-1: USB disconnect, device number 4 [ 819.099517][T12366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2252'. [ 819.876579][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2257'. [ 820.968840][T12388] netlink: 'syz.5.2261': attribute type 10 has an invalid length. [ 820.977450][T12388] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2261'. [ 821.007241][T12346] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 821.228593][T12346] usb 1-1: Using ep0 maxpacket: 32 [ 821.260701][T12346] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 821.273725][T12346] usb 1-1: config 0 has no interface number 0 [ 821.282113][T12346] usb 1-1: config 0 interface 184 has no altsetting 0 [ 821.351941][T12346] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 821.362244][T12346] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 821.374465][T12346] usb 1-1: Product: syz [ 821.380638][T12346] usb 1-1: Manufacturer: syz [ 821.385516][T12346] usb 1-1: SerialNumber: syz [ 821.438472][T12346] usb 1-1: config 0 descriptor?? [ 821.485249][T12346] smsc75xx v1.0.0 [ 822.163042][T12346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 822.174536][T12346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 822.211890][T12402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2267'. [ 823.021916][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2270'. [ 823.446704][T12346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 823.458275][T12346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 823.468520][T12346] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 823.479250][T12346] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 823.681023][ T5856] usb 1-1: USB disconnect, device number 8 [ 825.840327][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2280'. [ 828.195892][T12346] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 828.376514][T12346] usb 5-1: Using ep0 maxpacket: 32 [ 828.416972][T12346] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 828.425500][T12346] usb 5-1: config 0 has no interface number 0 [ 828.435997][T12346] usb 5-1: config 0 interface 184 has no altsetting 0 [ 828.547860][T12346] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 828.557542][T12346] usb 5-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 828.566334][T12346] usb 5-1: Product: syz [ 828.570764][T12346] usb 5-1: Manufacturer: syz [ 828.575753][T12346] usb 5-1: SerialNumber: syz [ 828.706322][T12346] usb 5-1: config 0 descriptor?? [ 828.744436][T12346] smsc75xx v1.0.0 [ 828.969716][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2292'. [ 829.536846][T12346] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 829.548451][T12346] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 830.524187][T12487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2294'. [ 830.810484][T12346] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 830.822011][T12346] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 830.832266][T12346] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 830.843033][T12346] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 831.041710][ T5856] usb 5-1: USB disconnect, device number 8 [ 831.884641][T12506] : renamed from veth1_to_bond (while UP) [ 833.316399][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2306'. [ 834.161168][T12529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2308'. [ 835.505975][ T5856] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 835.946106][ T5856] usb 5-1: Using ep0 maxpacket: 32 [ 835.958815][ T5856] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 835.967500][ T5856] usb 5-1: config 0 has no interface number 0 [ 835.974237][ T5856] usb 5-1: config 0 interface 184 has no altsetting 0 [ 836.018209][ T5856] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 836.027879][ T5856] usb 5-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 836.037025][ T5856] usb 5-1: Product: syz [ 836.041461][ T5856] usb 5-1: Manufacturer: syz [ 836.046484][ T5856] usb 5-1: SerialNumber: syz [ 836.127549][ T5856] usb 5-1: config 0 descriptor?? [ 836.154233][ T5856] smsc75xx v1.0.0 [ 836.806615][ T5856] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 836.818100][ T5856] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 837.235407][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2323'. [ 838.067311][ T5856] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 838.078782][ T5856] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 838.088946][ T5856] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 838.099601][ T5856] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 838.294037][T12346] usb 5-1: USB disconnect, device number 9 [ 840.007790][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2332'. [ 840.090222][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2333'. [ 840.168529][T12592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2334'. [ 840.748160][T12602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2338'. [ 841.066165][T12346] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 841.237449][T12346] usb 4-1: Using ep0 maxpacket: 32 [ 841.283341][T12346] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 841.292261][T12346] usb 4-1: config 0 has no interface number 0 [ 841.298934][T12346] usb 4-1: config 0 interface 184 has no altsetting 0 [ 841.463251][T12346] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 841.473071][T12346] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 841.483987][T12346] usb 4-1: Product: syz [ 841.488604][T12346] usb 4-1: Manufacturer: syz [ 841.493845][T12346] usb 4-1: SerialNumber: syz [ 841.571189][T12346] usb 4-1: config 0 descriptor?? [ 841.618925][T12346] smsc75xx v1.0.0 [ 842.273068][T12346] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 842.291403][T12346] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 843.537298][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2347'. [ 843.596432][T12628] bond_slave_0: entered promiscuous mode [ 843.602578][T12628] bond_slave_1: entered promiscuous mode [ 843.608818][T12628] vxlan0: entered promiscuous mode [ 843.614667][T12628] macvtap1: entered promiscuous mode [ 843.620433][T12628] bond0: entered promiscuous mode [ 843.630629][T12628] macvtap1: entered allmulticast mode [ 843.636520][T12628] bond0: entered allmulticast mode [ 843.641905][T12628] bond_slave_0: entered allmulticast mode [ 843.648046][T12628] bond_slave_1: entered allmulticast mode [ 843.654049][T12628] vxlan0: entered allmulticast mode [ 843.665902][T12628] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 843.709711][T12346] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 843.721501][T12346] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 843.731615][T12346] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 843.743272][T12346] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 843.880412][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2348'. [ 843.918284][T12346] usb 4-1: USB disconnect, device number 5 [ 844.087005][T12635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2349'. [ 844.106785][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 844.113658][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 844.500843][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2351'. [ 846.160624][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2361'. [ 846.190230][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2362'. [ 846.214297][T12665] bond_slave_0: entered promiscuous mode [ 846.220591][T12665] bond_slave_1: entered promiscuous mode [ 846.227334][T12665] macvtap1: entered promiscuous mode [ 846.232885][T12665] bond0: entered promiscuous mode [ 846.241274][T12665] macvtap1: entered allmulticast mode [ 846.247133][T12665] bond0: entered allmulticast mode [ 846.257352][T12665] bond_slave_0: entered allmulticast mode [ 846.265383][T12665] bond_slave_1: entered allmulticast mode [ 846.277449][T12665] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 847.117544][T12346] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 847.313651][T12346] usb 5-1: Using ep0 maxpacket: 32 [ 847.344762][T12346] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 847.353717][T12346] usb 5-1: config 0 has no interface number 0 [ 847.360887][T12346] usb 5-1: config 0 interface 184 has no altsetting 0 [ 847.436591][T12346] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 847.447342][T12346] usb 5-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 847.457045][T12346] usb 5-1: Product: syz [ 847.461504][T12346] usb 5-1: Manufacturer: syz [ 847.467135][T12346] usb 5-1: SerialNumber: syz [ 847.535843][T12346] usb 5-1: config 0 descriptor?? [ 847.561351][T12346] smsc75xx v1.0.0 [ 848.223577][T12346] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 848.234984][T12346] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 848.864729][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2373'. [ 849.513256][T12346] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 849.524795][T12346] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 849.540492][T12346] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 849.553371][T12346] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 849.728699][T12346] usb 5-1: USB disconnect, device number 10 [ 849.818121][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2376'. [ 851.354449][T12726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.373015][T12729] netlink: 'syz.0.2385': attribute type 10 has an invalid length. [ 851.381693][T12729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2385'. [ 852.013283][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2389'. [ 853.722145][T12759] netlink: 'syz.3.2397': attribute type 10 has an invalid length. [ 853.735018][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2397'. [ 854.433335][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 854.527416][T12768] vxlan0: entered promiscuous mode [ 854.533385][T12768] macvtap2: entered promiscuous mode [ 854.539295][T12768] bond0: entered promiscuous mode [ 854.553823][T12768] macvtap2: entered allmulticast mode [ 854.559795][T12768] bond0: entered allmulticast mode [ 854.565201][T12768] vxlan0: entered allmulticast mode [ 854.576843][T12768] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 854.656189][T12770] bond0: left allmulticast mode [ 854.661575][T12770] vxlan0: left allmulticast mode [ 854.667527][T12770] bond0: left promiscuous mode [ 854.674301][T12770] vxlan0: left promiscuous mode [ 854.995990][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2402'. [ 856.058300][T12791] netlink: 'syz.2.2411': attribute type 10 has an invalid length. [ 856.067161][T12791] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2411'. [ 856.758280][T12801] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2414'. [ 856.768097][T12801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 857.251831][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2417'. [ 857.294777][T12806] macvtap2: entered promiscuous mode [ 857.301518][T12806] macvtap2: entered allmulticast mode [ 857.317612][T12806] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 857.744205][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'. [ 858.971207][T12832] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2428'. [ 858.980851][T12832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 859.627728][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2431'. [ 859.783740][T12840] macvtap2: entered promiscuous mode [ 859.791284][T12840] macvtap2: entered allmulticast mode [ 859.803135][T12840] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 859.922557][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2433'. [ 860.876271][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'. [ 861.616261][T12867] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2442'. [ 861.626148][T12867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 862.194621][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2447'. [ 862.246146][T12878] macvtap3: entered promiscuous mode [ 862.252828][T12878] macvtap3: entered allmulticast mode [ 862.264311][T12878] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 862.305039][T12879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 863.271965][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2453'. [ 863.588098][T12902] netlink: 'syz.4.2456': attribute type 303 has an invalid length. [ 863.693742][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 863.726835][T12901] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2457'. [ 863.737280][T12901] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 864.490645][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2461'. [ 865.837739][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2469'. [ 866.469444][T12937] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2471'. [ 866.479454][T12937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 867.310567][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2475'. [ 868.405867][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2481'. [ 869.147936][T12973] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2484'. [ 869.162494][T12973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 871.720243][T13013] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2500'. [ 871.731763][T13013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 873.130803][T13040] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 875.551496][T13080] batman_adv: batadv0: Adding interface: dummy0 [ 875.558851][T13080] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.584765][T13080] batman_adv: batadv0: Interface activated: dummy0 [ 875.730877][T13080] batadv0: mtu less than device minimum [ 875.739516][T13080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 875.752951][T13080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 875.766396][T13080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 875.779698][T13080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 875.793086][T13080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 875.806682][T13080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 875.819940][T13080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 875.833422][T13080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 875.846861][T13080] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 879.587570][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2551'. [ 880.839933][T13160] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2561'. [ 880.850110][T13160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 883.210598][T13194] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2574'. [ 883.223383][T13194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 883.914626][T13206] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2578'. [ 884.659655][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2585'. [ 885.247771][T13226] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2589'. [ 885.257542][T13226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 886.113835][T13237] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2594'. [ 887.324102][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2600'. [ 887.636563][T13256] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2602'. [ 887.647595][T13256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 888.366424][T13267] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2607'. [ 890.458793][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 891.192608][T13297] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2617'. [ 891.206363][T13297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 893.536692][T12346] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 893.803769][T12346] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 893.814141][T12346] usb 5-1: config 0 interface 0 has no altsetting 0 [ 893.926706][T13318] xfrm0: entered promiscuous mode [ 893.932174][T13318] xfrm0: entered allmulticast mode [ 893.955572][T12346] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 893.964980][T12346] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 893.976946][T12346] usb 5-1: Product: syz [ 893.981351][T12346] usb 5-1: Manufacturer: syz [ 893.987760][T12346] usb 5-1: SerialNumber: syz [ 894.258220][T12346] usb 5-1: config 0 descriptor?? [ 894.311715][T12346] usb 5-1: selecting invalid altsetting 0 [ 894.797322][T13327] netlink: 888 bytes leftover after parsing attributes in process `syz.2.2628'. [ 895.135805][T13330] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2630'. [ 895.145361][T13330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 900.026034][T12346] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 901.302334][T12346] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.313004][T12346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 901.323371][T12346] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 901.336968][T12346] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 901.348749][T12346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.693533][T12346] usb 1-1: config 0 descriptor?? [ 903.907660][T13366] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2641'. [ 903.917525][T13366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 903.991793][T12346] usb 5-1: USB disconnect, device number 11 [ 904.474559][T13369] netlink: 888 bytes leftover after parsing attributes in process `syz.3.2642'. [ 905.521855][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.529338][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 907.348662][T13398] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 907.494484][T13401] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2655'. [ 907.504518][T13401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 907.544757][T13398] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 907.925967][ T5856] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 908.175857][ T5856] usb 6-1: Using ep0 maxpacket: 16 [ 908.194521][ T5856] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 908.206295][ T5856] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 908.214580][ T5856] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 908.223811][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 908.233832][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 908.245058][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 908.356101][ T5856] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 908.365868][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.374176][ T5856] usb 6-1: Product: syz [ 908.379181][ T5856] usb 6-1: Manufacturer: syz [ 908.384048][ T5856] usb 6-1: SerialNumber: syz [ 908.533621][ T5856] usb 6-1: config 0 descriptor?? [ 908.548072][ T5856] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected [ 908.556096][ T5856] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 87 [ 908.564060][ T5856] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7 [ 908.573268][ T5856] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81 [ 908.581551][ T5856] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 908.589614][ T5856] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 908.597813][ T5856] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85 [ 908.606108][ T5856] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5 [ 908.621891][ T5856] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 908.633083][ T5856] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83 [ 908.641385][ T5856] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4 [ 908.649735][ T5856] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86 [ 908.657991][ T5856] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6 [ 908.784603][ T5856] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 909.173327][ T5856] usb 1-1: USB disconnect, device number 9 [ 909.613978][T13409] netlink: 888 bytes leftover after parsing attributes in process `syz.2.2658'. [ 909.939153][T12346] usb 6-1: USB disconnect, device number 4 [ 909.979638][T12346] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 910.000678][T12346] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 910.014284][T12346] keyspan 6-1:0.0: device disconnected [ 910.281256][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2659'. [ 910.639830][T12346] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 910.889526][T12346] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 910.899284][T12346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.907813][T12346] usb 3-1: Product: syz [ 910.912259][T12346] usb 3-1: Manufacturer: syz [ 910.917248][T12346] usb 3-1: SerialNumber: syz [ 910.929111][T12346] usb 3-1: config 0 descriptor?? [ 911.148326][T12346] usb 3-1: ignoring: probably an ADSL modem [ 911.556565][T12346] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 911.812956][T13416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.822675][T13416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.897130][ T5856] usb 3-1: USB disconnect, device number 9 [ 911.984089][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'. [ 912.776173][T13449] netlink: 888 bytes leftover after parsing attributes in process `syz.0.2673'. [ 913.429248][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2675'. [ 915.418750][T13481] netlink: 888 bytes leftover after parsing attributes in process `syz.4.2686'. [ 915.496461][ T5856] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 915.706440][ T5856] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 915.716197][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.724513][ T5856] usb 1-1: Product: syz [ 915.729207][ T5856] usb 1-1: Manufacturer: syz [ 915.734111][ T5856] usb 1-1: SerialNumber: syz [ 915.844843][ T5856] usb 1-1: config 0 descriptor?? [ 916.145969][ T5856] usb 1-1: ignoring: probably an ADSL modem [ 916.199857][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2689'. [ 916.570707][ T5856] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 916.875123][T13476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.884768][T13476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.990839][ T5856] usb 1-1: USB disconnect, device number 10 [ 918.126240][T13515] netlink: 888 bytes leftover after parsing attributes in process `syz.3.2698'. [ 918.930542][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2702'. [ 919.737004][T12346] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 919.961782][T12346] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 919.971666][T12346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.983743][T12346] usb 4-1: Product: syz [ 919.989945][T12346] usb 4-1: Manufacturer: syz [ 919.994813][T12346] usb 4-1: SerialNumber: syz [ 920.025477][T12346] usb 4-1: config 0 descriptor?? [ 920.118239][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2710'. [ 920.316751][T12346] usb 4-1: ignoring: probably an ADSL modem [ 920.822500][T12346] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 921.179114][T13535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.189218][T13535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.257770][T13551] block device autoloading is deprecated and will be removed. [ 921.370976][T12346] usb 4-1: USB disconnect, device number 6 [ 923.528879][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2723'. [ 923.928289][T13590] netlink: 'syz.3.2726': attribute type 10 has an invalid length. [ 923.944296][T13590] syz_tun: entered promiscuous mode [ 923.984222][T13590] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 924.152290][T13594] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2728'. [ 924.162048][T13594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 926.097523][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2737'. [ 927.071865][T13632] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2741'. [ 927.081802][T13632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 927.977194][T13648] netlink: 'syz.4.2750': attribute type 10 has an invalid length. [ 927.986012][T13648] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2750'. [ 930.329646][T13679] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2758'. [ 930.339388][T13679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 930.621690][T13685] netlink: 'syz.5.2763': attribute type 10 has an invalid length. [ 930.633002][T13685] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2763'. [ 931.158519][T13694] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 931.596637][ T5856] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 931.796211][ T5856] usb 3-1: Using ep0 maxpacket: 16 [ 931.873818][ T5856] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 931.882822][ T5856] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 931.891634][ T5856] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 931.901039][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 931.911297][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 931.922775][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 932.025106][ T5856] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 932.034835][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.043468][ T5856] usb 3-1: Product: syz [ 932.048265][ T5856] usb 3-1: Manufacturer: syz [ 932.053147][ T5856] usb 3-1: SerialNumber: syz [ 932.219450][ T5856] usb 3-1: config 0 descriptor?? [ 932.268866][ T5856] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 932.277819][ T5856] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 932.285957][ T5856] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 932.295091][ T5856] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 932.303486][ T5856] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 932.311576][ T5856] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 932.319813][ T5856] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 932.328200][ T5856] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 932.557326][ T5856] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 932.568018][ T5856] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 932.580072][ T5856] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 932.589089][ T5856] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 932.597362][ T5856] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 932.617855][ T5856] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 934.023636][T12346] usb 3-1: USB disconnect, device number 10 [ 934.104804][T12346] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 934.178310][T12346] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 934.190170][T12346] keyspan 3-1:0.0: device disconnected [ 934.625429][T13727] netlink: 'syz.4.2778': attribute type 10 has an invalid length. [ 934.634029][T13727] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2778'. [ 934.802120][T13732] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2776'. [ 934.811944][T13732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 936.185395][T13745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2783'. [ 937.675209][T13768] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2792'. [ 937.684958][T13768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 937.819687][ T5856] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 938.056193][ T5856] usb 4-1: Using ep0 maxpacket: 8 [ 938.116317][ T5856] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 938.125945][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.134261][ T5856] usb 4-1: Product: syz [ 938.138892][ T5856] usb 4-1: Manufacturer: syz [ 938.143738][ T5856] usb 4-1: SerialNumber: syz [ 938.251619][ T5856] usb 4-1: config 0 descriptor?? [ 938.285765][ T5856] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 938.294116][ T5856] usb 4-1: setting power ON [ 938.294233][T13775] netlink: 'syz.2.2794': attribute type 10 has an invalid length. [ 938.299072][ T5856] dvb-usb: bulk message failed: -22 (2/0) [ 938.311674][T13775] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2794'. [ 938.432789][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 938.488447][ T5856] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 938.497560][ T5856] usb 4-1: media controller created [ 938.498463][T13766] dvb-usb: bulk message failed: -22 (3/0) [ 938.509221][T13766] dvb-usb: bulk message failed: -22 (6/0) [ 938.574841][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 938.619733][T13766] dvb-usb: bulk message failed: -22 (3/0) [ 938.797303][ T5856] usb 4-1: selecting invalid altsetting 6 [ 938.803538][ T5856] usb 4-1: digital interface selection failed (-22) [ 938.810630][ T5856] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 938.842558][ T5856] usb 4-1: setting power OFF [ 938.847639][ T5856] dvb-usb: bulk message failed: -22 (2/0) [ 938.853769][ T5856] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 938.863615][ T5856] (NULL device *): no alternate interface [ 939.061954][T13783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2797'. [ 939.161854][ T5856] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 939.194825][ T5856] usb 4-1: USB disconnect, device number 7 [ 940.577051][ T5856] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 940.959945][ T5856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.974097][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 940.985788][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 940.999216][ T5856] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 941.008763][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.752712][ T5856] usb 5-1: config 0 descriptor?? [ 943.791463][T13810] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2805'. [ 943.801318][T13810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.239518][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2806'. [ 944.387496][T13814] netlink: 'syz.2.2807': attribute type 10 has an invalid length. [ 944.396050][T13814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2807'. [ 945.513174][T13820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2811'. [ 947.846242][ T5856] usb 5-1: can't set config #0, error -110 [ 948.487648][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2821'. [ 948.568505][T13844] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2820'. [ 948.578099][T13844] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 949.086268][T13847] netlink: 'syz.0.2822': attribute type 10 has an invalid length. [ 949.094508][T13847] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2822'. [ 949.741346][ T5856] usb 5-1: USB disconnect, device number 12 [ 951.110120][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2833'. [ 951.354708][T13880] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2835'. [ 951.365069][T13880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 951.917745][T13884] netlink: 'syz.3.2837': attribute type 10 has an invalid length. [ 951.930316][T13884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2837'. [ 952.519960][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2844'. [ 953.037913][ T5856] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 953.283888][ T5856] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 953.294541][ T5856] usb 6-1: config 0 interface 0 has no altsetting 0 [ 953.332424][ T5856] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 953.342462][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 953.351103][ T5856] usb 6-1: Product: syz [ 953.355642][ T5856] usb 6-1: Manufacturer: syz [ 953.363238][ T5856] usb 6-1: SerialNumber: syz [ 953.392970][ T5856] usb 6-1: config 0 descriptor?? [ 953.471071][ T5856] usb 6-1: selecting invalid altsetting 0 [ 953.851532][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2846'. [ 954.153177][T13913] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2848'. [ 954.162757][T13913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 955.125193][T13925] netlink: 'syz.2.2852': attribute type 10 has an invalid length. [ 955.133526][T13925] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2852'. [ 955.741878][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2855'. [ 957.267426][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2860'. [ 957.613338][T13949] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2862'. [ 957.623123][T13949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 957.938866][T13952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 957.958986][T13952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 957.980626][T13952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 958.008328][T13952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 958.036822][T13952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 958.558165][T13957] netlink: 'syz.2.2865': attribute type 10 has an invalid length. [ 958.567006][T13957] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2865'. [ 959.723629][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 960.136325][T13952] Bluetooth: hci0: command tx timeout [ 960.302453][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2870'. [ 960.370865][ T5806] bond0: (slave syz_tun): Releasing backup interface [ 960.580387][T13951] chnl_net:caif_netlink_parms(): no params data found [ 960.796372][ T3983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.808397][ T3983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.032463][ T3983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 961.046775][ T3983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.228475][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2872'. [ 961.253754][ T3983] team0: Port device netdevsim1 removed [ 961.264373][ T3983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 961.275267][ T3983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.521406][ T3983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 961.532606][ T3983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.216557][T13952] Bluetooth: hci0: command tx timeout [ 962.224358][T13988] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2875'. [ 962.239986][T13988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 962.536884][ T3983] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 962.844240][ T5856] usb 6-1: USB disconnect, device number 5 [ 962.914749][T13993] netlink: 'syz.4.2876': attribute type 10 has an invalid length. [ 962.923365][T13993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2876'. [ 963.067609][ T3983] bond0 (unregistering): Released all slaves [ 963.461612][ T3983] tipc: Left network mode [ 963.694976][T13951] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.709030][T13951] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.718728][T13951] bridge_slave_0: entered allmulticast mode [ 963.730979][T13951] bridge_slave_0: entered promiscuous mode [ 963.760607][T14003] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2880'. [ 963.831616][T13951] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.839669][T13951] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.847799][T13951] bridge_slave_1: entered allmulticast mode [ 963.857935][T13951] bridge_slave_1: entered promiscuous mode [ 964.152652][T13951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.182124][T13951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.426175][T13952] Bluetooth: hci0: command tx timeout [ 964.546076][T14007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2883'. [ 964.736617][T13951] team0: Port device team_slave_0 added [ 964.775728][ T3983] hsr_slave_0: left promiscuous mode [ 964.815258][ T3983] hsr_slave_1: left promiscuous mode [ 964.881029][ T3983] veth1_macvtap: left promiscuous mode [ 964.888762][ T3983] veth0_macvtap: left promiscuous mode [ 964.894765][ T3983] veth1_vlan: left promiscuous mode [ 964.914016][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 965.639710][ T3983] team0 (unregistering): Port device vlan1 removed [ 965.691584][ T3983] team0 (unregistering): Port device vlan0 removed [ 966.328771][T13951] team0: Port device team_slave_1 added [ 966.550142][T13952] Bluetooth: hci0: command tx timeout [ 966.733470][T13951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.742027][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.769033][T13951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.836945][ T3983] IPVS: stop unused estimator thread 0... [ 966.856688][T14025] netlink: 'syz.0.2890': attribute type 10 has an invalid length. [ 966.864953][T14025] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2890'. [ 966.893380][T14026] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2889'. [ 966.903185][T14026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 966.947624][T13951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.954944][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.984274][T13951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.010890][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 967.018061][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.281176][T14029] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 967.370999][T13951] hsr_slave_0: entered promiscuous mode [ 967.381790][T13951] hsr_slave_1: entered promiscuous mode [ 967.395332][T13951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 967.403963][T13951] Cannot create hsr debugfs directory [ 967.722285][T12346] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 967.956215][T12346] usb 5-1: Using ep0 maxpacket: 16 [ 968.049514][T12346] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 968.058377][T12346] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 968.066944][T12346] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 968.076196][T12346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 968.086241][T12346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 968.097485][T12346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 968.351993][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2894'. [ 968.574900][T12346] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 968.584353][T12346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.592694][T12346] usb 5-1: Product: syz [ 968.597219][T12346] usb 5-1: Manufacturer: syz [ 968.601977][T12346] usb 5-1: SerialNumber: syz [ 968.802921][T12346] usb 5-1: config 0 descriptor?? [ 968.841356][T12346] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 968.850192][T12346] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 968.858898][T12346] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 968.869125][T12346] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 968.877609][T12346] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 968.886020][T12346] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 968.894150][T12346] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 968.902655][T12346] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 969.052410][T12346] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 969.063492][T12346] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 969.072166][T12346] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 969.080260][T12346] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 969.088407][T12346] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 969.098634][T12346] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 969.644860][T13951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 969.704451][T13951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 969.736691][T13951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 969.764952][T13951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 970.386776][ T5925] usb 5-1: USB disconnect, device number 13 [ 970.413375][ T5925] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 970.496640][ T5925] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 970.508146][ T5925] keyspan 5-1:0.0: device disconnected [ 970.879429][T13951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.044500][T13951] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.058897][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2901'. [ 971.168881][ T3983] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.176653][ T3983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.274764][ T3983] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.282547][ T3983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.293442][T14057] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2902'. [ 971.303115][T14057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 971.590143][T14063] loop6: detected capacity change from 0 to 63 [ 971.660181][T14063] Buffer I/O error on dev loop6, logical block 0, async page read [ 971.670399][T14063] Buffer I/O error on dev loop6, logical block 1, async page read [ 971.678918][T14063] Buffer I/O error on dev loop6, logical block 2, async page read [ 971.687276][T14063] Buffer I/O error on dev loop6, logical block 3, async page read [ 971.698259][T14063] Buffer I/O error on dev loop6, logical block 0, async page read [ 971.707857][T14063] Buffer I/O error on dev loop6, logical block 1, async page read [ 971.717214][T14063] Buffer I/O error on dev loop6, logical block 2, async page read [ 971.725360][T14063] Buffer I/O error on dev loop6, logical block 3, async page read [ 971.733969][T14063] Buffer I/O error on dev loop6, logical block 0, async page read [ 971.743278][T14063] Buffer I/O error on dev loop6, logical block 1, async page read [ 973.058040][T14084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2911'. [ 973.065898][T13951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.590582][T13951] veth0_vlan: entered promiscuous mode [ 973.850635][T13951] veth1_vlan: entered promiscuous mode [ 974.339952][T13951] veth0_macvtap: entered promiscuous mode [ 974.417647][T13951] veth1_macvtap: entered promiscuous mode [ 974.570955][T13951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.695044][T13951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.791244][T14098] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2915'. [ 974.801234][T14098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 974.826059][T13951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.835280][T13951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.844738][T13951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.853949][T13951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.090308][T14128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2924'. [ 980.437470][T14140] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2927'. [ 980.446979][T14140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 980.507230][T14139] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 981.882521][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2930'. [ 982.726019][T14162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2934'. [ 984.041241][T14183] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 984.669575][ T3795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.678020][ T3795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.762020][ T3983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.773509][ T3983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.362096][T14194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2944'. [ 985.485991][T12346] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 985.698977][T12346] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 985.710063][T12346] usb 6-1: config 0 interface 0 has no altsetting 0 [ 985.755330][T12346] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 985.765196][T12346] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 985.775794][T12346] usb 6-1: Product: syz [ 985.780200][T12346] usb 6-1: Manufacturer: syz [ 985.785065][T12346] usb 6-1: SerialNumber: syz [ 985.826170][T12346] usb 6-1: config 0 descriptor?? [ 985.850685][T12346] usb 6-1: selecting invalid altsetting 0 [ 986.144498][T14204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2947'. [ 986.530493][T14209] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 986.682681][T12346] usb 6-1: USB disconnect, device number 6 [ 987.026016][T14130] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 987.348393][T14130] usb 1-1: Using ep0 maxpacket: 16 [ 987.393455][T14130] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 987.402268][T14130] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 987.410949][T14130] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 987.420732][T14130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 987.431120][T14130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 987.442306][T14130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 987.569884][T14130] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 987.579579][T14130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.588039][T14130] usb 1-1: Product: syz [ 987.592474][T14130] usb 1-1: Manufacturer: syz [ 987.597483][T14130] usb 1-1: SerialNumber: syz [ 987.608843][T14130] usb 1-1: config 0 descriptor?? [ 987.629030][T14130] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 987.636919][T14130] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 987.644877][T14130] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 987.654620][T14130] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 987.669803][T14130] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 987.680528][T14130] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 987.688832][T14130] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 987.697323][T14130] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 987.857280][T14130] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 987.874927][T14130] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 987.884880][T14130] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 987.892911][T14130] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 987.901069][T14130] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 987.911699][T14130] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 987.967777][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 987.990768][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 988.006774][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 988.026072][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 988.051718][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 989.169310][T14130] usb 1-1: USB disconnect, device number 11 [ 989.263408][T14130] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 989.396021][T14130] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 989.413615][T14130] keyspan 1-1:0.0: device disconnected [ 990.216037][ T5809] Bluetooth: hci3: command tx timeout [ 990.506643][T14216] chnl_net:caif_netlink_parms(): no params data found [ 990.555808][T14230] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 991.797098][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2956'. [ 992.297159][ T5809] Bluetooth: hci3: command tx timeout [ 992.441134][T14216] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.449407][T14216] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.457925][T14216] bridge_slave_0: entered allmulticast mode [ 992.468190][T14216] bridge_slave_0: entered promiscuous mode [ 992.636103][T14130] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 992.699857][T14216] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.707986][T14216] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.716369][T14216] bridge_slave_1: entered allmulticast mode [ 992.726483][T14216] bridge_slave_1: entered promiscuous mode [ 992.815846][T14130] usb 4-1: Using ep0 maxpacket: 8 [ 992.838459][T14130] usb 4-1: config 0 has no interfaces? [ 992.844301][T14130] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 992.854177][T14130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.966413][T14130] usb 4-1: config 0 descriptor?? [ 993.300599][T14216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.325210][T14216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.393225][T14254] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 993.459739][T12346] usb 4-1: USB disconnect, device number 8 [ 993.507804][T14216] team0: Port device team_slave_0 added [ 993.547503][T14216] team0: Port device team_slave_1 added [ 993.728953][T14216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.736978][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.763600][T14216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.782714][T14216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.791259][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.822567][T14216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.916504][ T5925] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 994.156015][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 994.258892][ T5925] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 994.267545][ T5925] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 994.276014][ T5925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 994.285167][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 994.296101][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 994.307346][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 994.355111][T14216] hsr_slave_0: entered promiscuous mode [ 994.369642][T14216] hsr_slave_1: entered promiscuous mode [ 994.376483][ T5809] Bluetooth: hci3: command tx timeout [ 994.382387][T14216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 994.390830][T14216] Cannot create hsr debugfs directory [ 994.499036][ T5925] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 994.508808][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.517488][ T5925] usb 1-1: Product: syz [ 994.521889][ T5925] usb 1-1: Manufacturer: syz [ 994.528624][ T5925] usb 1-1: SerialNumber: syz [ 994.552694][ T5925] usb 1-1: config 0 descriptor?? [ 994.569087][ T5925] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 994.577054][ T5925] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 994.585030][ T5925] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 994.594757][ T5925] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 994.603001][ T5925] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 994.611307][ T5925] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 994.620736][ T5925] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 994.632269][ T5925] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 994.643614][ T5925] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 994.654139][ T5925] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 994.662393][ T5925] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 994.670764][ T5925] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 994.680816][ T5925] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 994.820111][ T5925] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 996.156109][T14130] usb 1-1: USB disconnect, device number 12 [ 996.205120][T14130] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 996.289437][T14130] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 996.300636][T14130] keyspan 1-1:0.0: device disconnected [ 996.457178][ T5809] Bluetooth: hci3: command tx timeout [ 996.558670][T14216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.569771][T14216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.794174][T14216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.805661][T14216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.028911][T14216] team0: Port device netdevsim1 removed [ 997.046932][T14216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.057567][T14216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.241144][T14216] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.251911][T14216] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.896476][T14216] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 997.989208][T14216] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 998.048093][T14216] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 998.114998][T14216] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 998.180299][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'. [ 999.442661][T14216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.630590][T14300] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 999.736080][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2976'. [ 999.754391][T14216] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.845761][ T2896] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.853527][ T2896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.993173][ T2896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.000801][ T2896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.045850][ T5856] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1000.249311][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 1000.366900][ T5856] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 1000.375886][ T5856] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1000.384269][ T5856] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1000.393752][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1000.403703][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1000.415017][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1000.766844][ T5856] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1000.780534][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.790420][ T5856] usb 5-1: Product: syz [ 1000.794893][ T5856] usb 5-1: Manufacturer: syz [ 1000.803480][ T5856] usb 5-1: SerialNumber: syz [ 1000.904896][ T5856] usb 5-1: config 0 descriptor?? [ 1000.922236][ T5856] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1000.931272][ T5856] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 1000.941078][ T5856] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1000.950823][ T5856] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1000.958974][ T5856] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1000.966970][ T5856] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1000.980612][ T5856] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1000.990760][ T5856] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1001.147629][ T5856] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1001.158646][ T5856] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1001.167336][ T5856] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1001.175694][ T5856] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1001.190613][ T5856] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1001.203664][ T5856] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1001.930751][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2980'. [ 1002.424198][T12346] usb 5-1: USB disconnect, device number 14 [ 1002.459752][T12346] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1002.597478][T12346] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1002.609101][T12346] keyspan 5-1:0.0: device disconnected [ 1002.724754][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 1002.860897][ T3795] bridge_slave_1: left allmulticast mode [ 1002.867092][ T3795] bridge_slave_1: left promiscuous mode [ 1002.873868][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.963615][ T3795] bridge_slave_0: left allmulticast mode [ 1002.971455][ T3795] bridge_slave_0: left promiscuous mode [ 1002.978403][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.919374][ T3795] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1004.372470][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.508962][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.542648][ T3795] bond0 (unregistering): Released all slaves [ 1004.811091][T14216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.853145][ T3795] tipc: Left network mode [ 1005.810099][ T5856] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1005.849165][ T3795] hsr_slave_0: left promiscuous mode [ 1005.863278][ T3795] hsr_slave_1: left promiscuous mode [ 1005.871816][ T3795] batman_adv: batadv0: Interface deactivated: dummy0 [ 1005.879565][ T3795] batman_adv: batadv0: Removing interface: dummy0 [ 1005.898896][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.908208][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.943678][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.951893][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.997277][ T5856] usb 6-1: Using ep0 maxpacket: 32 [ 1006.010435][ T5856] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1006.020159][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.044171][ T3795] veth1_macvtap: left promiscuous mode [ 1006.050199][ T3795] veth0_macvtap: left promiscuous mode [ 1006.057962][ T3795] veth1_vlan: left promiscuous mode [ 1006.080119][ T5856] usb 6-1: config 0 descriptor?? [ 1006.486047][ T5856] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1006.503361][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1006.527072][ T5856] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1006.534654][ T5856] usb 6-1: media controller created [ 1006.591030][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1006.745826][T14350] ===================================================== [ 1006.753309][T14350] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1006.761306][T14350] _copy_to_user+0xcc/0x120 [ 1006.766217][T14350] i2cdev_ioctl_smbus+0x586/0x660 [ 1006.771517][T14350] compat_i2cdev_ioctl+0x48f/0xb40 [ 1006.777220][T14350] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1006.783057][T14350] ia32_sys_call+0x2d07/0x42c0 [ 1006.788304][T14350] __do_fast_syscall_32+0xb0/0x150 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1006.794096][T14350] do_fast_syscall_32+0x38/0x80 [ 1006.799331][T14350] do_SYSENTER_32+0x1f/0x30 [ 1006.804055][T14350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1006.810918][T14350] [ 1006.817013][T14350] Uninit was stored to memory at: [ 1006.822381][T14350] __i2c_smbus_xfer+0x254d/0x2f60 [ 1006.829210][T14350] i2c_smbus_xfer+0x31d/0x4d0 [ 1006.834206][T14350] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1006.839672][T14350] compat_i2cdev_ioctl+0x48f/0xb40 [ 1006.845040][T14350] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1006.851663][T14350] ia32_sys_call+0x2d07/0x42c0 [ 1006.856919][T14350] __do_fast_syscall_32+0xb0/0x150 [ 1006.862288][T14350] do_fast_syscall_32+0x38/0x80 [ 1006.867658][T14350] do_SYSENTER_32+0x1f/0x30 [ 1006.872411][T14350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1006.879380][T14350] [ 1006.881866][T14350] Local variable msgbuf1.i created at: [ 1006.887664][T14350] __i2c_smbus_xfer+0x86a/0x2f60 [ 1006.892900][T14350] i2c_smbus_xfer+0x31d/0x4d0 [ 1006.898066][T14350] [ 1006.900547][T14350] Bytes 0-1 of 2 are uninitialized [ 1006.906024][T14350] Memory access of size 2 starts at ffff88802fd2fc86 [ 1006.912895][T14350] Data copied to user address 0000000080000400 [ 1006.922826][T14350] [ 1006.925353][T14350] CPU: 0 UID: 0 PID: 14350 Comm: syz.5.2988 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 1006.939938][T14350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1006.950416][T14350] ===================================================== [ 1006.957718][T14350] Disabling lock debugging due to kernel taint [ 1006.964036][T14350] Kernel panic - not syncing: kmsan.panic set ... [ 1006.971080][T14350] CPU: 0 UID: 0 PID: 14350 Comm: syz.5.2988 Tainted: G B 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 1006.985171][T14350] Tainted: [B]=BAD_PAGE [ 1006.989605][T14350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1006.999893][T14350] Call Trace: [ 1007.003341][T14350] [ 1007.006437][T14350] __dump_stack+0x26/0x30 [ 1007.011052][T14350] dump_stack_lvl+0x53/0x270 [ 1007.015993][T14350] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1007.022108][T14350] dump_stack+0x1e/0x25 [ 1007.026548][T14350] panic+0x4bd/0xd50 [ 1007.030771][T14350] kmsan_report+0x31c/0x320 [ 1007.035561][T14350] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1007.042170][T14350] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1007.048430][T14350] ? kmsan_copy_to_user+0xf1/0x190 [ 1007.053831][T14350] ? _copy_to_user+0xcc/0x120 [ 1007.058754][T14350] ? i2cdev_ioctl_smbus+0x586/0x660 [ 1007.064190][T14350] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 1007.069743][T14350] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1007.075776][T14350] ? ia32_sys_call+0x2d07/0x42c0 [ 1007.080942][T14350] ? __do_fast_syscall_32+0xb0/0x150 [ 1007.086497][T14350] ? do_fast_syscall_32+0x38/0x80 [ 1007.091778][T14350] ? do_SYSENTER_32+0x1f/0x30 [ 1007.096688][T14350] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1007.103510][T14350] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1007.109077][T14350] ? __i2c_transfer+0x11cd/0x3110 [ 1007.114363][T14350] ? kmsan_get_metadata+0xfb/0x160 [ 1007.119867][T14350] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1007.126509][T14350] ? kmsan_get_metadata+0xfb/0x160 [ 1007.131943][T14350] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1007.138085][T14350] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 1007.143594][T14350] ? kmsan_get_metadata+0xfb/0x160 [ 1007.149078][T14350] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1007.155200][T14350] kmsan_internal_check_memory+0x1e1/0x230 [ 1007.161303][T14350] kmsan_copy_to_user+0xf1/0x190 [ 1007.166558][T14350] _copy_to_user+0xcc/0x120 [ 1007.171331][T14350] i2cdev_ioctl_smbus+0x586/0x660 [ 1007.176646][T14350] compat_i2cdev_ioctl+0x48f/0xb40 [ 1007.182079][T14350] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1007.187986][T14350] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1007.193932][T14350] ? kmsan_get_metadata+0xfb/0x160 [ 1007.199448][T14350] ? kmsan_get_metadata+0xfb/0x160 [ 1007.204873][T14350] ia32_sys_call+0x2d07/0x42c0 [ 1007.209868][T14350] __do_fast_syscall_32+0xb0/0x150 [ 1007.215237][T14350] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1007.221226][T14350] do_fast_syscall_32+0x38/0x80 [ 1007.226332][T14350] do_SYSENTER_32+0x1f/0x30 [ 1007.231084][T14350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1007.237717][T14350] RIP: 0023:0xf7f08539 [ 1007.242074][T14350] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1007.261977][T14350] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1007.270689][T14350] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 1007.278887][T14350] RDX: 0000000080000680 RSI: 0000000000000000 RDI: 0000000000000000 [ 1007.287070][T14350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1007.295248][T14350] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1007.303436][T14350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1007.311671][T14350] [ 1007.315276][T14350] Kernel Offset: disabled [ 1007.319727][T14350] Rebooting in 86400 seconds..