last executing test programs: 14.462247366s ago: executing program 4 (id=2068): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) 11.022613782s ago: executing program 4 (id=2079): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006c6f7770616e0000040002800800", @ANYRES32=r1], 0x50}}, 0x20008040) 10.083227367s ago: executing program 4 (id=2081): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000a000000030000000500000f0100000004000000010000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000081000000000100ffff"], 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 9.610783573s ago: executing program 2 (id=2083): pipe(&(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021000000080003", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES16=r0], 0x2c}}, 0x0) 9.286563365s ago: executing program 4 (id=2084): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x15, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@func, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 8.602259148s ago: executing program 2 (id=2086): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x38, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x9}, {}, {0x1fff2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x48c0) 8.555972773s ago: executing program 4 (id=2087): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)=0x800001, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syslog(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x98, 0x90, 0x130, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) sendmsg$tipc(r0, 0x0, 0x20000080) 7.874606936s ago: executing program 2 (id=2089): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) 7.436259446s ago: executing program 0 (id=2091): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006c6f7770616e0000040002800800", @ANYRES32=r1], 0x50}}, 0x20008040) 6.816184056s ago: executing program 0 (id=2094): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000a000000030000000500000f0100000004000000010000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000081000000000100ffff"], 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5.912214761s ago: executing program 0 (id=2097): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@func, @exit, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 5.475389092s ago: executing program 1 (id=2099): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x38, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x9}, {}, {0x1fff2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x48c0) 5.096073114s ago: executing program 0 (id=2100): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) 4.925058356s ago: executing program 3 (id=2101): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a010200"/18], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) shutdown(r1, 0x1) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100100, 0x0, 0xfffffffffffffd25) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x1f82}], 0x1, 0x1, 0x0) userfaultfd(0x80801) userfaultfd(0x80801) 4.506557624s ago: executing program 1 (id=2102): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080000e8ff00", "cf0d00", "8657e2b7e43b34f5"}, 0x28) 4.213254383s ago: executing program 2 (id=2103): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000002440)=ANY=[@ANYBLOB="f8000000180001000000000000000000fe8800000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYBLOB="fc00"/19], 0xf8}}, 0x0) 4.136062076s ago: executing program 3 (id=2104): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006c6f7770616e0000040002800800", @ANYRES32=r1], 0x50}}, 0x20008040) 3.095432346s ago: executing program 2 (id=2105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 2.838527783s ago: executing program 3 (id=2106): r0 = socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691]}}, 0x5c) 2.781574632s ago: executing program 1 (id=2107): socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) pipe(&(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001070000940001000000fc11c60000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 2.101801636s ago: executing program 1 (id=2108): syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') lstat(&(0x7f00000048c0)='./file0\x00', &(0x7f0000004900)) 2.026102657s ago: executing program 3 (id=2109): pipe(&(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES16=r0], 0x2c}}, 0x0) 1.291697142s ago: executing program 0 (id=2110): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@func, @exit, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 1.251282129s ago: executing program 3 (id=2111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @random="416cee93a4a6", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0xac}, @sack={0x5, 0x2}, @fastopen={0x22, 0xe, "54df942f7e09586180bbb068"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x6, "8537c855"}, @exp_fastopen={0xfe, 0x4}, @sack={0x5, 0x22, [0x5, 0x5, 0x100, 0x0, 0x6, 0x8, 0x4, 0x1]}]}}}}}}}, 0x0) 1.137471214s ago: executing program 1 (id=2112): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x38, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x9}, {}, {0x1fff2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x48c0) 983.788826ms ago: executing program 2 (id=2113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 670.923711ms ago: executing program 0 (id=2114): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) 393.155423ms ago: executing program 3 (id=2115): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000002440)=ANY=[@ANYBLOB="f8000000180001000000000000000000fe8800000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYBLOB="fc00"/19], 0xf8}}, 0x0) 306.457571ms ago: executing program 1 (id=2116): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006c6f7770616e000004000280080005", @ANYRES32=r1], 0x50}}, 0x20008040) 0s ago: executing program 4 (id=2117): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x0, 0xfffffffffffffffe, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x100, 0x0, 0x4}, 0x0, 0x0) kernel console output (not intermixed with test programs): e interface with an up link [ 251.319208][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.327225][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.335082][ T5784] bridge_slave_1: entered allmulticast mode [ 251.344441][ T5784] bridge_slave_1: entered promiscuous mode [ 251.390121][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.397575][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.404254][ T52] Bluetooth: hci2: command tx timeout [ 251.423895][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.440536][ T5795] Bluetooth: hci1: command tx timeout [ 251.474260][ T52] Bluetooth: hci3: command tx timeout [ 251.477981][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.480334][ T5795] Bluetooth: hci0: command tx timeout [ 251.649021][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.657000][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.664716][ T5796] bridge_slave_0: entered allmulticast mode [ 251.673588][ T5796] bridge_slave_0: entered promiscuous mode [ 251.692708][ T5783] team0: Port device team_slave_0 added [ 251.700648][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.708961][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.716788][ T5796] bridge_slave_1: entered allmulticast mode [ 251.725939][ T5796] bridge_slave_1: entered promiscuous mode [ 251.775979][ T5791] team0: Port device team_slave_0 added [ 251.794579][ T5791] team0: Port device team_slave_1 added [ 251.802360][ T52] Bluetooth: hci4: command tx timeout [ 251.811070][ T5783] team0: Port device team_slave_1 added [ 251.895721][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.917749][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.170745][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.178168][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.204661][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.228461][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.284861][ T5787] hsr_slave_0: entered promiscuous mode [ 252.295046][ T5787] hsr_slave_1: entered promiscuous mode [ 252.312469][ T5784] team0: Port device team_slave_0 added [ 252.322050][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.329522][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.356292][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.371281][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.378809][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.405328][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.426056][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.477550][ T5784] team0: Port device team_slave_1 added [ 252.490669][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.499348][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.527063][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.597735][ T5796] team0: Port device team_slave_0 added [ 252.681361][ T5796] team0: Port device team_slave_1 added [ 252.760634][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.767938][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.794299][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.815774][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.822920][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.850745][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.110965][ T5791] hsr_slave_0: entered promiscuous mode [ 253.120538][ T5791] hsr_slave_1: entered promiscuous mode [ 253.129086][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.136896][ T5791] Cannot create hsr debugfs directory [ 253.194836][ T5783] hsr_slave_0: entered promiscuous mode [ 253.204918][ T5783] hsr_slave_1: entered promiscuous mode [ 253.213621][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.221593][ T5783] Cannot create hsr debugfs directory [ 253.230053][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.237313][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.263743][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.292713][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.300131][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.326629][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.474334][ T52] Bluetooth: hci2: command tx timeout [ 253.476901][ T5795] Bluetooth: hci1: command tx timeout [ 253.507080][ T5784] hsr_slave_0: entered promiscuous mode [ 253.517951][ T5784] hsr_slave_1: entered promiscuous mode [ 253.526383][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.534323][ T5784] Cannot create hsr debugfs directory [ 253.554121][ T5795] Bluetooth: hci0: command tx timeout [ 253.559849][ T5795] Bluetooth: hci3: command tx timeout [ 253.878414][ T52] Bluetooth: hci4: command tx timeout [ 253.943545][ T5796] hsr_slave_0: entered promiscuous mode [ 253.954313][ T5796] hsr_slave_1: entered promiscuous mode [ 253.962296][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.970198][ T5796] Cannot create hsr debugfs directory [ 254.995602][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.072361][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.106073][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.136171][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.156711][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.244763][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.350603][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.384548][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.500345][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 255.520570][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.554952][ T52] Bluetooth: hci2: command tx timeout [ 255.560623][ T5795] Bluetooth: hci1: command tx timeout [ 255.575301][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.636580][ T52] Bluetooth: hci3: command tx timeout [ 255.642243][ T5795] Bluetooth: hci0: command tx timeout [ 255.696997][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.719898][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.756693][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.787527][ T5796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.814641][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.902931][ T5796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.927961][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.954325][ T5795] Bluetooth: hci4: command tx timeout [ 255.963390][ T5796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 256.071071][ T5796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 256.873784][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.990402][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.092752][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.151973][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.159777][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.187714][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.221918][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.272037][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.279826][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.397727][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.496003][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.578285][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.585982][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.607951][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.634107][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.641732][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.829358][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.837191][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.852862][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.860704][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.888591][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.896368][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.991140][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.033588][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.041512][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.292970][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.321792][ T5784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.333194][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.512627][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.590752][ T5791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.603320][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.646495][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.654524][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.685713][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.693409][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.162951][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.987237][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.550487][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.579184][ T5787] veth0_vlan: entered promiscuous mode [ 260.736773][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.756301][ T5787] veth1_vlan: entered promiscuous mode [ 260.828361][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.183403][ T5784] veth0_vlan: entered promiscuous mode [ 261.262725][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.312009][ T5787] veth0_macvtap: entered promiscuous mode [ 261.385989][ T5784] veth1_vlan: entered promiscuous mode [ 261.417685][ T5783] veth0_vlan: entered promiscuous mode [ 261.464971][ T5787] veth1_macvtap: entered promiscuous mode [ 261.524628][ T5791] veth0_vlan: entered promiscuous mode [ 261.577693][ T5783] veth1_vlan: entered promiscuous mode [ 261.636336][ T5791] veth1_vlan: entered promiscuous mode [ 261.683001][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.785353][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.822470][ T5784] veth0_macvtap: entered promiscuous mode [ 261.872336][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.884389][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.893394][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.904422][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.964220][ T5784] veth1_macvtap: entered promiscuous mode [ 262.139479][ T5791] veth0_macvtap: entered promiscuous mode [ 262.162310][ T5783] veth0_macvtap: entered promiscuous mode [ 262.221342][ T5783] veth1_macvtap: entered promiscuous mode [ 262.240691][ T5791] veth1_macvtap: entered promiscuous mode [ 262.338200][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.349128][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.365943][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.461249][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.472815][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.483288][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.494107][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.509463][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.533104][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.545459][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.557347][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.568120][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.578329][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.589109][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.604168][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.655390][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.666252][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.681329][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.728527][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.740769][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.752696][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.764926][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.780167][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.822432][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.833755][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.844411][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.855176][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.865316][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.876124][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.893572][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.924778][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.935516][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.948148][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.957935][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.023700][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.036605][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.047592][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.057032][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.085691][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.094910][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.104030][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.113051][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.279120][ T5796] veth0_vlan: entered promiscuous mode [ 264.372831][ T5796] veth1_vlan: entered promiscuous mode [ 264.710115][ T5796] veth0_macvtap: entered promiscuous mode [ 264.792587][ T5796] veth1_macvtap: entered promiscuous mode [ 265.012819][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.025096][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.036138][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.046945][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.057049][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.067835][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.079007][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.089776][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.105005][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.339455][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.350335][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.360518][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.371245][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.381435][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.392164][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.403053][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.414451][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.429203][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.591499][ T5796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.601786][ T5796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.612401][ T5796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.621537][ T5796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.152924][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.162971][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.422617][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.432074][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.673461][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.681772][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.043163][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.052925][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.056679][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.069835][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.310369][ T5787] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 270.351178][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.365060][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.464216][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.472423][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.849086][ T3702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.862848][ T3702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.729577][ T5985] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 272.810040][ T4176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.818847][ T4176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.192270][ T5026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.200549][ T5026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.454642][ T5993] dvmrp8: entered allmulticast mode [ 274.649700][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 277.584946][ T6032] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 279.050687][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.34'. [ 279.060126][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.34'. [ 282.669834][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 282.679373][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 283.535521][ T6100] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 284.885863][ T6113] netlink: 56 bytes leftover after parsing attributes in process `syz.0.63'. [ 285.899582][ T6127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.68'. [ 285.915049][ T6127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.68'. [ 286.370214][ T6131] netlink: 'syz.2.71': attribute type 1 has an invalid length. [ 287.766191][ T6147] netlink: 56 bytes leftover after parsing attributes in process `syz.0.79'. [ 289.941789][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 289.951480][ T6174] netlink: 112 bytes leftover after parsing attributes in process `syz.1.91'. [ 289.960748][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 290.405663][ T6179] netlink: 56 bytes leftover after parsing attributes in process `syz.0.94'. [ 290.877624][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.884655][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.201789][ T6210] netlink: 56 bytes leftover after parsing attributes in process `syz.4.109'. [ 294.745918][ T6230] ip6gretap0: entered promiscuous mode [ 294.756857][ T6230] batadv_slave_0: entered promiscuous mode [ 295.884970][ T6242] netlink: 56 bytes leftover after parsing attributes in process `syz.4.124'. [ 298.691269][ T6277] netlink: 56 bytes leftover after parsing attributes in process `syz.0.138'. [ 301.219930][ T6302] netlink: 56 bytes leftover after parsing attributes in process `syz.2.151'. [ 303.895413][ T6333] netlink: 56 bytes leftover after parsing attributes in process `syz.4.165'. [ 305.318115][ T6353] netlink: 'syz.3.174': attribute type 1 has an invalid length. [ 306.390640][ T6365] netlink: 56 bytes leftover after parsing attributes in process `syz.2.180'. [ 306.558966][ T6369] netlink: 'syz.0.182': attribute type 2 has an invalid length. [ 307.263504][ T6367] sctp: failed to load transform for md5: -2 [ 308.267545][ T6392] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 308.379771][ T6392] bond1: entered promiscuous mode [ 308.386657][ T6392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.133069][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.193'. [ 309.142485][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.193'. [ 309.517724][ T6405] netlink: 56 bytes leftover after parsing attributes in process `syz.2.195'. [ 309.891451][ T6412] netlink: 'syz.0.198': attribute type 10 has an invalid length. [ 309.917092][ T6412] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.932211][ T6412] bond0: (slave team0): Enslaving as an active interface with an up link [ 310.120618][ T6412] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:b8a5:1dff:fe48:4fac error=-28 [ 310.324428][ T6415] netlink: 'syz.0.198': attribute type 4 has an invalid length. [ 310.332299][ T6415] netlink: 152 bytes leftover after parsing attributes in process `syz.0.198'. [ 310.750627][ T6412] infiniband syz1: set active [ 310.755760][ T6412] infiniband syz1: added team_slave_0 [ 311.107503][ T6412] RDS/IB: syz1: added [ 311.111869][ T6412] smc: adding ib device syz1 with port count 1 [ 311.118501][ T6412] smc: ib device syz1 port 1 has pnetid [ 311.656652][ T6430] netlink: 'syz.1.205': attribute type 1 has an invalid length. [ 311.768661][ T6430] bond1: entered promiscuous mode [ 311.775641][ T6430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.067024][ T6442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 313.076631][ T6442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 313.747903][ T6444] netlink: 56 bytes leftover after parsing attributes in process `syz.2.210'. [ 314.899351][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.659371][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.223'. [ 316.669027][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.223'. [ 316.920809][ T6477] netlink: 56 bytes leftover after parsing attributes in process `syz.1.225'. [ 318.653526][ T6497] hsr_slave_0: left promiscuous mode [ 318.706280][ T6497] hsr_slave_1: left promiscuous mode [ 319.791249][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.239'. [ 319.805110][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.239'. [ 320.542352][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.964272][ T6523] Zero length message leads to an empty skb [ 321.409695][ T6526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.248'. [ 321.457636][ T6526] bond0: entered promiscuous mode [ 321.462938][ T6526] bond_slave_0: entered promiscuous mode [ 321.470129][ T6526] bond_slave_1: entered promiscuous mode [ 321.484612][ T6526] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 321.498526][ T6526] bond0: left promiscuous mode [ 321.503520][ T6526] bond_slave_0: left promiscuous mode [ 321.510477][ T6526] bond_slave_1: left promiscuous mode [ 321.689609][ T6530] hsr_slave_0: left promiscuous mode [ 321.765226][ T6530] hsr_slave_1: left promiscuous mode [ 322.891964][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'. [ 322.902507][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'. [ 324.985547][ T6567] netlink: 32 bytes leftover after parsing attributes in process `syz.1.267'. [ 325.157048][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.268'. [ 325.732703][ T6578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'. [ 325.746433][ T6578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'. [ 328.815745][ T6616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.287'. [ 328.826552][ T6616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.287'. [ 331.603406][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'. [ 331.612997][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'. [ 335.327141][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.317'. [ 335.336835][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.317'. [ 335.813092][ T6698] netlink: 68 bytes leftover after parsing attributes in process `syz.4.320'. [ 340.683627][ T6682] Set syz1 is full, maxelem 65536 reached [ 341.637017][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.332'. [ 341.646534][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.332'. [ 344.423565][ T6777] netlink: 68 bytes leftover after parsing attributes in process `syz.0.345'. [ 345.234205][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.347'. [ 345.243477][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.347'. [ 345.491464][ T6791] hsr_slave_0: left promiscuous mode [ 345.531254][ T6791] hsr_slave_1: left promiscuous mode [ 345.765836][ T6788] dummy0: entered promiscuous mode [ 345.771292][ T6788] macsec1: entered promiscuous mode [ 345.885404][ T6788] dummy0: left promiscuous mode [ 346.172439][ T6795] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 346.311376][ T6797] netlink: 'syz.1.353': attribute type 10 has an invalid length. [ 346.367985][ T6797] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.384644][ T6797] bond0: (slave team0): Enslaving as an active interface with an up link [ 346.490679][ T6801] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 347.519955][ T6812] netlink: 68 bytes leftover after parsing attributes in process `syz.1.359'. [ 348.593221][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.770469][ T6833] hsr_slave_0: left promiscuous mode [ 348.802100][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.364'. [ 348.811703][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.364'. [ 348.854434][ T6833] hsr_slave_1: left promiscuous mode [ 350.136809][ T6847] netlink: 'syz.1.369': attribute type 10 has an invalid length. [ 350.198122][ T6849] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 350.299595][ T6847] netlink: 'syz.1.369': attribute type 4 has an invalid length. [ 350.308048][ T6847] netlink: 152 bytes leftover after parsing attributes in process `syz.1.369'. [ 350.575372][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.371'. [ 350.603476][ T6852] bond0: entered promiscuous mode [ 350.609010][ T6852] bond_slave_0: entered promiscuous mode [ 350.616049][ T6852] bond_slave_1: entered promiscuous mode [ 350.635900][ T6852] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 350.648710][ T6852] bond0: left promiscuous mode [ 350.653732][ T6852] bond_slave_0: left promiscuous mode [ 350.660713][ T6852] bond_slave_1: left promiscuous mode [ 351.405615][ T6863] netlink: 68 bytes leftover after parsing attributes in process `syz.4.375'. [ 351.914901][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.311302][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.318919][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.455161][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.380'. [ 352.468581][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.380'. [ 353.965446][ T6898] netlink: 'syz.3.387': attribute type 10 has an invalid length. [ 353.991894][ T6898] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.016873][ T6898] bond0: (slave team0): Enslaving as an active interface with an up link [ 354.131311][ T6899] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 354.254439][ T6898] netlink: 'syz.3.387': attribute type 4 has an invalid length. [ 354.262481][ T6898] netlink: 152 bytes leftover after parsing attributes in process `syz.3.387'. [ 354.605083][ T6906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'. [ 355.085943][ T6912] netlink: 68 bytes leftover after parsing attributes in process `syz.4.391'. [ 355.616817][ T6918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 355.626476][ T6918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 355.984537][ T6925] netlink: 56 bytes leftover after parsing attributes in process `syz.4.396'. [ 355.993750][ T6925] netlink: 576 bytes leftover after parsing attributes in process `syz.4.396'. [ 358.486745][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 358.496064][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 358.735895][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.409'. [ 358.774201][ T6962] syz.3.408 uses obsolete (PF_INET,SOCK_PACKET) [ 359.930979][ T6975] hsr_slave_0: left promiscuous mode [ 359.969552][ T6975] hsr_slave_1: left promiscuous mode [ 361.192254][ T5845] IPVS: starting estimator thread 0... [ 361.304284][ T6986] IPVS: using max 240 ests per chain, 12000 per kthread [ 362.077513][ T6996] __nla_validate_parse: 1 callbacks suppressed [ 362.077587][ T6996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.420'. [ 362.712199][ T7003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 362.721523][ T7003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 362.749242][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.421'. [ 362.888222][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.421'. [ 363.807716][ T7022] netlink: 'syz.4.427': attribute type 4 has an invalid length. [ 365.083970][ T7040] netlink: 'syz.1.433': attribute type 1 has an invalid length. [ 365.998219][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.437'. [ 366.007619][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.437'. [ 367.876312][ T7073] netlink: 'syz.1.447': attribute type 1 has an invalid length. [ 368.145709][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 369.216444][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'. [ 369.225989][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'. [ 369.717121][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 369.723681][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 369.730931][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 369.732746][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 372.036349][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.468'. [ 372.148747][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.469'. [ 372.158280][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.469'. [ 373.195310][ T7140] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.565465][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.486'. [ 377.696964][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 385.998563][ T7301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.546'. [ 386.026154][ T7301] veth0: entered promiscuous mode [ 386.041964][ T7301] veth0: left promiscuous mode [ 386.778999][ T7312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.551'. [ 386.788430][ T7312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.551'. [ 387.367429][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'. [ 388.945506][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.565'. [ 388.955594][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.565'. [ 389.478946][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 391.414632][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.580'. [ 391.424074][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.580'. [ 391.862069][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 392.740097][ T7402] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.889041][ T7402] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.011913][ T7402] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.176281][ T7402] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.213003][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'. [ 393.272541][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'. [ 393.431107][ T7402] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.463746][ T7402] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.493515][ T7402] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.524182][ T7402] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.442524][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.606'. [ 395.452268][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.606'. [ 397.659487][ T7478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.621'. [ 397.669237][ T7478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.621'. [ 399.959320][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.637'. [ 399.968735][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.637'. [ 401.062446][ T7535] IPVS: length: 69 != 8 [ 402.072634][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.653'. [ 402.085192][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.653'. [ 403.172035][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.658'. [ 403.198356][ T7562] gretap0: entered promiscuous mode [ 403.213231][ T7562] gretap0: left promiscuous mode [ 404.448906][ T7579] netlink: 'syz.2.666': attribute type 1 has an invalid length. [ 404.457132][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 405.675725][ T7594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.673'. [ 405.700939][ T7594] gretap0: entered promiscuous mode [ 405.720536][ T7594] gretap0: left promiscuous mode [ 406.053612][ T7598] IPVS: length: 69 != 8 [ 406.585175][ T7609] netlink: 'syz.4.679': attribute type 1 has an invalid length. [ 406.593078][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'. [ 409.205949][ T7632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 409.394540][ T7097] Bluetooth: hci4: command tx timeout [ 409.442593][ T7635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.689'. [ 409.468201][ T7635] gretap0: entered promiscuous mode [ 409.482912][ T7635] gretap0: left promiscuous mode [ 410.881466][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.508826][ T7664] IPVS: length: 69 != 8 [ 411.587198][ T7665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.703'. [ 413.746499][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.753294][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 416.799069][ T7725] IPVS: length: 69 != 8 [ 418.953610][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.739'. [ 418.963142][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.739'. [ 418.992625][ T7753] erspan0: entered promiscuous mode [ 419.041499][ T7753] erspan0: left promiscuous mode [ 419.392782][ T7759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.742'. [ 420.979430][ T7781] IPVS: length: 69 != 8 [ 421.759639][ T7792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.757'. [ 423.474273][ T7815] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 423.830180][ T7817] lo speed is unknown, defaulting to 1000 [ 423.846757][ T7817] lo speed is unknown, defaulting to 1000 [ 423.853739][ T7817] lo speed is unknown, defaulting to 1000 [ 424.318850][ T7817] infiniband syz0: set active [ 424.324064][ T7817] infiniband syz0: added lo [ 424.330238][ T5840] lo speed is unknown, defaulting to 1000 [ 424.468445][ T7822] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 424.522108][ T7822] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 424.575786][ T7817] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 424.619009][ T7817] infiniband syz0: Couldn't open port 1 [ 424.714518][ T7817] RDS/IB: syz0: added [ 424.718776][ T7817] smc: adding ib device syz0 with port count 1 [ 424.725332][ T7817] smc: ib device syz0 port 1 has pnetid [ 424.733110][ T7817] lo speed is unknown, defaulting to 1000 [ 425.213216][ T7817] lo speed is unknown, defaulting to 1000 [ 425.710849][ T7817] lo speed is unknown, defaulting to 1000 [ 426.200546][ T7817] lo speed is unknown, defaulting to 1000 [ 426.692674][ T7817] lo speed is unknown, defaulting to 1000 [ 427.184304][ T5840] lo speed is unknown, defaulting to 1000 [ 427.904422][ T7849] IPVS: length: 69 != 8 [ 428.018847][ T7855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.783'. [ 429.291009][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.788'. [ 429.301868][ T7870] netlink: 112 bytes leftover after parsing attributes in process `syz.0.788'. [ 429.311307][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.788'. [ 431.225300][ T7887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.796'. [ 433.405685][ T7919] IPVS: length: 69 != 8 [ 433.469135][ T7918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.810'. [ 433.490953][ T5845] IPVS: starting estimator thread 0... [ 433.560189][ T7918] team0: entered promiscuous mode [ 433.570296][ T7918] team_slave_0: entered promiscuous mode [ 433.578881][ T7918] team_slave_1: entered promiscuous mode [ 433.592676][ T7918] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 433.605367][ T7925] IPVS: using max 192 ests per chain, 9600 per kthread [ 433.605769][ T7918] team0: left promiscuous mode [ 433.617587][ T7918] team_slave_0: left promiscuous mode [ 433.624468][ T7918] team_slave_1: left promiscuous mode [ 435.887358][ T7959] netlink: 'syz.4.826': attribute type 10 has an invalid length. [ 435.895985][ T7959] netlink: 2 bytes leftover after parsing attributes in process `syz.4.826'. [ 435.905370][ T7959] team0: entered promiscuous mode [ 435.910619][ T7959] team_slave_0: entered promiscuous mode [ 435.917729][ T7959] team_slave_1: entered promiscuous mode [ 435.931424][ T7959] bridge0: port 3(team0) entered blocking state [ 435.938772][ T7959] bridge0: port 3(team0) entered disabled state [ 435.946478][ T7959] team0: entered allmulticast mode [ 435.951834][ T7959] team_slave_0: entered allmulticast mode [ 435.958149][ T7959] team_slave_1: entered allmulticast mode [ 435.972321][ T7959] bridge0: port 3(team0) entered blocking state [ 435.979474][ T7959] bridge0: port 3(team0) entered forwarding state [ 442.455458][ T8042] netlink: 'syz.2.859': attribute type 10 has an invalid length. [ 442.488862][ T8042] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.505444][ T8042] bond0: (slave team0): Enslaving as an active interface with an up link [ 442.647503][ T8042] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 442.750368][ T8042] netlink: 'syz.2.859': attribute type 4 has an invalid length. [ 442.758660][ T8042] netlink: 152 bytes leftover after parsing attributes in process `syz.2.859'. [ 444.307275][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 445.535218][ T8089] netlink: 'syz.4.875': attribute type 10 has an invalid length. [ 445.560140][ T8089] bridge0: port 3(team0) entered disabled state [ 445.568957][ T8089] team0: left allmulticast mode [ 445.574398][ T8089] team_slave_0: left allmulticast mode [ 445.580226][ T8089] team_slave_1: left allmulticast mode [ 445.586289][ T8089] team0: left promiscuous mode [ 445.586566][ T8093] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 445.591182][ T8089] team_slave_0: left promiscuous mode [ 445.592431][ T8089] team_slave_1: left promiscuous mode [ 445.611313][ T8089] bridge0: port 3(team0) entered disabled state [ 445.738800][ T8089] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.762251][ T8089] bond0: (slave team0): Enslaving as an active interface with an up link [ 445.887340][ T8093] netlink: 'syz.4.875': attribute type 4 has an invalid length. [ 445.895834][ T8093] netlink: 152 bytes leftover after parsing attributes in process `syz.4.875'. [ 446.894407][ T8107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.879'. [ 447.532009][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.884'. [ 448.536308][ T8133] netlink: 'syz.1.890': attribute type 10 has an invalid length. [ 448.558758][ T8133] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 448.621510][ T8133] netlink: 'syz.1.890': attribute type 4 has an invalid length. [ 448.629719][ T8133] netlink: 152 bytes leftover after parsing attributes in process `syz.1.890'. [ 449.071844][ T8137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.894'. [ 450.727132][ T8155] bond1: entered promiscuous mode [ 450.734612][ T8155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.958364][ T8155] veth5: entered promiscuous mode [ 450.968129][ T8155] bond1: (slave veth5): Enslaving as an active interface with an up link [ 451.045838][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.901'. [ 451.055624][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.901'. [ 451.094167][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881176f3800: rx timeout, send abort [ 451.103351][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805155ee00: rx timeout, send abort [ 451.114091][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881176f3800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 451.129202][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805155ee00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 451.734326][ T8168] netlink: 'syz.2.905': attribute type 10 has an invalid length. [ 451.828620][ T8168] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 451.869927][ T8170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.906'. [ 451.904620][ T8168] netlink: 'syz.2.905': attribute type 4 has an invalid length. [ 451.912629][ T8168] netlink: 152 bytes leftover after parsing attributes in process `syz.2.905'. [ 452.543913][ T8181] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.071937][ T8186] bond1: entered promiscuous mode [ 453.079180][ T8186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.195272][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.917'. [ 453.204910][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.917'. [ 453.244784][ T8192] veth3: entered promiscuous mode [ 453.255722][ T8192] bond1: (slave veth3): Enslaving as an active interface with an up link [ 454.060575][ T8201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.922'. [ 454.110511][ T8205] netlink: 'syz.2.923': attribute type 10 has an invalid length. [ 454.141007][ T8205] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 454.186189][ T8205] netlink: 'syz.2.923': attribute type 4 has an invalid length. [ 454.194426][ T8205] netlink: 152 bytes leftover after parsing attributes in process `syz.2.923'. [ 454.448627][ T8208] netlink: 68 bytes leftover after parsing attributes in process `syz.3.924'. [ 455.335204][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.931'. [ 455.344867][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.931'. [ 455.568132][ T8224] bond2: entered promiscuous mode [ 455.574977][ T8224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.752222][ T8225] veth9: entered promiscuous mode [ 455.761710][ T8225] bond2: (slave veth9): Enslaving as an active interface with an up link [ 456.172828][ T8235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.936'. [ 456.367434][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.937'. [ 456.585354][ T8241] netlink: 68 bytes leftover after parsing attributes in process `syz.1.939'. [ 456.632090][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.938'. [ 456.641736][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.938'. [ 456.667448][ T8240] ip6gretap0: entered promiscuous mode [ 456.744167][ T8240] ip6gretap0: left promiscuous mode [ 459.075606][ T8281] Bluetooth: MGMT ver 1.23 [ 459.235695][ T8283] warning: `syz.4.960' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 459.330394][ T8285] dccp_close: ABORT with 11 bytes unread [ 460.434726][ T8300] __nla_validate_parse: 4 callbacks suppressed [ 460.434796][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.967'. [ 460.737959][ T8304] netlink: 'syz.4.969': attribute type 1 has an invalid length. [ 461.038680][ T8311] rdma_rxe: rxe_newlink: failed to add lo [ 461.514887][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 461.639355][ T8320] netlink: 'syz.3.976': attribute type 12 has an invalid length. [ 461.647710][ T8320] netlink: 'syz.3.976': attribute type 2 has an invalid length. [ 461.656403][ T8320] netlink: 200 bytes leftover after parsing attributes in process `syz.3.976'. [ 462.554591][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.982'. [ 463.142748][ T8340] netlink: 36 bytes leftover after parsing attributes in process `syz.1.986'. [ 463.152797][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.392000][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.988'. [ 464.737779][ T8365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.998'. [ 465.364970][ T8371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1002'. [ 466.864713][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1013'. [ 467.504870][ T8404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1017'. [ 468.906452][ T8427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1029'. [ 469.557972][ T8440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1034'. [ 469.567860][ T8440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1034'. [ 469.668170][ T8438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1035'. [ 469.702494][ T8438] batadv0: entered promiscuous mode [ 469.726872][ T8438] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 469.739810][ T8438] batadv0: left promiscuous mode [ 471.124205][ T8458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1044'. [ 471.830295][ T8465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1048'. [ 471.839857][ T8465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1048'. [ 472.155664][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1050'. [ 472.190715][ T8470] batadv0: entered promiscuous mode [ 472.202976][ T8470] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 472.216333][ T8470] batadv0: left promiscuous mode [ 473.354624][ T8484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1057'. [ 474.124342][ T8497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1063'. [ 474.133994][ T8497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1063'. [ 475.017987][ T8508] IPVS: length: 69 != 8 [ 475.178202][ T8508] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 475.189767][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.197043][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.213193][ T5845] IPVS: starting estimator thread 0... [ 475.278144][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1069'. [ 475.324740][ T8517] IPVS: using max 240 ests per chain, 12000 per kthread [ 475.838690][ T8521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1073'. [ 476.495248][ T8531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1078'. [ 476.504678][ T8531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1078'. [ 477.431087][ T8545] IPVS: length: 69 != 8 [ 477.440639][ T8545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 477.628687][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1086'. [ 477.654881][ T8551] batadv0: entered promiscuous mode [ 477.666981][ T8551] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 477.686422][ T8551] batadv0: left promiscuous mode [ 478.140052][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1088'. [ 478.732520][ T8565] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1093'. [ 478.850192][ T8562] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1092'. [ 479.163635][ T8568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1094'. [ 479.173271][ T8568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1094'. [ 480.530976][ T8581] IPVS: length: 69 != 8 [ 480.605901][ T8581] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 480.620001][ T5840] IPVS: starting estimator thread 0... [ 480.724754][ T8584] IPVS: using max 240 ests per chain, 12000 per kthread [ 480.826628][ T8585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1101'. [ 480.852493][ T8585] batadv0: entered promiscuous mode [ 480.864588][ T8585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 480.886293][ T8585] batadv0: left promiscuous mode [ 481.276591][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1103'. [ 481.527781][ T8593] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1105'. [ 481.929133][ T8597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1107'. [ 482.915734][ T8613] IPVS: length: 69 != 8 [ 483.041924][ T8613] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 483.119182][ T8616] __nla_validate_parse: 1 callbacks suppressed [ 483.119256][ T8616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1116'. [ 483.161894][ T8616] batadv0: entered promiscuous mode [ 483.173609][ T8616] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 483.185897][ T8616] batadv0: left promiscuous mode [ 483.582012][ T8621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1118'. [ 485.300159][ T8653] IPVS: length: 69 != 8 [ 485.311854][ T8650] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 485.935292][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1133'. [ 487.741274][ T8692] IPVS: length: 69 != 8 [ 487.783210][ T8692] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 488.318323][ T8699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1150'. [ 488.527336][ T8703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1151'. [ 489.435153][ T8720] netlink: 'syz.1.1158': attribute type 10 has an invalid length. [ 489.519894][ T8720] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 489.566024][ T8720] netlink: 'syz.1.1158': attribute type 4 has an invalid length. [ 489.574209][ T8720] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1158'. [ 490.016937][ T8728] IPVS: length: 69 != 8 [ 490.024400][ T8728] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 490.464443][ T8736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1165'. [ 491.896590][ T8755] netlink: 'syz.0.1174': attribute type 10 has an invalid length. [ 491.955394][ T8755] syz1: rxe_newlink: already configured on team_slave_0 [ 492.026636][ T8755] netlink: 'syz.0.1174': attribute type 4 has an invalid length. [ 492.041467][ T8755] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1174'. [ 493.696339][ T8771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1180'. [ 494.423385][ T8780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1184'. [ 494.433132][ T8780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1184'. [ 494.674594][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e6c2400: rx timeout, send abort [ 494.684502][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e6c2e00: rx timeout, send abort [ 494.695515][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804e6c2400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 494.710537][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804e6c2e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 495.254048][ T8794] netlink: 'syz.1.1190': attribute type 10 has an invalid length. [ 495.289829][ T8794] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 495.367909][ T8794] netlink: 'syz.1.1190': attribute type 4 has an invalid length. [ 495.376259][ T8794] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1190'. [ 496.814960][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 497.686267][ T8828] netlink: 'syz.4.1207': attribute type 13 has an invalid length. [ 498.035006][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 498.405637][ T8841] netlink: 'syz.1.1210': attribute type 10 has an invalid length. [ 498.415180][ T8841] bond0: (slave hsr1): The slave device specified does not support setting the MAC address [ 498.430829][ T8841] bond0: (slave hsr1): Error -95 calling set_mac_address [ 498.956180][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 499.937280][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 501.936951][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 506.877039][ T8950] lo speed is unknown, defaulting to 1000 [ 511.969784][ T9015] siw: device registration error -23 [ 513.404802][ T9037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1297'. [ 513.414559][ T9037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1297'. [ 518.876498][ T9121] netlink: 'syz.3.1336': attribute type 1 has an invalid length. [ 519.016729][ T9123] rdma_rxe: rxe_newlink: failed to add lo [ 519.672146][ T9128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1340'. [ 519.754652][ T9128] nbd: socks must be embedded in a SOCK_ITEM attr [ 520.892600][ T9148] bridge0: port 3(syz_tun) entered blocking state [ 520.900064][ T9148] bridge0: port 3(syz_tun) entered disabled state [ 520.907669][ T9148] syz_tun: entered allmulticast mode [ 520.925155][ T9148] syz_tun: entered promiscuous mode [ 520.933169][ T9148] bridge0: port 3(syz_tun) entered blocking state [ 520.940416][ T9148] bridge0: port 3(syz_tun) entered forwarding state [ 522.632112][ T9170] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 522.702202][ T9170] netlink: 'syz.2.1355': attribute type 4 has an invalid length. [ 522.710643][ T9170] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1355'. [ 523.127136][ T9180] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1359'. [ 523.402654][ T9183] team0: No ports can be present during mode change [ 524.679559][ T9202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1369'. [ 524.689457][ T9202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1369'. [ 524.719250][ T9202] ip6gretap0: entered promiscuous mode [ 524.745103][ T9202] ip6gretap0: left promiscuous mode [ 525.251802][ T9205] lo speed is unknown, defaulting to 1000 [ 525.819000][ T9212] syz1: rxe_newlink: already configured on team_slave_0 [ 525.845737][ T9212] netlink: 'syz.0.1371': attribute type 4 has an invalid length. [ 525.853604][ T9212] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1371'. [ 526.101862][ T9214] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1373'. [ 528.535953][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1383'. [ 528.545625][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1383'. [ 528.570029][ T9237] ip6gretap0: entered promiscuous mode [ 528.653418][ T9242] netlink: 'syz.4.1385': attribute type 10 has an invalid length. [ 528.669130][ T9237] ip6gretap0: left promiscuous mode [ 528.761965][ T9245] netlink: 'syz.4.1385': attribute type 4 has an invalid length. [ 528.770295][ T9245] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1385'. [ 528.821822][ T9246] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1387'. [ 529.549232][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1388'. [ 529.625982][ T9251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1389'. [ 530.972548][ T9273] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1399'. [ 531.009455][ T9275] netlink: 'syz.4.1400': attribute type 10 has an invalid length. [ 531.125001][ T9277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1401'. [ 531.134797][ T9277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1401'. [ 531.168558][ T9277] ip6gretap0: entered promiscuous mode [ 531.186574][ T9275] netlink: 'syz.4.1400': attribute type 4 has an invalid length. [ 531.194879][ T9275] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1400'. [ 531.222087][ T9277] ip6gretap0: left promiscuous mode [ 531.684239][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1403'. [ 531.694309][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1403'. [ 531.802917][ T9284] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1404'. [ 533.287363][ T9304] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1414'. [ 533.393481][ T9308] netlink: 'syz.4.1416': attribute type 1 has an invalid length. [ 533.436170][ T9306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1415'. [ 533.445835][ T9306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1415'. [ 533.470526][ T9306] ip6gretap0: entered promiscuous mode [ 533.530528][ T9306] ip6gretap0: left promiscuous mode [ 533.561014][ T5790] Bluetooth: hci4: command 0x0406 tx timeout [ 533.721393][ T9312] rdma_rxe: rxe_newlink: failed to add lo [ 534.605093][ T9322] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 535.723694][ T9336] ip6gretap0: entered promiscuous mode [ 535.799534][ T9336] ip6gretap0: left promiscuous mode [ 536.335274][ T9346] netlink: 'syz.2.1433': attribute type 1 has an invalid length. [ 536.498269][ T9352] __nla_validate_parse: 4 callbacks suppressed [ 536.498348][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1437'. [ 536.566408][ T9355] rdma_rxe: rxe_newlink: failed to add lo [ 536.619630][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.626499][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 538.105284][ T9373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1446'. [ 538.120711][ T9373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1446'. [ 538.146659][ T9373] ip6gretap0: entered promiscuous mode [ 538.235811][ T9373] ip6gretap0: left promiscuous mode [ 538.516660][ T9378] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1447'. [ 539.180898][ T9390] netlink: 'syz.0.1453': attribute type 1 has an invalid length. [ 539.554470][ T9396] rdma_rxe: rxe_newlink: failed to add lo [ 540.635141][ T9410] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1462'. [ 544.249800][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1474'. [ 544.299240][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805145c000: rx timeout, send abort [ 544.483386][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1476'. [ 544.808113][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805145c000: abort rx timeout. Force session deactivation [ 545.034505][ T9451] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1479'. [ 545.064819][ T9451] Bluetooth: MGMT ver 1.23 [ 549.326649][ T9484] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1494'. [ 549.419120][ T9481] infiniband syz2: set down [ 549.424061][ T9481] infiniband syz2: added team0 [ 549.603521][ T9481] RDS/IB: syz2: added [ 549.608094][ T9481] smc: adding ib device syz2 with port count 1 [ 549.614694][ T9481] smc: ib device syz2 port 1 has pnetid [ 549.864363][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c202e00: rx timeout, send abort [ 550.372861][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c202e00: abort rx timeout. Force session deactivation [ 552.212407][ T9508] netlink: 'syz.3.1507': attribute type 12 has an invalid length. [ 552.221281][ T9508] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1507'. [ 554.132834][ T9526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1515'. [ 555.260811][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1518'. [ 555.485327][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 556.064469][ T9543] netlink: 'syz.2.1522': attribute type 12 has an invalid length. [ 556.072657][ T9543] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1522'. [ 556.242445][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c202e00: rx timeout, send abort [ 556.453929][ T9547] vivid-002: disconnect [ 556.478488][ T9547] process 'syz.3.1525' launched '/dev/fd/7' with NULL argv: empty string added [ 556.600601][ T9546] vivid-002: reconnect [ 556.755686][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c202e00: abort rx timeout. Force session deactivation [ 557.301678][ T9559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1529'. [ 559.404266][ T1683] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 559.614696][ T1683] usb 3-1: Using ep0 maxpacket: 16 [ 559.660095][ T1683] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 559.672411][ T1683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 559.790601][ T1683] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 559.800433][ T1683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.809064][ T1683] usb 3-1: Product: syz [ 559.813445][ T1683] usb 3-1: Manufacturer: syz [ 559.818386][ T1683] usb 3-1: SerialNumber: syz [ 559.889247][ T1683] usb 3-1: config 0 descriptor?? [ 559.935592][ T1683] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 559.945377][ T1683] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 560.559264][ T1683] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 560.582419][ T1683] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 561.219796][ T1683] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 561.244875][ T1683] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 561.268794][ T1683] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 561.298778][ T1683] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 561.516188][ T1683] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 561.540086][ T1683] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 561.572554][ T9596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1546'. [ 561.591284][ T1683] usb 3-1: USB disconnect, device number 2 [ 561.764784][ T5840] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 561.948725][ T5840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.959542][ T5840] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 561.969176][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.045521][ T5840] usb 2-1: config 0 descriptor?? [ 562.112669][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802830ea00: rx timeout, send abort [ 562.273040][ T1683] usb 2-1: USB disconnect, device number 2 [ 562.621449][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802830ea00: abort rx timeout. Force session deactivation [ 563.860642][ T9626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1559'. [ 566.401885][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 566.851285][ T5840] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 567.012238][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 567.136400][ T5840] usb 4-1: config 0 has an invalid interface number: 202 but max is 0 [ 567.145183][ T5840] usb 4-1: config 0 has no interface number 0 [ 567.158745][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051563000: rx timeout, send abort [ 567.203899][ T5840] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 567.218966][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.227455][ T5840] usb 4-1: Product: syz [ 567.231853][ T5840] usb 4-1: Manufacturer: syz [ 567.237063][ T5840] usb 4-1: SerialNumber: syz [ 567.309704][ T5840] usb 4-1: config 0 descriptor?? [ 567.435156][ T5840] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 567.544197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 567.644641][ T4207] usb 4-1: Failed to submit usb control message: -71 [ 567.651662][ T4207] usb 4-1: unable to send the bmi data to the device: -71 [ 567.659085][ T5840] usb 4-1: USB disconnect, device number 2 [ 567.667282][ T4207] usb 4-1: unable to get target info from device [ 567.667531][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051563000: abort rx timeout. Force session deactivation [ 567.675079][ T4207] usb 4-1: could not get target info (-71) [ 567.690420][ T4207] usb 4-1: could not probe fw (-71) [ 567.712185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 567.723596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 568.494783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 568.505351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 568.932608][ T9674] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1575'. [ 568.985360][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1576'. [ 569.055676][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'. [ 569.658657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 569.674958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 569.685093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 569.693987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 569.884295][ T9687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1581'. [ 570.884317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 574.463755][ C1] sched: DL replenish lagged too much [ 575.111413][ T9694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1585'. [ 575.723385][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880283f3e00: rx timeout, send abort [ 575.995609][ T9705] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1589'. [ 576.232171][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880283f3e00: abort rx timeout. Force session deactivation [ 576.879308][ T9715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1593'. [ 578.953332][ T9733] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1602'. [ 579.261106][ T9739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1606'. [ 580.649843][ T7097] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 581.116873][ T9766] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1619'. [ 581.198550][ T9767] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 581.287555][ T9769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1621'. [ 583.048052][ T9797] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1634'. [ 583.320416][ T9799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1635'. [ 583.531171][ T9801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'. [ 583.541011][ T9801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'. [ 583.634980][ T9801] bond0: entered promiscuous mode [ 583.640370][ T9801] bond_slave_0: entered promiscuous mode [ 583.647258][ T9801] bond_slave_1: entered promiscuous mode [ 583.654062][ T9801] team0: entered promiscuous mode [ 583.659322][ T9801] team_slave_0: entered promiscuous mode [ 583.666062][ T9801] team_slave_1: entered promiscuous mode [ 583.799641][ T9801] bond0: left promiscuous mode [ 583.804847][ T9801] bond_slave_0: left promiscuous mode [ 583.811129][ T9801] bond_slave_1: left promiscuous mode [ 583.817746][ T9801] team0: left promiscuous mode [ 583.822750][ T9801] team_slave_0: left promiscuous mode [ 583.829250][ T9801] team_slave_1: left promiscuous mode [ 584.350086][ T9810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1639'. [ 585.136773][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 585.254944][ T9828] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1648'. [ 585.379002][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'. [ 586.400256][ T9844] __nla_validate_parse: 2 callbacks suppressed [ 586.400340][ T9844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1656'. [ 587.245575][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 587.394198][ T9860] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1663'. [ 588.334596][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 588.366499][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1670'. [ 588.534144][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 588.557932][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 588.569978][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 588.688532][ T5840] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 588.698151][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.710076][ T5840] usb 2-1: Product: syz [ 588.715619][ T5840] usb 2-1: Manufacturer: syz [ 588.720450][ T5840] usb 2-1: SerialNumber: syz [ 588.817488][ T5840] usb 2-1: config 0 descriptor?? [ 588.881078][ T5840] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 588.890802][ T5840] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 589.529922][ T5840] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 589.553903][ T5840] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 589.952528][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 590.162883][ T9891] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1678'. [ 590.185252][ T5840] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 590.197772][ T5840] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 590.223276][ T5840] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 590.254302][ T5840] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 590.277052][ T5840] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 590.297517][ T5840] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 590.337244][ T5840] usb 2-1: USB disconnect, device number 3 [ 591.135213][ T9905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1684'. [ 591.938606][ T9915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1689'. [ 591.960725][ T9915] bond0: entered promiscuous mode [ 591.966205][ T9915] bond_slave_0: entered promiscuous mode [ 591.972741][ T9915] bond_slave_1: entered promiscuous mode [ 591.986631][ T9915] team0: entered promiscuous mode [ 591.992018][ T9915] team_slave_0: entered promiscuous mode [ 591.998629][ T9915] team_slave_1: entered promiscuous mode [ 592.008387][ T9915] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 592.019658][ T9915] bond0: left promiscuous mode [ 592.024825][ T9915] bond_slave_0: left promiscuous mode [ 592.031096][ T9915] bond_slave_1: left promiscuous mode [ 592.037799][ T9915] team0: left promiscuous mode [ 592.042791][ T9915] team_slave_0: left promiscuous mode [ 592.050214][ T9915] team_slave_1: left promiscuous mode [ 592.140043][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1691'. [ 592.381995][ T9922] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1692'. [ 592.636718][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 593.422720][ T9935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1697'. [ 594.258238][ T9949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1704'. [ 594.281695][ T9949] bond0: entered promiscuous mode [ 594.287916][ T9949] bond_slave_0: entered promiscuous mode [ 594.294687][ T9949] bond_slave_1: entered promiscuous mode [ 594.301186][ T9949] team0: entered promiscuous mode [ 594.306553][ T9949] team_slave_0: entered promiscuous mode [ 594.313179][ T9949] team_slave_1: entered promiscuous mode [ 594.323310][ T9949] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 594.341689][ T9949] bond0: left promiscuous mode [ 594.346834][ T9949] bond_slave_0: left promiscuous mode [ 594.353150][ T9949] bond_slave_1: left promiscuous mode [ 594.359654][ T9949] team0: left promiscuous mode [ 594.364806][ T9949] team_slave_0: left promiscuous mode [ 594.371142][ T9949] team_slave_1: left promiscuous mode [ 594.494665][ T9952] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1706'. [ 594.683136][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1705'. [ 595.904700][ T9970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1714'. [ 596.058985][ T9978] capability: warning: `syz.3.1716' uses deprecated v2 capabilities in a way that may be insecure [ 596.885187][ T9980] lo speed is unknown, defaulting to 1000 [ 597.126687][ T9978] sctp: failed to load transform for md5: -2 [ 597.367824][ T9976] sctp: failed to load transform for md5: -2 [ 597.443136][ T9972] sctp: failed to load transform for md5: -2 [ 598.186705][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.193424][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.266340][T10005] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1719'. [ 598.314849][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1720'. [ 598.342721][T10006] bond0: entered promiscuous mode [ 598.348124][T10006] bond_slave_0: entered promiscuous mode [ 598.354824][T10006] bond_slave_1: entered promiscuous mode [ 598.361443][T10006] team0: entered promiscuous mode [ 598.366982][T10006] team_slave_0: entered promiscuous mode [ 598.373578][T10006] team_slave_1: entered promiscuous mode [ 598.383192][T10006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 598.395132][T10006] bond0: left promiscuous mode [ 598.400118][T10006] bond_slave_0: left promiscuous mode [ 598.407502][T10006] bond_slave_1: left promiscuous mode [ 598.414014][T10006] team0: left promiscuous mode [ 598.419042][T10006] team_slave_0: left promiscuous mode [ 598.425382][T10006] team_slave_1: left promiscuous mode [ 598.807540][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'. [ 599.376801][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1724'. [ 600.716159][T10023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1729'. [ 601.375524][T10034] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1734'. [ 601.760203][T10037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1735'. [ 601.782543][T10037] bond0: entered promiscuous mode [ 601.792654][T10037] bond_slave_0: entered promiscuous mode [ 601.799547][T10037] bond_slave_1: entered promiscuous mode [ 601.806342][T10037] team0: entered promiscuous mode [ 601.819497][T10037] team_slave_0: entered promiscuous mode [ 601.826252][T10037] team_slave_1: entered promiscuous mode [ 601.836181][T10037] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 601.847980][T10037] bond0: left promiscuous mode [ 601.853094][T10037] bond_slave_0: left promiscuous mode [ 601.859614][T10037] bond_slave_1: left promiscuous mode [ 601.865924][T10037] team0: left promiscuous mode [ 601.870910][T10037] team_slave_0: left promiscuous mode [ 601.877477][T10037] team_slave_1: left promiscuous mode [ 602.215083][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'. [ 602.385467][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 602.386834][T10048] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1741'. [ 604.287445][T10075] __nla_validate_parse: 1 callbacks suppressed [ 604.287516][T10075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1752'. [ 604.316090][T10075] bond0: entered promiscuous mode [ 604.321526][T10075] bond_slave_0: entered promiscuous mode [ 604.328246][T10075] bond_slave_1: entered promiscuous mode [ 604.334938][T10075] team0: entered promiscuous mode [ 604.340265][T10075] team_slave_0: entered promiscuous mode [ 604.346895][T10075] team_slave_1: entered promiscuous mode [ 604.356558][T10075] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 604.375573][T10075] bond0: left promiscuous mode [ 604.380684][T10075] bond_slave_0: left promiscuous mode [ 604.387186][T10075] bond_slave_1: left promiscuous mode [ 604.393508][T10075] team0: left promiscuous mode [ 604.398742][T10075] team_slave_0: left promiscuous mode [ 604.405153][T10075] team_slave_1: left promiscuous mode [ 605.551311][T10091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1758'. [ 605.877413][T10093] loop9: detected capacity change from 0 to 7 [ 606.001129][T10093] Dev loop9: unable to read RDB block 7 [ 606.012535][T10093] loop9: unable to read partition table [ 606.055148][T10093] loop9: partition table beyond EOD, truncated [ 606.061695][T10093] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 606.718264][T10103] netlink: 'syz.0.1767': attribute type 1 has an invalid length. [ 606.784739][T10105] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 606.852212][T10103] bond2: entered promiscuous mode [ 606.859112][T10103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 607.412104][T10116] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1770'. [ 607.557585][T10120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1772'. [ 608.356015][ T9666] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 608.545993][ T9666] usb 3-1: Using ep0 maxpacket: 8 [ 608.584361][ T9666] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.594996][ T9666] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 608.606989][ T9666] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 608.618253][ T9666] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 608.629940][ T9666] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 608.641261][ T9666] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.800876][ T9666] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 608.811002][ T9666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.820108][ T9666] usb 3-1: Product: syz [ 608.824666][ T9666] usb 3-1: Manufacturer: syz [ 608.829502][ T9666] usb 3-1: SerialNumber: syz [ 608.911817][ T9666] usb 3-1: config 0 descriptor?? [ 608.920887][T10128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 609.208374][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.217977][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.394837][T10145] netlink: 'syz.1.1784': attribute type 1 has an invalid length. [ 609.445797][T10146] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1785'. [ 609.514464][T10145] bond3: entered promiscuous mode [ 609.521660][T10145] 8021q: adding VLAN 0 to HW filter on device bond3 [ 610.585765][ T9666] rc_core: IR keymap rc-snapstream-firefly not found [ 610.592814][ T9666] Registered IR keymap rc-empty [ 610.600288][ T9666] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 610.612082][ T9666] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 610.870111][ T9666] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 611.048068][ C0] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 611.056079][ T9666] usb 3-1: USB disconnect, device number 3 [ 611.880992][T10181] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1798'. [ 612.089486][T10185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1800'. [ 613.916353][T10212] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1812'. [ 615.395962][T10233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1822'. [ 616.006062][T10244] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1826'. [ 616.601274][T10252] ALSA: seq fatal error: cannot create timer (-16) [ 617.131135][T10260] netlink: 'syz.2.1834': attribute type 1 has an invalid length. [ 617.208328][T10264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1836'. [ 617.741075][T10273] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1840'. [ 619.515007][T10298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1850'. [ 619.748359][T10301] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1852'. [ 620.135439][T10305] netlink: 'syz.1.1854': attribute type 1 has an invalid length. [ 621.895199][T10333] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1865'. [ 622.238547][T10337] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1867'. [ 623.045588][T10346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1871'. [ 623.510660][T10356] macsec1: entered promiscuous mode [ 623.522208][T10356] bond0: entered promiscuous mode [ 623.529274][T10356] bond_slave_0: entered promiscuous mode [ 623.536151][T10356] bond_slave_1: entered promiscuous mode [ 623.542727][T10356] team0: entered promiscuous mode [ 623.548338][T10356] team_slave_0: entered promiscuous mode [ 623.555139][T10356] team_slave_1: entered promiscuous mode [ 623.596706][T10356] bond0: left promiscuous mode [ 623.601863][T10356] bond_slave_0: left promiscuous mode [ 623.608551][T10356] bond_slave_1: left promiscuous mode [ 623.615956][T10356] team0: left promiscuous mode [ 623.627400][T10356] team_slave_0: left promiscuous mode [ 623.635876][T10356] team_slave_1: left promiscuous mode [ 623.908416][T10360] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1878'. [ 624.376868][T10368] netlink: 424 bytes leftover after parsing attributes in process `syz.0.1882'. [ 624.395780][T10372] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1883'. [ 624.606124][T10375] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 625.215113][T10384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1887'. [ 625.898280][T10395] macsec1: entered promiscuous mode [ 625.903945][T10395] bond0: entered promiscuous mode [ 625.909223][T10395] bond_slave_0: entered promiscuous mode [ 625.916114][T10395] bond_slave_1: entered promiscuous mode [ 625.922628][T10395] team0: entered promiscuous mode [ 625.928003][T10395] team_slave_0: entered promiscuous mode [ 625.934788][T10395] team_slave_1: entered promiscuous mode [ 625.993448][T10395] bond0: left promiscuous mode [ 625.998857][T10395] bond_slave_0: left promiscuous mode [ 626.005397][T10395] bond_slave_1: left promiscuous mode [ 626.011673][T10395] team0: left promiscuous mode [ 626.016795][T10395] team_slave_0: left promiscuous mode [ 626.023146][T10395] team_slave_1: left promiscuous mode [ 626.663430][T10406] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1897'. [ 627.255875][T10413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1901'. [ 627.278425][T10413] bond0: entered promiscuous mode [ 627.283908][T10413] bond_slave_0: entered promiscuous mode [ 627.290520][T10413] bond_slave_1: entered promiscuous mode [ 627.297421][T10413] team0: entered promiscuous mode [ 627.302681][T10413] team_slave_0: entered promiscuous mode [ 627.317908][T10413] team_slave_1: entered promiscuous mode [ 627.327958][T10413] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 627.339814][T10413] bond0: left promiscuous mode [ 627.344993][T10413] bond_slave_0: left promiscuous mode [ 627.351317][T10413] bond_slave_1: left promiscuous mode [ 627.357728][T10413] team0: left promiscuous mode [ 627.362715][T10413] team_slave_0: left promiscuous mode [ 627.369180][T10413] team_slave_1: left promiscuous mode [ 628.030609][T10424] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1905'. [ 628.394384][ T9666] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 628.428683][T10429] macsec1: entered promiscuous mode [ 628.438747][T10429] bond0: entered promiscuous mode [ 628.445488][T10429] bond_slave_0: entered promiscuous mode [ 628.452077][T10429] bond_slave_1: entered promiscuous mode [ 628.459102][T10429] team0: entered promiscuous mode [ 628.464659][T10429] team_slave_0: entered promiscuous mode [ 628.471271][T10429] team_slave_1: entered promiscuous mode [ 628.575993][T10429] bond0: left promiscuous mode [ 628.581084][T10429] bond_slave_0: left promiscuous mode [ 628.587731][T10429] bond_slave_1: left promiscuous mode [ 628.594327][T10429] team0: left promiscuous mode [ 628.599311][T10429] team_slave_0: left promiscuous mode [ 628.605945][T10429] team_slave_1: left promiscuous mode [ 628.779418][ T9666] usb 1-1: config 0 has no interfaces? [ 628.806561][ T9666] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 628.816225][ T9666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.824762][ T9666] usb 1-1: Product: syz [ 628.829170][ T9666] usb 1-1: Manufacturer: syz [ 628.834311][ T9666] usb 1-1: SerialNumber: syz [ 628.922784][ T9666] usb 1-1: config 0 descriptor?? [ 629.499430][T10439] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1912'. [ 630.754735][T10449] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1917'. [ 630.773091][T10449] bond0: entered promiscuous mode [ 630.778610][T10449] bond_slave_0: entered promiscuous mode [ 630.785059][T10449] bond_slave_1: entered promiscuous mode [ 630.797918][T10449] team0: entered promiscuous mode [ 630.803107][T10449] team_slave_0: entered promiscuous mode [ 630.809636][T10449] team_slave_1: entered promiscuous mode [ 630.818442][T10449] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 630.828850][T10449] bond0: left promiscuous mode [ 630.834257][T10449] bond_slave_0: left promiscuous mode [ 630.840571][T10449] bond_slave_1: left promiscuous mode [ 630.846754][T10449] team0: left promiscuous mode [ 630.851722][T10449] team_slave_0: left promiscuous mode [ 630.858005][T10449] team_slave_1: left promiscuous mode [ 631.397801][T10451] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1919'. [ 632.404296][ T9666] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 632.594646][ T9666] usb 5-1: Using ep0 maxpacket: 16 [ 632.693061][ T9666] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 632.705691][ T9666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 632.716435][T10465] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1925'. [ 632.831966][ T9666] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 632.845103][ T9666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.855306][ T9666] usb 5-1: Product: syz [ 632.859618][ T9666] usb 5-1: Manufacturer: syz [ 632.864582][ T9666] usb 5-1: SerialNumber: syz [ 632.925876][ T9666] usb 5-1: config 0 descriptor?? [ 632.960427][ T9666] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 632.970225][ T9666] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 633.570997][ T9666] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 633.592505][ T9666] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 634.314870][ T9666] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 634.364612][ T9666] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 634.412565][ T9666] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 634.630249][ T9666] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 634.657506][ T9666] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 634.690297][ T9666] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 634.734851][ T9666] usb 5-1: USB disconnect, device number 2 [ 634.930639][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1930'. [ 634.953122][T10476] bond0: entered promiscuous mode [ 634.958555][T10476] bond_slave_0: entered promiscuous mode [ 634.971464][T10476] bond_slave_1: entered promiscuous mode [ 634.978515][T10476] team0: entered promiscuous mode [ 634.990207][T10476] team_slave_0: entered promiscuous mode [ 634.998562][T10476] team_slave_1: entered promiscuous mode [ 635.009138][T10476] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 635.027280][T10476] bond0: left promiscuous mode [ 635.032319][T10476] bond_slave_0: left promiscuous mode [ 635.038893][T10476] bond_slave_1: left promiscuous mode [ 635.045324][T10476] team0: left promiscuous mode [ 635.050341][T10476] team_slave_0: left promiscuous mode [ 635.056699][T10476] team_slave_1: left promiscuous mode [ 635.598046][T10481] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1933'. [ 636.746400][T10494] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 636.873116][T10494] netlink: 'syz.4.1938': attribute type 4 has an invalid length. [ 636.881424][T10494] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1938'. [ 637.599195][ T5840] usb 1-1: USB disconnect, device number 2 [ 638.268127][ T9666] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 638.435338][ T9666] usb 1-1: Using ep0 maxpacket: 16 [ 638.484898][ T9666] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 638.497048][ T9666] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 638.515265][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1945'. [ 638.537867][T10510] bond0: entered promiscuous mode [ 638.543175][T10510] bond_slave_0: entered promiscuous mode [ 638.550087][T10510] bond_slave_1: entered promiscuous mode [ 638.557056][T10510] team0: entered promiscuous mode [ 638.562335][T10510] team_slave_0: entered promiscuous mode [ 638.576970][T10510] team_slave_1: entered promiscuous mode [ 638.587575][T10510] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 638.599353][T10510] bond0: left promiscuous mode [ 638.604546][T10510] bond_slave_0: left promiscuous mode [ 638.610886][T10510] bond_slave_1: left promiscuous mode [ 638.617537][T10510] team0: left promiscuous mode [ 638.622538][T10510] team_slave_0: left promiscuous mode [ 638.629141][T10510] team_slave_1: left promiscuous mode [ 638.678013][ T9666] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 638.687580][ T9666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.696992][ T9666] usb 1-1: Product: syz [ 638.701451][ T9666] usb 1-1: Manufacturer: syz [ 638.706501][ T9666] usb 1-1: SerialNumber: syz [ 638.736862][ T9666] usb 1-1: config 0 descriptor?? [ 638.763048][ T9666] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 638.773340][ T9666] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 639.071982][ T5845] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 639.272341][ T5845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.283219][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 639.383275][ T9666] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 639.402613][ T5845] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 639.412337][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.422041][ T5845] usb 3-1: Product: syz [ 639.427396][ T5845] usb 3-1: Manufacturer: syz [ 639.432312][ T5845] usb 3-1: SerialNumber: syz [ 639.444405][ T9666] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 639.538213][ T5845] usb 3-1: config 0 descriptor?? [ 639.579478][ T5845] usb-storage 3-1:0.0: USB Mass Storage device detected [ 639.638242][ T5845] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 639.653224][T10527] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 639.754491][T10527] netlink: 'syz.1.1952': attribute type 4 has an invalid length. [ 639.762776][T10527] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1952'. [ 639.770140][ T5845] usb 3-1: USB disconnect, device number 4 [ 640.085398][ T9666] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 640.100588][T10531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1953'. [ 640.115496][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1953'. [ 640.134527][ T9666] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 640.156529][ T9666] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 640.369531][ T9666] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 640.377949][ T9666] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 640.388515][ T9666] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 640.420120][ T9666] usb 1-1: USB disconnect, device number 3 [ 641.763467][T10549] macsec1: entered promiscuous mode [ 641.769150][T10549] bond0: entered promiscuous mode [ 641.774886][T10549] bond_slave_0: entered promiscuous mode [ 641.781430][T10549] bond_slave_1: entered promiscuous mode [ 641.788238][T10549] team0: entered promiscuous mode [ 641.793490][T10549] team_slave_0: entered promiscuous mode [ 641.802531][T10549] team_slave_1: entered promiscuous mode [ 641.877280][T10549] bond0: left promiscuous mode [ 641.882404][T10549] bond_slave_0: left promiscuous mode [ 641.889031][T10549] bond_slave_1: left promiscuous mode [ 641.895716][T10549] team0: left promiscuous mode [ 641.900715][T10549] team_slave_0: left promiscuous mode [ 641.907342][T10549] team_slave_1: left promiscuous mode [ 641.963209][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1962'. [ 642.101377][T10553] bond4: entered allmulticast mode [ 642.238025][T10553] ip6erspan0: entered allmulticast mode [ 642.245786][T10553] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 642.611652][T10560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1965'. [ 642.621910][T10560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1965'. [ 642.866483][T10563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1967'. [ 642.881578][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1967'. [ 642.905603][T10564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1966'. [ 643.608777][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1972'. [ 643.618772][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1972'. [ 643.764422][ T9666] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 643.926377][ T9666] usb 2-1: Using ep0 maxpacket: 16 [ 643.945317][ T9666] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 643.958380][ T9666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 643.981751][T10582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1975'. [ 643.991151][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1975'. [ 644.038582][ T9666] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 644.050521][ T9666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.059061][ T9666] usb 2-1: Product: syz [ 644.063456][ T9666] usb 2-1: Manufacturer: syz [ 644.068750][ T9666] usb 2-1: SerialNumber: syz [ 644.164513][ T9666] usb 2-1: config 0 descriptor?? [ 644.182172][ T9666] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 644.192013][ T9666] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 644.524045][T10586] macsec1: entered promiscuous mode [ 644.529994][T10586] bond0: entered promiscuous mode [ 644.535713][T10586] bond_slave_0: entered promiscuous mode [ 644.542810][T10586] bond_slave_1: entered promiscuous mode [ 644.550226][T10586] team0: entered promiscuous mode [ 644.555726][T10586] team_slave_0: entered promiscuous mode [ 644.562831][T10586] team_slave_1: entered promiscuous mode [ 644.634708][T10586] bond0: left promiscuous mode [ 644.639958][T10586] bond_slave_0: left promiscuous mode [ 644.646448][T10586] bond_slave_1: left promiscuous mode [ 644.652711][T10586] team0: left promiscuous mode [ 644.658096][T10586] team_slave_0: left promiscuous mode [ 644.664680][T10586] team_slave_1: left promiscuous mode [ 644.681192][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1979'. [ 644.797300][ T9666] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 644.807790][ T9666] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 644.812208][T10590] bond2: entered allmulticast mode [ 645.076104][T10594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1980'. [ 645.085660][T10594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1980'. [ 645.437842][ T9666] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 645.448276][ T9666] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 645.474541][ T9666] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 645.686602][ T9666] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 645.695191][ T9666] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 645.713043][ T9666] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 645.763376][ T9666] usb 2-1: USB disconnect, device number 4 [ 645.791110][T10603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1984'. [ 645.800877][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1984'. [ 646.190438][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1986'. [ 646.820951][T10619] netlink: 'syz.2.1989': attribute type 1 has an invalid length. [ 646.985806][T10622] rdma_rxe: rxe_newlink: failed to add lo [ 647.086290][T10621] macsec1: entered promiscuous mode [ 647.091780][T10621] bond0: entered promiscuous mode [ 647.097436][T10621] bond_slave_0: entered promiscuous mode [ 647.104322][T10621] bond_slave_1: entered promiscuous mode [ 647.110798][T10621] team0: entered promiscuous mode [ 647.116411][T10621] team_slave_0: entered promiscuous mode [ 647.122966][T10621] team_slave_1: entered promiscuous mode [ 647.180977][T10621] bond0: left promiscuous mode [ 647.190433][T10621] bond_slave_0: left promiscuous mode [ 647.197035][T10621] bond_slave_1: left promiscuous mode [ 647.203342][T10621] team0: left promiscuous mode [ 647.208598][T10621] team_slave_0: left promiscuous mode [ 647.215384][T10621] team_slave_1: left promiscuous mode [ 648.655494][T10643] __nla_validate_parse: 5 callbacks suppressed [ 648.655565][T10643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2002'. [ 648.671609][T10643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2002'. [ 648.775601][ T9666] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 648.954292][ T9666] usb 4-1: Using ep0 maxpacket: 16 [ 648.984290][ T5840] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 649.003197][ T9666] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 649.020482][ T9666] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 649.101407][ T9666] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 649.111097][ T9666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.125196][ T9666] usb 4-1: Product: syz [ 649.129607][ T9666] usb 4-1: Manufacturer: syz [ 649.134957][ T9666] usb 4-1: SerialNumber: syz [ 649.145369][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 649.162459][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 649.174820][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 649.246504][ T5840] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 649.256215][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.258396][ T9666] usb 4-1: config 0 descriptor?? [ 649.264706][ T5840] usb 3-1: Product: syz [ 649.279674][ T5840] usb 3-1: Manufacturer: syz [ 649.284621][ T5840] usb 3-1: SerialNumber: syz [ 649.305028][ T5840] usb 3-1: config 0 descriptor?? [ 649.335270][ T9666] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 649.344419][ T5840] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 649.344964][ T9666] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 649.354383][ T5840] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 649.502019][T10651] macsec1: entered promiscuous mode [ 649.507917][T10651] bond0: entered promiscuous mode [ 649.513375][T10651] bond_slave_0: entered promiscuous mode [ 649.520748][T10651] bond_slave_1: entered promiscuous mode [ 649.535364][T10651] team0: entered promiscuous mode [ 649.540819][T10651] team_slave_0: entered promiscuous mode [ 649.548092][T10651] team_slave_1: entered promiscuous mode [ 649.602710][T10651] bond0: left promiscuous mode [ 649.608280][T10651] bond_slave_0: left promiscuous mode [ 649.615754][T10651] bond_slave_1: left promiscuous mode [ 649.622642][T10651] team0: left promiscuous mode [ 649.633899][T10651] team_slave_0: left promiscuous mode [ 649.641728][T10651] team_slave_1: left promiscuous mode [ 649.789839][T10655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2008'. [ 649.800933][T10655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2008'. [ 650.029501][ T9666] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 650.044103][ T9666] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 650.062937][ T5840] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 650.073995][ T5840] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 650.343133][T10657] netlink: 'syz.0.2009': attribute type 1 has an invalid length. [ 650.511669][T10662] rdma_rxe: rxe_newlink: failed to add lo [ 650.667620][ T9666] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 650.685026][ T9666] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 650.694199][ T5840] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 650.710607][ T9666] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 650.722636][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 650.761320][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 650.930008][ T9666] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 650.964944][ T9666] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 650.981690][ T9666] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 651.025633][ T9666] usb 4-1: USB disconnect, device number 3 [ 651.106707][T10664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2012'. [ 651.116727][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2012'. [ 651.185139][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 651.205176][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 651.213423][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 651.238943][ T5840] usb 3-1: USB disconnect, device number 5 [ 651.942222][T10675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2016'. [ 651.955698][T10675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2016'. [ 652.482290][T10681] bridge0: entered allmulticast mode [ 652.738231][T10683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 652.748261][T10683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 652.859604][T10689] netlink: 'syz.0.2024': attribute type 1 has an invalid length. [ 653.060383][T10692] rdma_rxe: rxe_newlink: failed to add lo [ 653.638338][ T9666] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 653.839570][ T9666] usb 4-1: Using ep0 maxpacket: 16 [ 653.874595][ T9666] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 653.886647][ T9666] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 653.986576][ T9666] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 653.996350][ T9666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.005058][ T9666] usb 4-1: Product: syz [ 654.009460][ T9666] usb 4-1: Manufacturer: syz [ 654.014499][ T9666] usb 4-1: SerialNumber: syz [ 654.090767][ T9666] usb 4-1: config 0 descriptor?? [ 654.127158][ T9666] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 654.145894][ T9666] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 654.371838][T10708] __nla_validate_parse: 2 callbacks suppressed [ 654.371916][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2031'. [ 654.388344][T10708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2031'. [ 654.783464][ T9666] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 654.797795][ T9666] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 655.094628][ T5845] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 655.254921][ T5845] usb 1-1: Using ep0 maxpacket: 16 [ 655.282982][ T5845] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 655.295571][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 655.326300][T10721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2039'. [ 655.360665][ T5845] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 655.374755][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.383039][ T5845] usb 1-1: Product: syz [ 655.389353][ T5845] usb 1-1: Manufacturer: syz [ 655.394609][ T5845] usb 1-1: SerialNumber: syz [ 655.432770][ T9666] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 655.451834][ T9666] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 655.463107][ T5845] usb 1-1: config 0 descriptor?? [ 655.484364][ T9666] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 655.511457][ T5845] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 655.521307][ T5845] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 655.706719][ T9666] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 655.715635][ T9666] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 655.728916][ T9666] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 655.762068][ T9666] usb 4-1: USB disconnect, device number 4 [ 656.157771][ T5845] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 656.168610][ T5845] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 656.826428][ T5845] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 656.835801][T10731] netlink: 'syz.1.2043': attribute type 1 has an invalid length. [ 656.847436][ T5845] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 656.874845][ T5845] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 656.892747][ T5845] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 656.944188][ T5845] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 657.028632][T10734] syz0: rxe_newlink: already configured on lo [ 657.176558][ T5845] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 657.229564][ T5845] usb 1-1: USB disconnect, device number 4 [ 657.770184][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2047'. [ 657.780699][T10740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2047'. [ 658.185239][T10746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2050'. [ 658.967475][ T5840] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 659.164176][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 659.180057][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 659.192317][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 659.201292][T10762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2057'. [ 659.266542][ T5840] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 659.279073][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.287570][ T5840] usb 5-1: Product: syz [ 659.292064][ T5840] usb 5-1: Manufacturer: syz [ 659.296974][ T5840] usb 5-1: SerialNumber: syz [ 659.375490][ T5840] usb 5-1: config 0 descriptor?? [ 659.412131][ T5840] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 659.422031][ T5840] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 659.507868][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.514825][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.863946][T10771] rdma_rxe: rxe_newlink: failed to add lo [ 660.084137][ T5840] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 660.106169][ T5840] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 660.730144][T10775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2062'. [ 660.739626][T10775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2062'. [ 660.774865][ T5840] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 660.786482][ T5840] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 660.811472][ T5840] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 661.023120][ T5840] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 661.038340][ T5840] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 661.061048][ T5840] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 661.141470][ T5840] usb 5-1: USB disconnect, device number 3 [ 661.365214][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 661.658077][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2065'. [ 662.083229][T10783] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2066'. [ 662.414329][ T5840] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 662.594602][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 662.619276][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 662.631421][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 662.691807][ T5840] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 662.701336][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.709690][ T5840] usb 5-1: Product: syz [ 662.714769][ T5840] usb 5-1: Manufacturer: syz [ 662.719585][ T5840] usb 5-1: SerialNumber: syz [ 662.729319][ T5840] usb 5-1: config 0 descriptor?? [ 662.751840][ T5840] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 662.761998][ T5840] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 663.123185][T10794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2071'. [ 663.394435][ T5840] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 663.431252][ T5840] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 664.022756][T10798] bond2 (unregistering): Released all slaves [ 664.100160][ T5840] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 664.144377][ T5840] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 664.184644][ T5840] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 664.219953][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'. [ 664.412690][ T5840] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 664.455027][ T5840] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 664.533012][ T5840] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 664.571372][ T5840] usb 5-1: USB disconnect, device number 4 [ 665.211732][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'. [ 665.692797][T10817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2079'. [ 665.834368][ T5840] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 666.054238][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 666.088238][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 666.100252][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 666.228977][ T5840] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 666.238617][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.247055][ T5840] usb 2-1: Product: syz [ 666.251355][ T5840] usb 2-1: Manufacturer: syz [ 666.256224][ T5840] usb 2-1: SerialNumber: syz [ 666.346458][ T5840] usb 2-1: config 0 descriptor?? [ 666.418599][ T5840] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 666.434654][ T5840] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 666.999607][ T5840] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 667.064211][ T5840] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 667.259803][T10826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2083'. [ 667.497335][ T5840] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 667.504856][ T5840] em28xx 2-1:0.0: No AC97 audio processor [ 668.080882][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2086'. [ 668.645718][ T9666] usb 2-1: USB disconnect, device number 5 [ 668.653050][ T9666] em28xx 2-1:0.0: Disconnecting em28xx [ 668.711081][ T9666] em28xx 2-1:0.0: Freeing device [ 669.137096][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 669.167645][T10848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2092'. [ 669.178060][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2091'. [ 669.254102][ T5840] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 669.434427][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 669.464514][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 669.476619][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 669.567572][ T5840] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 669.577034][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.585360][ T5840] usb 3-1: Product: syz [ 669.589645][ T5840] usb 3-1: Manufacturer: syz [ 669.594524][ T5840] usb 3-1: SerialNumber: syz [ 669.644962][ T5840] usb 3-1: config 0 descriptor?? [ 669.663421][ T5840] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 669.674788][ T5840] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 670.325183][ T5840] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 670.335974][ T5840] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 670.963979][ T5840] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 670.999568][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 671.039922][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 671.261695][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 671.284510][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 671.306050][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2099'. [ 671.324756][ T5840] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 671.391688][ T5840] usb 3-1: USB disconnect, device number 6 [ 671.814311][ T9648] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 672.014267][ T9648] usb 1-1: Using ep0 maxpacket: 16 [ 672.047111][ T9648] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 672.064947][ T9648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 672.197090][ T9648] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 672.206796][ T9648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.215405][ T9648] usb 1-1: Product: syz [ 672.219775][ T9648] usb 1-1: Manufacturer: syz [ 672.224861][ T9648] usb 1-1: SerialNumber: syz [ 672.255547][ T9648] usb 1-1: config 0 descriptor?? [ 672.284142][ T9648] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 672.293856][ T9648] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 672.692633][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2103'. [ 672.791912][T10876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2104'. [ 672.906435][ T9648] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 672.922234][ T9648] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 673.352880][ T9648] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 673.360400][ T9648] em28xx 1-1:0.0: No AC97 audio processor [ 673.944157][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2107'. [ 674.879432][ T9648] usb 1-1: USB disconnect, device number 5 [ 674.887192][ T9648] em28xx 1-1:0.0: Disconnecting em28xx [ 674.975138][ T9648] em28xx 1-1:0.0: Freeing device [ 675.542054][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2112'. [ 675.884791][ T5845] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 676.104159][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 676.133024][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.144511][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.158626][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 676.173455][ T5845] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 676.182918][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.288804][ T9648] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 676.346191][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2115'. [ 676.365813][T10909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2116'. [ 676.396011][ T5845] usb 3-1: config 0 descriptor?? [ 676.474305][ T9648] usb 1-1: Using ep0 maxpacket: 16 [ 676.512002][ T9648] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 676.524400][ T9648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 676.587283][ T9648] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 676.597105][T10911] ===================================================== [ 676.597407][T10911] BUG: KMSAN: uninit-value in full_proxy_poll+0xdf/0x3b0 [ 676.604400][ T9648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.604513][ T9648] usb 1-1: Product: syz [ 676.604600][ T9648] usb 1-1: Manufacturer: syz [ 676.611704][T10911] full_proxy_poll+0xdf/0x3b0 [ 676.619946][ T9648] usb 1-1: SerialNumber: syz [ 676.631177][ T9648] usb 1-1: config 0 descriptor?? [ 676.634584][T10911] do_select+0x167b/0x2d80 [ 676.649548][T10911] compat_core_sys_select+0x8bd/0xe20 [ 676.655434][T10911] do_compat_pselect+0x50e/0x5c0 [ 676.656026][ T9648] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 676.660654][T10911] __ia32_compat_sys_pselect6_time32+0x2dd/0x410 [ 676.676532][ T9648] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 676.685430][T10911] ia32_sys_call+0x1b34/0x4180 [ 676.690559][T10911] __do_fast_syscall_32+0xb0/0x110 [ 676.696187][T10911] do_fast_syscall_32+0x38/0x80 [ 676.701393][T10911] do_SYSENTER_32+0x1f/0x30 [ 676.706962][T10911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 676.713847][T10911] [ 676.716290][T10911] Uninit was stored to memory at: [ 676.721563][T10911] __debugfs_file_get+0xe59/0xef0 [ 676.727324][T10911] full_proxy_open_regular+0x67/0xa00 [ 676.732917][T10911] do_dentry_open+0x1bdd/0x26b0 [ 676.738267][T10911] vfs_open+0x53/0x5b0 [ 676.742622][T10911] path_openat+0x56a1/0x6250 [ 676.747630][T10911] do_filp_open+0x268/0x600 [ 676.752324][T10911] do_sys_openat2+0x1bf/0x2f0 [ 676.757452][T10911] __ia32_compat_sys_openat+0x298/0x300 [ 676.768125][T10911] ia32_sys_call+0x2fb4/0x4180 [ 676.773103][T10911] __do_fast_syscall_32+0xb0/0x110 [ 676.780138][T10911] do_fast_syscall_32+0x38/0x80 [ 676.785392][T10911] do_SYSENTER_32+0x1f/0x30 [ 676.790123][T10911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 676.796999][T10911] [ 676.799430][T10911] Uninit was stored to memory at: [ 676.804873][T10911] __debugfs_file_get+0xdff/0xef0 [ 676.810112][T10911] full_proxy_open_regular+0x67/0xa00 [ 676.815928][T10911] do_dentry_open+0x1bdd/0x26b0 [ 676.820986][T10911] vfs_open+0x53/0x5b0 [ 676.825390][T10911] path_openat+0x56a1/0x6250 [ 676.830173][T10911] do_filp_open+0x268/0x600 [ 676.835070][T10911] do_sys_openat2+0x1bf/0x2f0 [ 676.839967][T10911] __ia32_compat_sys_openat+0x298/0x300 [ 676.846097][T10911] ia32_sys_call+0x2fb4/0x4180 [ 676.851177][T10911] __do_fast_syscall_32+0xb0/0x110 [ 676.857186][T10911] do_fast_syscall_32+0x38/0x80 [ 676.862282][T10911] do_SYSENTER_32+0x1f/0x30 [ 676.871541][T10911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 676.879786][T10911] [ 676.882227][T10911] Uninit was created at: [ 676.887070][T10911] __kmalloc_cache_noprof+0x8e3/0xdf0 [ 676.892709][T10911] __debugfs_file_get+0x31d/0xef0 [ 676.898153][T10911] full_proxy_open_regular+0x67/0xa00 [ 676.903877][T10911] do_dentry_open+0x1bdd/0x26b0 [ 676.908988][T10911] vfs_open+0x53/0x5b0 [ 676.913278][T10911] path_openat+0x56a1/0x6250 [ 676.918371][T10911] do_filp_open+0x268/0x600 [ 676.923067][T10911] do_sys_openat2+0x1bf/0x2f0 [ 676.928139][T10911] __ia32_compat_sys_openat+0x298/0x300 [ 676.934067][T10911] ia32_sys_call+0x2fb4/0x4180 [ 676.939089][T10911] __do_fast_syscall_32+0xb0/0x110 [ 676.945208][T10911] do_fast_syscall_32+0x38/0x80 [ 676.950320][T10911] do_SYSENTER_32+0x1f/0x30 [ 676.955241][T10911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 676.961852][T10911] [ 676.964465][T10911] CPU: 0 UID: 0 PID: 10911 Comm: syz.4.2117 Not tainted 6.13.0-syzkaller-09585-gb4b0881156fb #0 [ 676.980196][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 676.991972][T10911] ===================================================== [ 676.999245][T10911] Disabling lock debugging due to kernel taint [ 677.005842][T10911] Kernel panic - not syncing: kmsan.panic set ... [ 677.012421][T10911] CPU: 0 UID: 0 PID: 10911 Comm: syz.4.2117 Tainted: G B 6.13.0-syzkaller-09585-gb4b0881156fb #0 [ 677.024554][T10911] Tainted: [B]=BAD_PAGE [ 677.028842][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 677.039086][T10911] Call Trace: [ 677.042499][T10911] [ 677.045560][T10911] dump_stack_lvl+0x216/0x2d0 [ 677.050447][T10911] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 677.056499][T10911] dump_stack+0x1e/0x24 [ 677.060845][T10911] panic+0x4e2/0xcf0 [ 677.065000][T10911] ? kmsan_get_metadata+0x61/0x1c0 [ 677.070357][T10911] kmsan_report+0x2c7/0x2d0 [ 677.075098][T10911] ? stack_depot_save_flags+0x2c/0x750 [ 677.080795][T10911] ? kmsan_get_metadata+0x13e/0x1c0 [ 677.086227][T10911] ? __msan_warning+0x95/0x120 [ 677.091190][T10911] ? full_proxy_poll+0xdf/0x3b0 [ 677.096272][T10911] ? do_select+0x167b/0x2d80 [ 677.101078][T10911] ? compat_core_sys_select+0x8bd/0xe20 [ 677.106916][T10911] ? do_compat_pselect+0x50e/0x5c0 [ 677.112271][T10911] ? __ia32_compat_sys_pselect6_time32+0x2dd/0x410 [ 677.119002][T10911] ? ia32_sys_call+0x1b34/0x4180 [ 677.124191][T10911] ? __do_fast_syscall_32+0xb0/0x110 [ 677.129757][T10911] ? do_fast_syscall_32+0x38/0x80 [ 677.135086][T10911] ? do_SYSENTER_32+0x1f/0x30 [ 677.140019][T10911] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 677.146813][T10911] ? kmsan_get_metadata+0x13e/0x1c0 [ 677.152258][T10911] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 677.158302][T10911] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 677.164354][T10911] ? add_wait_queue+0x2b6/0x3e0 [ 677.169452][T10911] ? kmsan_get_metadata+0x13e/0x1c0 [ 677.174911][T10911] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 677.180972][T10911] ? __rcu_read_unlock+0x7b/0xe0 [ 677.186164][T10911] ? kmsan_get_metadata+0x13e/0x1c0 [ 677.191590][T10911] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 677.197623][T10911] __msan_warning+0x95/0x120 [ 677.202439][T10911] full_proxy_poll+0xdf/0x3b0 [ 677.207335][T10911] ? __pfx_full_proxy_poll+0x10/0x10 [ 677.212817][T10911] do_select+0x167b/0x2d80 [ 677.217444][T10911] ? __pfx___pollwait+0x10/0x10 [ 677.222485][T10911] ? __pfx_pollwake+0x10/0x10 [ 677.227371][T10911] ? __pfx_pollwake+0x10/0x10 [ 677.232254][T10911] ? __pfx_pollwake+0x10/0x10 [ 677.237120][T10911] ? sched_clock_cpu+0x55/0x870 [ 677.242142][T10911] ? kmsan_get_metadata+0x13e/0x1c0 [ 677.247546][T10911] ? kmsan_get_metadata+0x13e/0x1c0 [ 677.252957][T10911] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 677.258994][T10911] ? kmsan_get_metadata+0x13e/0x1c0 [ 677.264391][T10911] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 677.270398][T10911] ? kmsan_get_metadata+0x13e/0x1c0 [ 677.275794][T10911] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 677.281784][T10911] ? kmsan_get_metadata+0x13e/0x1c0 [ 677.287307][T10911] compat_core_sys_select+0x8bd/0xe20 [ 677.292970][T10911] ? kmsan_get_metadata+0x13e/0x1c0 [ 677.298374][T10911] ? set_compat_user_sigmask+0x3d/0x320 [ 677.304184][T10911] ? do_compat_pselect+0x48a/0x5c0 [ 677.309501][T10911] ? set_compat_user_sigmask+0xcc/0x320 [ 677.315275][T10911] ? do_compat_pselect+0x6d/0x5c0 [ 677.320476][T10911] ? __ia32_compat_sys_pselect6_time32+0x2dd/0x410 [ 677.327193][T10911] do_compat_pselect+0x50e/0x5c0 [ 677.332358][T10911] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 677.338374][T10911] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 677.344381][T10911] __ia32_compat_sys_pselect6_time32+0x2dd/0x410 [ 677.350933][T10911] ? kmsan_get_metadata+0x13e/0x1c0 [ 677.356342][T10911] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 677.362950][T10911] ia32_sys_call+0x1b34/0x4180 [ 677.367963][T10911] __do_fast_syscall_32+0xb0/0x110 [ 677.373330][T10911] ? switch_fpu_return+0x17/0x20 [ 677.378518][T10911] do_fast_syscall_32+0x38/0x80 [ 677.383597][T10911] do_SYSENTER_32+0x1f/0x30 [ 677.388342][T10911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 677.394938][T10911] RIP: 0023:0xf739d579 [ 677.399173][T10911] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 677.418988][T10911] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000134 [ 677.427620][T10911] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 0000000020000000 [ 677.435752][T10911] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000000 [ 677.443862][T10911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 677.451997][T10911] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 677.460114][T10911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 677.468228][T10911] [ 677.471810][T10911] Kernel Offset: disabled [ 677.476213][T10911] Rebooting in 86400 seconds..