last executing test programs: 5.123920743s ago: executing program 0 (id=4453): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 5.007274805s ago: executing program 0 (id=4455): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4.936461914s ago: executing program 0 (id=4456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xae6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200), 0x0, 0x0) 4.853951166s ago: executing program 0 (id=4458): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa10}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x34}}, 0x0) 4.824429691s ago: executing program 0 (id=4461): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 2.866632085s ago: executing program 2 (id=4491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000005500e50128bd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010103e9000000000000000000000000000000000086dd"], 0x38}}, 0x0) 2.86083823s ago: executing program 2 (id=4492): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x7fffffff}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.810675144s ago: executing program 2 (id=4493): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0x6, 0x4) recvmmsg(r0, 0x0, 0x0, 0x10162, 0x0) 2.723336716s ago: executing program 2 (id=4494): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4000000) 2.723089571s ago: executing program 2 (id=4495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) 2.67856847s ago: executing program 2 (id=4496): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000002c0)={0x0, 0x5, 0x10, "da0111775f5273073d858bbf4b9ec834"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 1.744703148s ago: executing program 3 (id=4504): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000580)="ee", 0x1, 0x40004810, 0x0, 0xfffffffffffffe59) sendto$inet6(r0, &(0x7f0000000180)='|', 0x1, 0x4010, 0x0, 0x0) 1.743975349s ago: executing program 0 (id=4505): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000140)=[{0xff, 0x0, 0x1, &(0x7f0000000340)="81"}], 0x1}) 1.672807691s ago: executing program 3 (id=4507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) pipe(&(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010428bd7000000100000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00', @ANYRES32=r5, @ANYBLOB="e58e148ec78d5f9f669bd018def922626752a495778229239cf99451a77227486aea9e84d594415596ec14b788578b85b24fe4d82bb1eb34fd85e1f627512b0f5ae2d9f4566e539f6686e81d584b77dde04ee91ce83c363dc3def266c70ae077cd70d81984fab3b9a57cc908b3c0877feedadd0282f7d722a672fb55f25aed"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000001c0)={r3, &(0x7f0000000040)='\x00', 0x108100, &(0x7f0000000080)={@align=0x8000, {0x84f, 0x4, 0x4, 0x9}}, 0x200, &(0x7f00000000c0)={@_ha_fsid}, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r7, r8}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d61804000000c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951a", 0xab}, {&(0x7f0000000400)}], 0x2}}], 0x1, 0x40) ioctl$sock_netdev_private(r6, 0x89fa, &(0x7f0000001300)="31a0998028b600e8927faec80946a42eab8e0683387de3a4c37f10067b0b0711214b4aeba1b23584cdc8f9fa8a4a3e654a8f83f752a654dde79ebeae226960491f3e17c9b09930d942b20776eff5701a66c73605a5e705f07983d223d669a3d310ab8b0ac9bff017795fbd398a69ad3cacc6591c8ec06fb5ecbc1445ee2e2780f33d770a03381cc6a7ddf82063c61c7c82cad63df0f5afb154426ac4e9639d6d4be976a538a21ac5a272") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x24000040) 1.108373443s ago: executing program 1 (id=4515): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 995.131305ms ago: executing program 1 (id=4516): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 882.379712ms ago: executing program 4 (id=4518): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 807.494872ms ago: executing program 1 (id=4519): r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000003980), 0x0, 0x0) 760.308948ms ago: executing program 3 (id=4520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x14, 0x30, 0xffff, 0x70bd29, 0x3, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x63a11855}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6000006, 0x8031, 0xffffffffffffffff, 0x6ff92000) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 703.064105ms ago: executing program 4 (id=4521): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000280)={0x0, 0x4, 0x1, [0x59, 0xfffffffffffffffd, 0x9, 0x8, 0xfffffffffffff991], [0xfffffffffffffff8, 0x81, 0xf7, 0x0, 0x2, 0x84fb, 0x76, 0x8000000000000001, 0x0, 0x8, 0x100000001, 0x5, 0x3, 0x3, 0x593, 0x8, 0x3, 0x1e, 0x6, 0x7, 0x10001, 0x83b4, 0x8000000000000000, 0xe, 0x1002, 0x2, 0x4d5afdaf, 0x3, 0x4, 0x7, 0xe03, 0x2b79, 0x7, 0x6, 0x3, 0x2, 0x0, 0x4, 0x6, 0xffffffffffff7fff, 0x912d, 0xe729, 0x80000001, 0x1, 0x401, 0x0, 0x3, 0x40, 0x0, 0x84d7, 0x100, 0x2, 0x3, 0x9, 0x200, 0x6, 0x1000, 0x3, 0x10, 0x4, 0x5, 0x1000, 0x1, 0x7, 0x4, 0xc6d, 0x2, 0x6fd0, 0x6, 0x6, 0x8, 0x8000, 0x9, 0xd87, 0x89, 0x0, 0x62, 0x9a39, 0x4, 0x200, 0x9, 0x4, 0x400, 0x7, 0xb, 0xf, 0x1d68, 0x3, 0x20e, 0xfd, 0x5e, 0x1, 0x40, 0x5, 0xff, 0x4, 0x7fff, 0x1000, 0xfffffffffffffffd, 0x5, 0xd, 0xfff, 0x100, 0xb, 0x7, 0x7, 0x1, 0x0, 0x9, 0xe, 0x1, 0x3000000000000000, 0xa, 0x10000, 0x0, 0x800, 0xff, 0x7ff, 0x9, 0x4, 0x9]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r0, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6e13, 0x0, 0xffffffffffffffff, 0x4, '\x00', r0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x3b}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, {0x9, 0x100000001, 0x6, 0x2, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x8000000000000, 0x2}, {0x7, 0x2000000, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4040888) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000e00)="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", 0x192}, {&(0x7f0000001380)="f7cc5458d3beffdedbba7aee78b42bee1b9caf6e8a1ef49e96bfc5c521e3fc0cd9899660789594960b998a1f5dfd14c45b6b345fe763dc18ab9db2b31f25aac1f4f3f87365384d9b4fc533e2eeb0751817738ee567f9d5823889239139bdd71ed0163efcb6d5ac07f38dee65550b6016aa7e16975aea960dc94504915bb1ba2ed074080f71f73d1a3af0d94e946507a40948ac66cf", 0x95}], 0x2}, 0x48000) r5 = socket(0x10, 0x803, 0x6) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 647.219743ms ago: executing program 1 (id=4522): socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x80802, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000081) 604.781111ms ago: executing program 1 (id=4523): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff0010000006000000080009000200000008000b"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x890) 551.423232ms ago: executing program 4 (id=4524): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006700), 0x0, 0x10162, 0x0) 508.085959ms ago: executing program 1 (id=4525): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x3ac) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0x4b2) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2], 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x0, 0x800) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000000)=""/126) syz_clone3(0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket(0x10, 0x803, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a6970000500040000000000090002"], 0x58}}, 0x4080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/219) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1410, 0x2, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4044050) msgget(0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xe0000009}) 374.61005ms ago: executing program 4 (id=4526): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB="0a001800030303030303000010005a"], 0x38}}, 0x0) 262.471493ms ago: executing program 3 (id=4527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 202.474824ms ago: executing program 4 (id=4528): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000340), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000580)="ee", 0x1, 0x40004810, 0x0, 0xfffffffffffffe59) sendto$inet6(r0, &(0x7f0000000180)='|', 0x1, 0x4010, 0x0, 0x0) 196.289924ms ago: executing program 3 (id=4529): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1.553152ms ago: executing program 4 (id=4530): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) 0s ago: executing program 3 (id=4531): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) pipe(&(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010428bd7000000100000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00', @ANYRES32=r5, @ANYBLOB="e58e148ec78d5f9f669bd018def922626752a495778229239cf99451a77227486aea9e84d594415596ec14b788578b85b24fe4d82bb1eb34fd85e1f627512b0f5ae2d9f4566e539f6686e81d584b77dde04ee91ce83c363dc3def266c70ae077cd70d81984fab3b9a57cc908b3c0877feedadd0282f7d722a672fb55f25aed"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000001c0)={r3, &(0x7f0000000040)='\x00', 0x108100, &(0x7f0000000080)={@align=0x8000, {0x84f, 0x4, 0x4, 0x9}}, 0x200, &(0x7f00000000c0)={@_ha_fsid}, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r7, r8}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d61804000000c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951a", 0xab}, {&(0x7f0000000400)}], 0x2}}], 0x1, 0x40) ioctl$sock_netdev_private(r6, 0x89fa, &(0x7f0000001300)="31a0998028b600e8927faec80946a42eab8e0683387de3a4c37f10067b0b0711214b4aeba1b23584cdc8f9fa8a4a3e654a8f83f752a654dde79ebeae226960491f3e17c9b09930d942b20776eff5701a66c73605a5e705f07983d223d669a3d310ab8b0ac9bff017795fbd398a69ad3cacc6591c8ec06fb5ecbc1445ee2e2780f33d770a03381cc6a7ddf82063c61c7c82cad63df0f5afb154426ac4e9639d6d4be976a538a21ac5a272") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x24000040) kernel console output (not intermixed with test programs): id = 0 [ 453.535352][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2399'. [ 454.074162][T12919] netlink: 'syz.0.2411': attribute type 29 has an invalid length. [ 454.085447][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'. [ 454.086879][T12919] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 454.219453][T12921] syzkaller0: entered promiscuous mode [ 454.225266][T12921] syzkaller0: entered allmulticast mode [ 454.233893][ T5756] usb 3-1: USB disconnect, device number 25 [ 454.779284][T12935] netlink: 'syz.4.2416': attribute type 1 has an invalid length. [ 454.779427][T12935] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2416'. [ 454.993612][T12941] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2419'. [ 455.391886][T12947] netlink: 'syz.3.2422': attribute type 29 has an invalid length. [ 455.391926][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2422'. [ 456.208319][ T988] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 456.368865][ T988] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 456.371794][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.371819][ T988] usb 2-1: Product: syz [ 456.371832][ T988] usb 2-1: Manufacturer: syz [ 456.371845][ T988] usb 2-1: SerialNumber: syz [ 456.379201][ T988] usb 2-1: config 0 descriptor?? [ 456.420200][T12947] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 456.600035][ T988] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 456.773270][T12965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 456.796205][T12965] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2430'. [ 456.800550][T12965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 456.823677][T12949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2423'. [ 457.012513][T12971] netlink: 'syz.2.2434': attribute type 1 has an invalid length. [ 457.012555][T12971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2434'. [ 457.245190][T12979] netlink: 'syz.2.2437': attribute type 11 has an invalid length. [ 457.331188][T12976] syzkaller0: entered promiscuous mode [ 457.331252][T12976] syzkaller0: entered allmulticast mode [ 457.901271][ T988] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 459.449988][T13008] tipc: New replicast peer: 255.255.255.255 [ 459.451822][T13008] tipc: Enabled bearer , priority 10 [ 459.508005][T13013] netlink: 'syz.2.2447': attribute type 1 has an invalid length. [ 459.516018][T13013] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2447'. [ 459.620909][T13008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2448'. [ 459.628892][T13020] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2451'. [ 459.754995][ T3107] usb 2-1: USB disconnect, device number 31 [ 460.160209][ T30] audit: type=1326 audit(1788651951.569:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.3.2461" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f390ec code=0x0 [ 460.316587][T13049] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2463'. [ 460.773210][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2468'. [ 460.776034][T13062] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2468'. [ 461.600339][ T30] audit: type=1326 audit(1788651953.009:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13094 comm="syz.4.2484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x0 [ 461.932905][T13111] tipc: Enabled bearer , priority 0 [ 461.940629][T13111] syzkaller0: entered promiscuous mode [ 461.947926][T13111] syzkaller0: entered allmulticast mode [ 461.960083][T13111] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 462.008286][T13111] tipc: Resetting bearer [ 462.017488][T13110] tipc: Resetting bearer [ 462.045344][T13110] tipc: Disabling bearer [ 462.069407][T13116] syzkaller0: entered promiscuous mode [ 462.069435][T13116] syzkaller0: entered allmulticast mode [ 462.300774][T13124] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2496'. [ 462.618112][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 462.627053][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2502'. [ 462.627108][T13136] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 462.676728][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2503'. [ 462.703830][T13140] netlink: 380 bytes leftover after parsing attributes in process `syz.4.2504'. [ 462.993209][ T30] audit: type=1326 audit(1788651954.399:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.4.2511" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x0 [ 463.197187][T13171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.216481][T13171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.527504][T13182] net_ratelimit: 498 callbacks suppressed [ 463.530077][T13182] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 463.548785][T13151] Set syz1 is full, maxelem 6117 reached [ 464.289328][T13212] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 464.485733][ T30] audit: type=1326 audit(1788651955.889:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.0.2541" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x0 [ 464.551606][T13224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 464.576418][T13224] __nla_validate_parse: 4 callbacks suppressed [ 464.576476][T13224] netlink: 408 bytes leftover after parsing attributes in process `syz.2.2543'. [ 464.577557][T13224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 464.974337][T13248] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 465.332019][T13259] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 465.332993][T13259] netlink: 408 bytes leftover after parsing attributes in process `syz.2.2558'. [ 465.333644][T13259] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 465.534143][T13265] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2561'. [ 465.543142][T13261] netlink: 10184 bytes leftover after parsing attributes in process `syz.2.2559'. [ 465.543162][T13261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2559'. [ 465.844405][T13275] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2565'. [ 465.978444][ T3107] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 466.016752][T13285] netlink: 424 bytes leftover after parsing attributes in process `syz.1.2569'. [ 466.118136][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'. [ 466.123411][T13289] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2573'. [ 466.139403][ T3107] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 466.151559][ T3107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.151599][ T3107] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 466.174713][ T3107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.174753][ T3107] usb 1-1: Product: syz [ 466.174785][ T3107] usb 1-1: Manufacturer: syz [ 466.174802][ T3107] usb 1-1: SerialNumber: syz [ 466.198009][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 466.209540][ T3107] usb 1-1: config 0 descriptor?? [ 466.240996][T13288] syzkaller0: entered promiscuous mode [ 466.246694][T13288] syzkaller0: entered allmulticast mode [ 466.353978][ T9] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 466.364492][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.364558][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.398741][ T9] as10x_usb: device has been detected [ 466.405140][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 466.428522][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 466.442677][ T9] as10x_usb: error during firmware upload part1 [ 466.449776][ T9] Registered device Abilis Systems DVB-Titan [ 468.014733][T13296] ipvlan2: entered allmulticast mode [ 468.020855][T13296] macvlan1: entered allmulticast mode [ 468.020869][T13296] veth1_vlan: entered allmulticast mode [ 468.063449][T13299] ipvlan2: entered allmulticast mode [ 468.116450][T13298] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 468.222521][ T9] usb 5-1: USB disconnect, device number 35 [ 468.236947][T13308] tipc: New replicast peer: 255.255.255.255 [ 468.237595][T13308] tipc: Enabled bearer , priority 10 [ 468.292711][ T9] Unregistered device Abilis Systems DVB-Titan [ 468.305115][ T9] as10x_usb: device has been disconnected [ 468.755961][ T9] usb 1-1: USB disconnect, device number 28 [ 468.815479][T13325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2586'. [ 468.893800][T13327] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 469.492866][T13353] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 469.583375][T13359] tipc: Enabled bearer , priority 10 [ 469.686402][T13364] __nla_validate_parse: 5 callbacks suppressed [ 469.686453][T13364] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2606'. [ 469.731908][T13367] tipc: Enabling of bearer rejected, already enabled [ 469.804429][T13371] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2609'. [ 470.007364][T13380] tipc: Enabling of bearer rejected, already enabled [ 470.071391][T13385] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 470.211743][T13395] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2620'. [ 470.967127][T13416] tipc: New replicast peer: 255.255.255.255 [ 470.987488][T13416] tipc: Enabled bearer , priority 10 [ 471.089514][T13423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2632'. [ 471.101220][T13423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2632'. [ 471.373093][T13439] netlink: 'syz.1.2638': attribute type 11 has an invalid length. [ 471.443905][T13441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2639'. [ 471.743005][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2640'. [ 472.066680][T13458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2645'. [ 472.066771][T13458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2645'. [ 472.240127][T13465] tipc: Enabled bearer , priority 10 [ 472.286060][T13467] netlink: 'syz.2.2649': attribute type 11 has an invalid length. [ 472.365792][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 472.677939][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 472.807881][ T9] usb 2-1: device descriptor read/64, error -71 [ 472.953441][T13491] netlink: 'syz.3.2660': attribute type 11 has an invalid length. [ 473.048843][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 473.077733][T13497] tipc: Enabling of bearer rejected, already enabled [ 473.183085][ T9] usb 2-1: device descriptor read/64, error -71 [ 473.288296][ T9] usb usb2-port1: attempt power cycle [ 473.482130][T13520] netlink: 'syz.0.2675': attribute type 1 has an invalid length. [ 473.506239][T13520] bond4: entered promiscuous mode [ 473.506668][T13520] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.529827][T13520] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 473.529901][T13520] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 473.529937][T13520] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 473.639086][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 473.662385][ T9] usb 2-1: device descriptor read/8, error -71 [ 473.898270][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 473.921060][ T9] usb 2-1: device descriptor read/8, error -71 [ 473.937113][T13542] ipvlan2: entered allmulticast mode [ 473.937141][T13542] macvlan1: entered allmulticast mode [ 473.937183][T13542] veth1_vlan: entered allmulticast mode [ 473.939935][T13542] batman_adv: batadv0: Adding interface: ipvlan2 [ 473.939950][T13542] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.939977][T13542] batman_adv: batadv0: Interface activated: ipvlan2 [ 473.954708][T13542] ipvlan3: entered allmulticast mode [ 473.957563][T13542] batman_adv: batadv0: Adding interface: ipvlan3 [ 473.957579][T13542] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.957665][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 473.957680][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.957692][T13542] batman_adv: batadv0: Interface activated: ipvlan3 [ 474.034593][ T9] usb usb2-port1: unable to enumerate USB device [ 474.716066][T13575] netlink: 'syz.4.2701': attribute type 1 has an invalid length. [ 474.739198][T13575] bond2: entered promiscuous mode [ 474.739616][T13575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 474.794255][T13578] __nla_validate_parse: 8 callbacks suppressed [ 474.794383][T13578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2702'. [ 475.662420][T13593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.669445][T13593] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2707'. [ 475.670927][T13593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.796161][T13599] netlink: 'syz.1.2712': attribute type 1 has an invalid length. [ 475.828427][T13599] bond3: entered promiscuous mode [ 475.833998][T13599] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.128642][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2721'. [ 476.247958][ T5756] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 476.378494][ T5756] usb 4-1: device descriptor read/64, error -71 [ 476.436774][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2727'. [ 476.440148][T13634] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2727'. [ 476.619119][ T5756] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 476.758099][ T5756] usb 4-1: device descriptor read/64, error -71 [ 476.868153][ T5756] usb usb4-port1: attempt power cycle [ 476.960109][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 476.974883][T13659] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2738'. [ 477.207990][ T5756] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 477.228464][ T5756] usb 4-1: device descriptor read/8, error -71 [ 477.468476][ T5756] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 477.488697][ T5756] usb 4-1: device descriptor read/8, error -71 [ 477.598251][ T5756] usb usb4-port1: unable to enumerate USB device [ 477.899369][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2752'. [ 477.936701][T13689] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2752'. [ 478.202892][T13703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2758'. [ 478.694782][T13729] netlink: 'syz.1.2770': attribute type 1 has an invalid length. [ 478.721844][T13729] bond4: entered promiscuous mode [ 478.722207][T13729] 8021q: adding VLAN 0 to HW filter on device bond4 [ 478.822896][ T30] audit: type=1326 audit(1788651970.229:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.1.2773" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f360ec code=0x0 [ 479.191792][T13753] tipc: Enabling of bearer rejected, already enabled [ 479.473053][T13768] netlink: 'syz.0.2787': attribute type 11 has an invalid length. [ 479.948184][ T3107] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 480.077877][ T3107] usb 5-1: device descriptor read/64, error -71 [ 480.116796][T13790] __nla_validate_parse: 8 callbacks suppressed [ 480.119926][T13790] netlink: 10184 bytes leftover after parsing attributes in process `syz.3.2797'. [ 480.119950][T13790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2797'. [ 480.317877][ T3107] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 480.459340][ T3107] usb 5-1: device descriptor read/64, error -71 [ 480.534226][ T30] audit: type=1326 audit(1788651971.939:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.1.2803" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f360ec code=0x0 [ 480.568168][ T3107] usb usb5-port1: attempt power cycle [ 480.907900][ T3107] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 480.948690][ T3107] usb 5-1: device descriptor read/8, error -71 [ 480.983245][T13816] tipc: Enabling of bearer rejected, already enabled [ 481.065879][T13818] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.2810'. [ 481.065935][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2810'. [ 481.187857][ T3107] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 481.209418][ T3107] usb 5-1: device descriptor read/8, error -71 [ 481.319176][ T3107] usb usb5-port1: unable to enumerate USB device [ 482.051351][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'. [ 482.391894][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2835'. [ 482.636094][T13882] tipc: Enabling of bearer rejected, already enabled [ 483.043379][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2847'. [ 483.355611][T13908] tipc: Enabling of bearer rejected, already enabled [ 483.373835][T13911] netlink: 'syz.2.2855': attribute type 11 has an invalid length. [ 483.407362][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2854'. [ 483.509049][ T30] audit: type=1326 audit(1788651974.919:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.3.2856" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f390ec code=0x0 [ 483.567925][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2859'. [ 483.570306][T13919] ipvlan2: entered allmulticast mode [ 483.570325][T13919] macvlan1: entered allmulticast mode [ 483.570337][T13919] veth1_vlan: entered allmulticast mode [ 483.617041][T13921] ipvlan2: entered allmulticast mode [ 483.810117][T13935] netlink: 'syz.2.2864': attribute type 1 has an invalid length. [ 484.003622][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2869'. [ 484.010368][T13941] netlink: 'syz.4.2868': attribute type 11 has an invalid length. [ 484.080239][T13947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.095040][T13947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.499589][T13965] netlink: 'syz.0.2880': attribute type 1 has an invalid length. [ 484.524930][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 484.536232][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 484.539880][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 484.542042][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 484.545009][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 484.737564][T13971] netlink: 'syz.3.2882': attribute type 11 has an invalid length. [ 485.200027][T13996] netlink: 'syz.0.2893': attribute type 11 has an invalid length. [ 485.384016][T14008] __nla_validate_parse: 5 callbacks suppressed [ 485.391390][T14008] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2898'. [ 485.590530][T14023] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2903'. [ 485.688738][T13969] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.693038][T13969] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.693196][T13969] bridge_slave_0: entered allmulticast mode [ 485.698634][T13969] bridge_slave_0: entered promiscuous mode [ 485.705318][T13969] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.706999][T13969] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.707147][T13969] bridge_slave_1: entered allmulticast mode [ 485.711234][T13969] bridge_slave_1: entered promiscuous mode [ 485.733953][T14028] netlink: 'syz.4.2906': attribute type 11 has an invalid length. [ 485.770040][T13969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.786527][T13969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.792773][T14031] netlink: 'syz.1.2905': attribute type 4 has an invalid length. [ 485.835594][T14031] netlink: 'syz.1.2905': attribute type 4 has an invalid length. [ 485.862909][T14033] netlink: 412 bytes leftover after parsing attributes in process `syz.4.2907'. [ 485.883537][T13969] team0: Port device team_slave_0 added [ 485.898857][T13969] team0: Port device team_slave_1 added [ 485.993583][T13969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.993621][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.993643][T13969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.999843][T13969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.999861][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.999885][T13969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.152934][T13969] hsr_slave_0: entered promiscuous mode [ 486.157194][T13969] hsr_slave_1: entered promiscuous mode [ 486.158426][T13969] debugfs: 'hsr0' already exists in 'hsr' [ 486.158457][T13969] Cannot create hsr debugfs directory [ 486.219665][T14045] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2913'. [ 486.364054][T14051] netlink: 'syz.4.2916': attribute type 11 has an invalid length. [ 486.592576][T13969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.618127][ T5619] Bluetooth: hci5: command tx timeout [ 486.689376][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2922'. [ 486.767205][T13969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.801594][T14074] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2924'. [ 486.909171][T13969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.964141][T14081] netlink: 'syz.4.2929': attribute type 11 has an invalid length. [ 487.025525][T13969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.086614][T14089] netlink: 'syz.4.2931': attribute type 1 has an invalid length. [ 487.128089][T14089] bond3: entered promiscuous mode [ 487.128548][T14089] 8021q: adding VLAN 0 to HW filter on device bond3 [ 487.229472][T14094] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2934'. [ 487.314096][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2935'. [ 487.355362][T14098] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2936'. [ 487.411794][T13969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 487.412405][T14100] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2937'. [ 487.427161][T13969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.432168][T13969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 487.440931][T13969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.444032][T13969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 487.455912][T13969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.457629][T13969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 487.471451][T13969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.583947][T13969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.604349][T13969] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.612253][T10036] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.612365][T10036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.623899][T10036] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.624001][T10036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.754162][T13969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.880310][T13969] veth0_vlan: entered promiscuous mode [ 487.912510][T13969] veth1_vlan: entered promiscuous mode [ 487.935666][ T30] audit: type=1326 audit(1788651979.339:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.0.2944" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x0 [ 487.999466][T13969] veth0_macvtap: entered promiscuous mode [ 488.005471][T13969] veth1_macvtap: entered promiscuous mode [ 488.045827][T13969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.064313][T13969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.199588][T10036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.209028][ T1099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.229279][T10034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.229802][T10034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.391941][T10028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.400014][T10028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.456533][T10034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.456568][T10034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.701188][ T5619] Bluetooth: hci5: command tx timeout [ 488.900262][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.908532][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.917709][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.932547][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.933135][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 489.533075][T10036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.535458][T14162] netlink: 'syz.3.2958': attribute type 11 has an invalid length. [ 489.558862][ T5756] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 489.706251][T10036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.712589][ T5756] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 489.719431][ T5756] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 489.719456][ T5756] usb 2-1: config 0 has no interface number 0 [ 489.726749][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.726774][ T5756] usb 2-1: Product: syz [ 489.726787][ T5756] usb 2-1: Manufacturer: syz [ 489.726799][ T5756] usb 2-1: SerialNumber: syz [ 489.746356][ T5756] usb 2-1: config 0 descriptor?? [ 489.877942][ T30] audit: type=1326 audit(1788651981.279:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14172 comm="syz.2.2963" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe60ec code=0x0 [ 489.963052][ T5756] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 489.964334][ T5756] usb 2-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 489.964355][ T5756] usb 2-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 490.073133][T10036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.223476][T10036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.235701][T14150] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.236536][T14150] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.236692][T14150] bridge_slave_0: entered allmulticast mode [ 490.239438][T14150] bridge_slave_0: entered promiscuous mode [ 490.250706][T14150] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.250802][T14150] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.250924][T14150] bridge_slave_1: entered allmulticast mode [ 490.253323][T14150] bridge_slave_1: entered promiscuous mode [ 490.390213][T14150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.395956][T14150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.433658][T14150] team0: Port device team_slave_0 added [ 490.458487][T14150] team0: Port device team_slave_1 added [ 490.520618][T14150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.520657][T14150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.520679][T14150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.523000][T14150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.523014][T14150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.523037][T14150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.640327][T10036] bridge_slave_1: left allmulticast mode [ 490.640360][T10036] bridge_slave_1: left promiscuous mode [ 490.642491][T10036] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.653082][T10036] bridge_slave_0: left allmulticast mode [ 490.653105][T10036] bridge_slave_0: left promiscuous mode [ 490.653307][T10036] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.780122][ T5619] Bluetooth: hci5: command tx timeout [ 490.812671][T14193] netlink: 'syz.1.2970': attribute type 11 has an invalid length. [ 491.036674][ T5619] Bluetooth: hci0: command tx timeout [ 491.055943][T10036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.070344][T10036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.082531][T10036] bond0 (unregistering): Released all slaves [ 491.095915][T10036] bond1 (unregistering): Released all slaves [ 491.118148][T10036] bond2 (unregistering): Released all slaves [ 491.147172][T10036] bond3 (unregistering): Released all slaves [ 491.171998][T10036] bond4 (unregistering): Released all slaves [ 491.232577][T14207] __nla_validate_parse: 9 callbacks suppressed [ 491.240474][T14207] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2975'. [ 491.343226][T14150] hsr_slave_0: entered promiscuous mode [ 491.344106][T14150] hsr_slave_1: entered promiscuous mode [ 491.347735][T14150] debugfs: 'hsr0' already exists in 'hsr' [ 491.347965][T14150] Cannot create hsr debugfs directory [ 491.379583][T14209] netlink: 432 bytes leftover after parsing attributes in process `syz.3.2976'. [ 491.497336][ T30] audit: type=1326 audit(1788651982.899:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.4.2978" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x0 [ 491.562299][T10036] tipc: Left network mode [ 491.727905][T14133] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 491.743563][T10036] IPVS: stopping master sync thread 12881 ... [ 491.891694][T14133] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 491.907602][T14133] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 491.907642][T14133] usb 4-1: config 0 has no interface number 0 [ 491.924161][T14133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.924200][T14133] usb 4-1: Product: syz [ 491.924228][T14133] usb 4-1: Manufacturer: syz [ 491.924245][T14133] usb 4-1: SerialNumber: syz [ 491.950929][T14133] usb 4-1: config 0 descriptor?? [ 492.182517][T14133] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 492.384855][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 492.445413][T10036] hsr_slave_0: left promiscuous mode [ 492.446826][T14248] netlink: 'syz.4.2986': attribute type 11 has an invalid length. [ 492.451199][T10036] hsr_slave_1: left promiscuous mode [ 492.452094][T10036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.452114][T10036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.461447][T10036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.461467][T10036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.465789][T10036] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 492.465807][T10036] batman_adv: batadv0: Removing interface: ipvlan2 [ 492.473733][T10036] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 492.473752][T10036] batman_adv: batadv0: Removing interface: ipvlan3 [ 492.500069][T10036] veth1_macvtap: left promiscuous mode [ 492.500103][T10036] veth0_macvtap: left promiscuous mode [ 492.500181][T10036] veth1_vlan: left allmulticast mode [ 492.500209][T10036] veth1_vlan: left promiscuous mode [ 492.500269][T10036] veth0_vlan: left promiscuous mode [ 492.613796][T14250] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2987'. [ 492.774476][T10036] team0 (unregistering): Port device team_slave_1 removed [ 492.799417][T10036] team0 (unregistering): Port device team_slave_0 removed [ 492.858351][ T5619] Bluetooth: hci5: command tx timeout [ 493.103295][ T5619] Bluetooth: hci0: command tx timeout [ 493.199587][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2989'. [ 493.224675][T14256] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2989'. [ 493.466086][T10036] IPVS: stop unused estimator thread 0... [ 493.537469][T14274] netlink: 436 bytes leftover after parsing attributes in process `syz.3.2995'. [ 493.615919][T14279] tipc: Enabling of bearer rejected, already enabled [ 493.760541][T14287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'. [ 493.993731][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 493.996708][T14299] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3003'. [ 494.401370][T14313] netlink: 436 bytes leftover after parsing attributes in process `syz.3.3007'. [ 494.496328][T14317] tipc: Enabling of bearer rejected, already enabled [ 494.770381][T14150] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 494.790564][T14150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.791425][T14150] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 494.813850][T14150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.818768][T14150] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 494.842999][T14150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.843852][T14150] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 494.872396][T14150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.180289][ T5619] Bluetooth: hci0: command tx timeout [ 495.186600][T14150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.212224][T14150] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.225267][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.225374][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.236485][T10028] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.236587][T10028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.445186][T14150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.496633][T14368] tipc: Started in network mode [ 495.503493][T14368] tipc: Node identity ac14140f, cluster identity 4711 [ 495.510762][T14368] tipc: New replicast peer: 255.255.255.255 [ 495.517460][T14368] tipc: Enabled bearer , priority 10 [ 495.704183][T14373] openvswitch: netlink: Message has 13076 unknown bytes. [ 495.704243][T14373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.721790][T14150] veth0_vlan: entered promiscuous mode [ 495.773729][T14150] veth1_vlan: entered promiscuous mode [ 495.870771][ T30] audit: type=1326 audit(1788651987.279:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14379 comm="syz.4.3029" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x0 [ 496.095743][T14150] veth0_macvtap: entered promiscuous mode [ 496.116561][T14150] veth1_macvtap: entered promiscuous mode [ 496.242478][T14396] __nla_validate_parse: 7 callbacks suppressed [ 496.245868][T14396] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3035'. [ 496.260178][T14400] tipc: Enabling of bearer rejected, already enabled [ 496.289887][T14150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.320280][T14150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.391741][T10036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.392578][T10036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.430582][ T1099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.431929][ T1099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.504395][ T627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.504439][ T627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.577228][ T627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.577269][ T627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.663349][ T3107] tipc: Node number set to 2886997007 [ 497.062024][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 497.070983][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.080046][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 497.081643][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 497.083050][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 497.258973][ T5623] Bluetooth: hci0: command tx timeout [ 497.482307][T14437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3045'. [ 497.635500][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3047'. [ 497.852306][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3048'. [ 497.869904][T14451] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3048'. [ 498.066420][T14460] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 498.183897][ T30] audit: type=1326 audit(1788651989.589:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14465 comm="syz.2.3052" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe60ec code=0x0 [ 498.379739][T14429] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.389462][T14429] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.397267][T14429] bridge_slave_0: entered allmulticast mode [ 498.415203][T14429] bridge_slave_0: entered promiscuous mode [ 498.483437][T14429] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.491785][T14429] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.499416][T14429] bridge_slave_1: entered allmulticast mode [ 498.511571][T14429] bridge_slave_1: entered promiscuous mode [ 498.584397][T14429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.595573][T14429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.629862][T14429] team0: Port device team_slave_0 added [ 498.632649][T14429] team0: Port device team_slave_1 added [ 498.666548][T14429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.666591][T14429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.666615][T14429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.670470][T14429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.670484][T14429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.670507][T14429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.789707][T14429] hsr_slave_0: entered promiscuous mode [ 498.790700][T14429] hsr_slave_1: entered promiscuous mode [ 498.791413][T14429] debugfs: 'hsr0' already exists in 'hsr' [ 498.791431][T14429] Cannot create hsr debugfs directory [ 499.043161][T14429] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.178295][ T5623] Bluetooth: hci1: command tx timeout [ 499.264706][T14429] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.401601][T14429] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.484553][T14429] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.591250][ T30] audit: type=1326 audit(1788651990.999:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14503 comm="syz.0.3066" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x0 [ 499.833126][T14429] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 499.836879][T14429] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 499.837722][T14429] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 499.843311][T14429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.845552][T14429] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 499.854676][T14429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.855577][T14429] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 499.862234][T14429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.982610][T14517] netlink: 'syz.1.3069': attribute type 1 has an invalid length. [ 500.010424][T14517] bond5: entered promiscuous mode [ 500.010817][T14517] 8021q: adding VLAN 0 to HW filter on device bond5 [ 500.085886][T14429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.101449][T14429] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.124762][T10028] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.124929][T10028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.141810][T10028] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.141934][T10028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.158035][T14524] netlink: 'syz.1.3072': attribute type 12 has an invalid length. [ 500.158062][T14524] netlink: 'syz.1.3072': attribute type 29 has an invalid length. [ 500.158090][T14524] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3072'. [ 500.158112][T14524] netlink: 'syz.1.3072': attribute type 1 has an invalid length. [ 500.158123][T14524] netlink: 'syz.1.3072': attribute type 2 has an invalid length. [ 500.158134][T14524] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3072'. [ 500.284468][T14429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.356928][T14429] veth0_vlan: entered promiscuous mode [ 500.382245][T14429] veth1_vlan: entered promiscuous mode [ 500.516994][T14429] veth0_macvtap: entered promiscuous mode [ 500.531591][T14429] veth1_macvtap: entered promiscuous mode [ 500.629883][T14537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3078'. [ 500.645146][T14429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.670368][T14429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.699226][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.700358][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.700394][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.700425][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.868627][T14548] netlink: 'syz.3.3082': attribute type 1 has an invalid length. [ 500.905489][T14548] bond1: entered promiscuous mode [ 500.905922][T14548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.973796][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.973834][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.054573][ T627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.054610][ T627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.151604][T14558] netlink: 436 bytes leftover after parsing attributes in process `syz.4.3041'. [ 501.213676][ T30] audit: type=1326 audit(1788651992.619:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.4.3088" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x0 [ 501.258908][ T5623] Bluetooth: hci1: command tx timeout [ 501.437942][ T5687] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 501.500794][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.500949][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.599782][ T5687] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 501.599846][ T5687] usb 3-1: no configurations [ 501.599867][ T5687] usb 3-1: can't read configurations, error -22 [ 501.748472][ T5687] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 501.902488][ T5687] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 501.902569][ T5687] usb 3-1: no configurations [ 501.902596][ T5687] usb 3-1: can't read configurations, error -22 [ 501.912149][ T5687] usb usb3-port1: attempt power cycle [ 502.032378][T14583] netlink: 'syz.3.3097': attribute type 1 has an invalid length. [ 502.091398][T14587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3098'. [ 502.116932][T14583] bond2: entered promiscuous mode [ 502.121476][T14583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.255238][T14589] netlink: 436 bytes leftover after parsing attributes in process `syz.3.3099'. [ 502.268948][ T5687] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 502.302877][ T5687] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 502.302931][ T5687] usb 3-1: no configurations [ 502.302958][ T5687] usb 3-1: can't read configurations, error -22 [ 502.447856][ T5687] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 502.472281][ T5687] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 502.481477][ T5687] usb 3-1: no configurations [ 502.481494][ T5687] usb 3-1: can't read configurations, error -22 [ 502.493388][ T5687] usb usb3-port1: unable to enumerate USB device [ 502.833595][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'. [ 502.867406][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 502.885919][T14611] ipvlan2: entered allmulticast mode [ 502.891440][T14611] macvlan1: entered allmulticast mode [ 502.891459][T14611] veth1_vlan: entered allmulticast mode [ 502.908270][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 502.926738][T14611] ipvlan3: entered allmulticast mode [ 502.981805][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3110'. [ 502.995036][T14614] ipvlan4: entered allmulticast mode [ 502.995080][T14614] macvlan1: entered allmulticast mode [ 502.995094][T14614] veth1_vlan: entered allmulticast mode [ 503.338063][ T5623] Bluetooth: hci1: command tx timeout [ 503.497043][T14641] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3122'. [ 504.192906][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 504.203180][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 504.211187][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 504.212612][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 504.213163][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 504.415873][T14651] netlink: 'syz.4.3127': attribute type 11 has an invalid length. [ 504.778481][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'. [ 505.127869][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 505.159859][T14684] netlink: 'syz.0.3139': attribute type 11 has an invalid length. [ 505.278561][ T9] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 505.278627][ T9] usb 5-1: no configurations [ 505.278655][ T9] usb 5-1: can't read configurations, error -22 [ 505.420825][ T5623] Bluetooth: hci1: command tx timeout [ 505.427912][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 505.470857][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3144'. [ 505.590191][ T9] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 505.590254][ T9] usb 5-1: no configurations [ 505.590280][ T9] usb 5-1: can't read configurations, error -22 [ 505.599780][ T9] usb usb5-port1: attempt power cycle [ 505.626426][T14647] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.626601][T14647] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.627031][T14647] bridge_slave_0: entered allmulticast mode [ 505.636295][T14647] bridge_slave_0: entered promiscuous mode [ 505.647851][T14647] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.650093][T14647] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.650238][T14647] bridge_slave_1: entered allmulticast mode [ 505.655217][T14647] bridge_slave_1: entered promiscuous mode [ 505.760898][T14647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.772788][T14712] netlink: 'syz.2.3151': attribute type 11 has an invalid length. [ 505.787922][T14647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.872885][T14647] team0: Port device team_slave_0 added [ 505.919278][T14647] team0: Port device team_slave_1 added [ 505.968990][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 505.989285][ T9] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 505.989339][ T9] usb 5-1: no configurations [ 505.989370][ T9] usb 5-1: can't read configurations, error -22 [ 506.018923][T14647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.018955][T14647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.018991][T14647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.025755][T14647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.025768][T14647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.025792][T14647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.169404][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 506.190218][ T9] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 506.190271][ T9] usb 5-1: no configurations [ 506.190305][ T9] usb 5-1: can't read configurations, error -22 [ 506.190551][ T9] usb usb5-port1: unable to enumerate USB device [ 506.236934][T14647] hsr_slave_0: entered promiscuous mode [ 506.243057][T14647] hsr_slave_1: entered promiscuous mode [ 506.243752][T14647] debugfs: 'hsr0' already exists in 'hsr' [ 506.243769][T14647] Cannot create hsr debugfs directory [ 506.298772][ T5623] Bluetooth: hci2: command tx timeout [ 506.363994][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3157'. [ 506.417168][T14728] ipvlan5: entered allmulticast mode [ 506.720273][T14735] netlink: 'syz.2.3161': attribute type 11 has an invalid length. [ 506.858999][T14647] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.006184][T14647] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.133908][T14756] __nla_validate_parse: 3 callbacks suppressed [ 507.141358][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3171'. [ 507.170974][T14647] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.192248][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3171'. [ 507.214318][T14756] ipvlan2: entered allmulticast mode [ 507.214366][T14756] macvlan1: entered allmulticast mode [ 507.214756][T14756] veth1_vlan: entered allmulticast mode [ 507.245774][T14758] ipvlan3: entered allmulticast mode [ 507.304143][T14647] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.395772][T14765] netlink: 'syz.3.3175': attribute type 11 has an invalid length. [ 507.489599][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3177'. [ 507.501665][T14770] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3177'. [ 507.950407][T14647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 507.964832][T14647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 507.973056][T14647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 507.994362][T14647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.003878][T14647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 508.022939][T14647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 508.023781][T14647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 508.042173][T14647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 508.075720][T14781] netlink: 'syz.0.3182': attribute type 10 has an invalid length. [ 508.101813][T14781] team0: Port device dummy0 added [ 508.104831][T14781] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 508.209121][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3184'. [ 508.244421][T14794] ipvlan2: entered allmulticast mode [ 508.244494][T14794] macvlan1: entered allmulticast mode [ 508.244506][T14794] veth1_vlan: entered allmulticast mode [ 508.273026][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3184'. [ 508.295383][T14795] ipvlan3: entered allmulticast mode [ 508.380381][ T5623] Bluetooth: hci2: command tx timeout [ 508.513871][T14799] syzkaller0: entered promiscuous mode [ 508.519608][T14799] syzkaller0: entered allmulticast mode [ 508.530577][T14647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.464116][ T5623] Bluetooth: hci2: command tx timeout [ 510.530890][T14647] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.572221][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.572329][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.606585][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.606691][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.680192][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3194'. [ 510.692540][T14818] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3194'. [ 510.833161][T14647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.834640][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'. [ 510.872505][T14822] ipvlan4: entered allmulticast mode [ 510.891244][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'. [ 510.902109][T14822] ipvlan5: entered allmulticast mode [ 511.006727][T14647] veth0_vlan: entered promiscuous mode [ 511.046190][T14647] veth1_vlan: entered promiscuous mode [ 511.111104][T14647] veth0_macvtap: entered promiscuous mode [ 511.124354][T14647] veth1_macvtap: entered promiscuous mode [ 511.145260][T14647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.171540][T14647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.263998][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.269974][ T627] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.271972][T10028] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.272294][T10028] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.403481][T10036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.403530][T10036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.427507][ T30] audit: type=1326 audit(1788652002.829:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14836 comm="syz.0.3202" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x0 [ 511.474975][ T627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.475012][ T627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.666591][T14842] syzkaller0: entered promiscuous mode [ 511.672681][T14842] syzkaller0: entered allmulticast mode [ 512.495213][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3208'. [ 512.538389][ T5619] Bluetooth: hci2: command tx timeout [ 512.570926][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3208'. [ 514.359685][T14855] ipvlan6: entered allmulticast mode [ 514.374311][T14859] ipvlan7: entered allmulticast mode [ 514.643715][T14884] netlink: 'syz.1.3219': attribute type 1 has an invalid length. [ 517.414755][T14917] syzkaller0: entered promiscuous mode [ 517.420535][T14917] syzkaller0: entered allmulticast mode [ 517.435813][T14917] netlink: 'syz.1.3231': attribute type 13 has an invalid length. [ 517.444005][T14917] netlink: 'syz.1.3231': attribute type 17 has an invalid length. [ 517.579753][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'. [ 517.579804][T14928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3235'. [ 517.731765][T14925] Set syz1 is full, maxelem 6117 reached [ 517.800875][T14917] syzkaller0: left promiscuous mode [ 517.800905][T14917] syzkaller0: left allmulticast mode [ 517.908584][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3238'. [ 517.922060][T14936] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3238'. [ 518.068876][T14938] bridge0: port 3(wlan1) entered blocking state [ 518.069047][T14938] bridge0: port 3(wlan1) entered disabled state [ 518.071242][T14938] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 518.103147][T14938] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 518.106519][T14938] bridge0: port 3(wlan1) entered blocking state [ 518.106649][T14938] bridge0: port 3(wlan1) entered forwarding state [ 518.246523][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'. [ 518.248976][T14943] bridge0: port 3(wlan1) entered disabled state [ 518.262905][T14943] mac80211_hwsim hwsim24 wlan1 (unregistering): left allmulticast mode [ 518.262932][T14943] mac80211_hwsim hwsim24 wlan1 (unregistering): left promiscuous mode [ 518.264345][T14943] bridge0: port 3(wlan1) entered disabled state [ 518.298776][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'. [ 518.449272][T14953] syzkaller0: entered promiscuous mode [ 518.449314][T14953] syzkaller0: entered allmulticast mode [ 518.468716][T14960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3248'. [ 518.668998][ T5687] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 518.838745][ T5687] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 518.849454][ T5687] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.859990][ T5687] usb 1-1: config 0 has no interfaces? [ 518.860030][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.876775][ T5687] usb 1-1: config 0 descriptor?? [ 520.856330][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3257'. [ 520.868866][T14986] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3257'. [ 521.009698][T14994] netlink: 'syz.2.3263': attribute type 30 has an invalid length. [ 521.019310][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3263'. [ 521.382054][T15006] syzkaller0: entered promiscuous mode [ 521.382093][T15006] syzkaller0: entered allmulticast mode [ 521.523101][T15025] netlink: 'syz.1.3275': attribute type 30 has an invalid length. [ 521.558359][ T5686] usb 1-1: USB disconnect, device number 29 [ 523.867878][T15055] __nla_validate_parse: 4 callbacks suppressed [ 523.868142][T15055] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3288'. [ 523.891202][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3287'. [ 523.895835][T15053] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3287'. [ 523.919680][T15058] netlink: 'syz.1.3289': attribute type 30 has an invalid length. [ 523.927590][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 524.096854][T15066] syzkaller0: entered promiscuous mode [ 524.096900][T15066] syzkaller0: entered allmulticast mode [ 524.108852][T15071] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3295'. [ 524.414444][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3300'. [ 525.418388][T15099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3306'. [ 525.418445][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3306'. [ 525.474323][T15101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3306'. [ 525.474370][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3306'. [ 526.771184][T15111] netlink: 'syz.2.3311': attribute type 11 has an invalid length. [ 526.954333][T15119] syzkaller0: entered promiscuous mode [ 526.954380][T15119] syzkaller0: entered allmulticast mode [ 527.045808][T15125] tc_dump_action: action bad kind [ 527.214717][T15127] syzkaller0: entered promiscuous mode [ 527.214768][T15127] syzkaller0: entered allmulticast mode [ 527.370028][T15142] netlink: 'syz.1.3325': attribute type 11 has an invalid length. [ 527.370085][T15141] netlink: 'syz.3.3324': attribute type 13 has an invalid length. [ 527.370099][T15141] netlink: 'syz.3.3324': attribute type 27 has an invalid length. [ 529.960594][T15162] netlink: 'syz.1.3333': attribute type 2 has an invalid length. [ 530.023177][T15169] __nla_validate_parse: 10 callbacks suppressed [ 530.031437][T15169] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3334'. [ 530.149467][T15176] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3341'. [ 530.159713][T15176] tc_dump_action: action bad kind [ 530.240947][T15173] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3339'. [ 530.510315][T15195] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3349'. [ 530.657310][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3352'. [ 530.873008][T15213] syzkaller0: entered promiscuous mode [ 530.882393][T15213] syzkaller0: entered allmulticast mode [ 531.032659][T15225] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3362'. [ 531.349878][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3370'. [ 532.330383][T15265] Set syz1 is full, maxelem 6117 reached [ 532.794573][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3384'. [ 533.051600][T15279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3386'. [ 534.091840][T15282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3387'. [ 534.155521][T15257] bridge0: port 3(wlan1) entered blocking state [ 534.155694][T15257] bridge0: port 3(wlan1) entered disabled state [ 534.155856][T15257] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 534.171558][T15257] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 534.178278][T15257] bridge0: port 3(wlan1) entered blocking state [ 534.178370][T15257] bridge0: port 3(wlan1) entered forwarding state [ 534.179768][ T1099] bridge0: port 3(wlan1) entered disabled state [ 534.769074][T15311] bridge0: port 3(wlan1) entered blocking state [ 534.769180][T15311] bridge0: port 3(wlan1) entered disabled state [ 534.769382][T15311] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 534.802745][T15311] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 534.813686][T15311] bridge0: port 3(wlan1) entered blocking state [ 534.813804][T15311] bridge0: port 3(wlan1) entered forwarding state [ 534.923339][T15321] tc_dump_action: action bad kind [ 535.239515][T15339] syzkaller0: entered promiscuous mode [ 535.246790][T15339] syzkaller0: entered allmulticast mode [ 535.264550][T10036] bridge0: port 3(wlan1) entered disabled state [ 535.425758][T15341] bridge0: port 3(wlan1) entered disabled state [ 535.445783][T15341] mac80211_hwsim hwsim21 wlan1 (unregistering): left allmulticast mode [ 535.445832][T15341] mac80211_hwsim hwsim21 wlan1 (unregistering): left promiscuous mode [ 535.460186][T15341] bridge0: port 3(wlan1) entered disabled state [ 535.506914][T15346] __nla_validate_parse: 2 callbacks suppressed [ 535.506955][T15346] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3417'. [ 535.506969][T15346] tc_dump_action: action bad kind [ 535.663716][T15354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3422'. [ 535.678158][T15354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3422'. [ 535.791381][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3427'. [ 535.926630][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'. [ 536.050497][T15379] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3433'. [ 536.050535][T15379] tc_dump_action: action bad kind [ 536.402544][T15391] syzkaller0: entered promiscuous mode [ 536.410479][T15391] syzkaller0: entered allmulticast mode [ 536.563466][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3443'. [ 538.440292][T15405] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.451337][T15407] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3446'. [ 538.451381][T15407] tc_dump_action: action bad kind [ 538.861528][T15429] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3457'. [ 538.987869][T15440] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.093087][T15433] syzkaller0: entered promiscuous mode [ 539.093131][T15433] syzkaller0: entered allmulticast mode [ 539.251587][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3464'. [ 539.337974][T15423] Set syz1 is full, maxelem 6117 reached [ 539.988979][T15452] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 540.001341][ T627] IPVS: starting estimator thread 0... [ 540.091090][T15454] IPVS: using max 30 ests per chain, 72000 per kthread [ 541.201217][T15445] __nla_validate_parse: 1 callbacks suppressed [ 541.207652][T15445] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3463'. [ 541.207693][T15445] tc_dump_action: action bad kind [ 541.313957][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3470'. [ 541.314961][T15463] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3470'. [ 541.543626][T15471] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.617465][T15477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3476'. [ 541.813771][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3479'. [ 541.840652][T15479] syzkaller0: entered promiscuous mode [ 541.846458][T15479] syzkaller0: entered allmulticast mode [ 543.853853][T15488] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3480'. [ 543.853898][T15488] tc_dump_action: action bad kind [ 544.004331][T15504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3488'. [ 544.101218][T15500] syzkaller0: entered promiscuous mode [ 544.106857][T15500] syzkaller0: entered allmulticast mode [ 544.159254][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3491'. [ 544.171069][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3491'. [ 544.284598][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'. [ 546.573345][T15528] __nla_validate_parse: 2 callbacks suppressed [ 546.573389][T15528] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3497'. [ 546.573406][T15528] tc_dump_action: action bad kind [ 546.695668][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3500'. [ 546.731579][T15534] bond0: option lp_interval: invalid value (0) [ 546.737939][T15534] bond0: option lp_interval: allowed values 1 - 2147483647 [ 546.878568][T15531] syzkaller0: entered promiscuous mode [ 546.878614][T15531] syzkaller0: entered allmulticast mode [ 547.961642][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3508'. [ 548.013265][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3508'. [ 549.170045][T15549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3506'. [ 549.300001][T15562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3509'. [ 549.402275][T15563] syzkaller0: entered promiscuous mode [ 549.402322][T15563] syzkaller0: entered allmulticast mode [ 549.491220][T15567] syzkaller0: entered promiscuous mode [ 549.493478][T15567] syzkaller0: entered allmulticast mode [ 549.650104][T15578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3515'. [ 549.907971][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 549.925569][T15585] bond3: entered promiscuous mode [ 549.934721][T15585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 549.965405][T15590] bond3: (slave ipvlan8): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 549.975357][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3523'. [ 549.990196][T15590] bond3: (slave ipvlan8): The slave device specified does not support setting the MAC address [ 550.002025][T15590] bond3: (slave ipvlan8): Error -95 calling set_mac_address [ 550.030994][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3523'. [ 550.078539][ T9] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 550.091109][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.091179][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.142603][ T9] as10x_usb: device has been detected [ 550.149714][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 550.180859][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 550.220396][ T9] as10x_usb: error during firmware upload part1 [ 550.228723][ T9] Registered device Abilis Systems DVB-Titan [ 550.256502][T15589] syzkaller0: entered promiscuous mode [ 550.256555][T15589] syzkaller0: entered allmulticast mode [ 550.270170][T15596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3524'. [ 550.374433][T15598] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 552.004863][ T9] usb 1-1: USB disconnect, device number 30 [ 552.034654][ T9] Unregistered device Abilis Systems DVB-Titan [ 552.036497][ T9] as10x_usb: device has been disconnected [ 552.620098][T15625] __nla_validate_parse: 1 callbacks suppressed [ 552.620135][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3534'. [ 552.634136][T15619] syzkaller0: entered promiscuous mode [ 552.634159][T15619] syzkaller0: entered allmulticast mode [ 552.642530][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3534'. [ 552.702009][T14133] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 552.702165][T14133] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 552.731629][T14133] usb 4-1: USB disconnect, device number 51 [ 552.745475][ T5756] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 552.745539][ T5756] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 552.785994][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3536'. [ 552.839032][ T5756] usb 2-1: USB disconnect, device number 36 [ 554.998546][T15632] tipc: Started in network mode [ 555.003552][T15632] tipc: Node identity 4ea138bfd258, cluster identity 4711 [ 555.011882][T15632] tipc: Enabled bearer , priority 0 [ 555.049913][T15630] tipc: Resetting bearer [ 555.120822][T15630] tipc: Disabling bearer [ 555.170347][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3545'. [ 555.175162][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3545'. [ 555.326137][T15647] syzkaller0: entered promiscuous mode [ 555.326181][T15647] syzkaller0: entered allmulticast mode [ 555.341871][T15655] syzkaller0: entered promiscuous mode [ 555.341917][T15655] syzkaller0: entered allmulticast mode [ 557.112385][T15681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3554'. [ 557.346998][T15658] bridge0: port 3(wlan1) entered blocking state [ 557.347518][T15658] bridge0: port 3(wlan1) entered disabled state [ 557.347680][T15658] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 557.350895][T15658] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 557.351387][T15658] bridge0: port 3(wlan1) entered blocking state [ 557.351479][T15658] bridge0: port 3(wlan1) entered forwarding state [ 557.383554][T15661] bridge0: port 3(wlan1) entered disabled state [ 557.396385][T15661] mac80211_hwsim hwsim13 wlan1 (unregistering): left allmulticast mode [ 557.396432][T15661] mac80211_hwsim hwsim13 wlan1 (unregistering): left promiscuous mode [ 557.397869][T15661] bridge0: port 3(wlan1) entered disabled state [ 557.615502][T15689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3558'. [ 557.633073][T15690] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3556'. [ 557.633098][T15690] tc_dump_action: action bad kind [ 557.635418][T15689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3558'. [ 557.799957][T15696] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3562'. [ 557.955277][T15702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.244108][T15723] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3573'. [ 558.263875][T15722] syzkaller0: entered promiscuous mode [ 558.269633][T15722] syzkaller0: entered allmulticast mode [ 558.478295][T15730] syzkaller0: entered promiscuous mode [ 558.478354][T15730] syzkaller0: entered allmulticast mode [ 558.864190][T15751] syzkaller1: entered promiscuous mode [ 558.864234][T15751] syzkaller1: entered allmulticast mode [ 558.958372][T15756] syzkaller0: entered promiscuous mode [ 558.958421][T15756] syzkaller0: entered allmulticast mode [ 559.279213][T15776] syzkaller0: entered promiscuous mode [ 559.279254][T15776] syzkaller0: entered allmulticast mode [ 559.303708][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3598'. [ 560.041931][T15804] syzkaller0: entered promiscuous mode [ 560.041980][T15804] syzkaller0: entered allmulticast mode [ 560.043807][T15805] syzkaller1: entered promiscuous mode [ 560.043827][T15805] syzkaller1: entered allmulticast mode [ 560.165136][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3610'. [ 560.419975][T15818] syzkaller0: entered promiscuous mode [ 560.427205][T15818] syzkaller0: entered allmulticast mode [ 560.490862][T15823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3618'. [ 560.639484][T15831] syzkaller0: entered promiscuous mode [ 560.645167][T15831] syzkaller0: entered allmulticast mode [ 560.756521][T15840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3621'. [ 560.984219][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3627'. [ 561.244223][T15858] syzkaller0: entered promiscuous mode [ 561.251420][T15858] syzkaller0: entered allmulticast mode [ 561.537677][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3636'. [ 561.551583][T15870] syzkaller0: entered promiscuous mode [ 561.557522][T15870] syzkaller0: entered allmulticast mode [ 561.657573][T15873] tc_dump_action: action bad kind [ 561.865506][T15885] syzkaller0: entered promiscuous mode [ 561.871481][T15885] syzkaller0: entered allmulticast mode [ 562.007615][T15893] syzkaller0: entered promiscuous mode [ 562.007663][T15893] syzkaller0: entered allmulticast mode [ 562.236735][T15903] tc_dump_action: action bad kind [ 562.260671][T15904] syzkaller0: entered promiscuous mode [ 562.260721][T15904] syzkaller0: entered allmulticast mode [ 562.678839][T15923] syzkaller0: entered promiscuous mode [ 562.678882][T15923] syzkaller0: entered allmulticast mode [ 562.752310][T15930] __nla_validate_parse: 8 callbacks suppressed [ 562.759068][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3664'. [ 562.845870][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3668'. [ 562.901404][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3671'. [ 562.916032][T15938] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3671'. [ 562.946520][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.946585][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.995953][T15942] C: renamed from veth1_to_team (while UP) [ 563.026775][T15942] netlink: 'syz.1.3675': attribute type 2 has an invalid length. [ 563.036508][T15942] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3675'. [ 563.036976][T15942] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 563.121046][T15945] syzkaller0: entered promiscuous mode [ 563.121089][T15945] syzkaller0: entered allmulticast mode [ 563.372014][T15959] syzkaller0: entered promiscuous mode [ 563.372059][T15959] syzkaller0: entered allmulticast mode [ 563.487052][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3684'. [ 563.632594][T15975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.684718][T15977] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3688'. [ 563.701069][T15977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3688'. [ 563.701107][T15977] tc_dump_action: action bad kind [ 563.891502][T15985] syzkaller0: entered promiscuous mode [ 563.898440][T15985] syzkaller0: entered allmulticast mode [ 564.020660][T15991] bridge0: port 3(wlan1) entered disabled state [ 564.031430][T15991] mac80211_hwsim hwsim19 wlan1 (unregistering): left allmulticast mode [ 564.041321][T15991] mac80211_hwsim hwsim19 wlan1 (unregistering): left promiscuous mode [ 564.041449][T15991] bridge0: port 3(wlan1) entered disabled state [ 564.043987][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3695'. [ 564.310814][T16006] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3701'. [ 564.310858][T16006] tc_dump_action: action bad kind [ 564.578122][T16023] syzkaller0: entered promiscuous mode [ 564.583877][T16023] syzkaller0: entered allmulticast mode [ 565.296396][T16062] netlink: 'syz.3.3728': attribute type 28 has an invalid length. [ 566.319175][T16118] tc_dump_action: action bad kind [ 566.489893][ T5619] Bluetooth: hci1: unexpected cc 0x2003 length: 0 < 9 [ 566.623708][T16137] ipvlan4: entered promiscuous mode [ 566.629426][T16137] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 566.642779][T16137] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 566.642991][T16137] bond0: (slave ipvlan4): Error -95 calling set_mac_address [ 566.836719][T16150] tc_dump_action: action bad kind [ 566.852391][T16145] syzkaller0: entered promiscuous mode [ 566.852441][T16145] syzkaller0: entered allmulticast mode [ 567.328928][T16177] tc_dump_action: action bad kind [ 567.778680][T16208] __nla_validate_parse: 24 callbacks suppressed [ 567.786074][T16208] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3799'. [ 567.786112][T16208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3799'. [ 567.786175][T16208] tc_dump_action: action bad kind [ 567.912687][T16216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3801'. [ 567.985171][T16221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3805'. [ 568.161111][T16229] tipc: Enabled bearer , priority 0 [ 568.253926][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'. [ 568.270291][T16233] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3811'. [ 568.598535][T16248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3818'. [ 568.779565][T16254] bridge0: port 3(wlan1) entered blocking state [ 568.796285][T16254] bridge0: port 3(wlan1) entered disabled state [ 568.812236][T16254] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 568.826467][T16254] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 568.838326][T16254] bridge0: port 3(wlan1) entered blocking state [ 568.838435][T16254] bridge0: port 3(wlan1) entered forwarding state [ 568.926147][T16260] bridge0: port 3(wlan1) entered disabled state [ 568.957695][T16260] mac80211_hwsim hwsim27 wlan1 (unregistering): left allmulticast mode [ 568.967293][T16260] mac80211_hwsim hwsim27 wlan1 (unregistering): left promiscuous mode [ 568.976758][T16260] bridge0: port 3(wlan1) entered disabled state [ 569.071816][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3827'. [ 569.366232][T16280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3834'. [ 569.564373][T16292] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3838'. [ 570.481139][T16339] syzkaller0: entered promiscuous mode [ 570.481193][T16339] syzkaller0: entered allmulticast mode [ 571.217841][T16373] syzkaller0: entered promiscuous mode [ 571.217882][T16373] syzkaller0: entered allmulticast mode [ 571.477994][ T5686] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 571.631071][ T5686] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 571.641978][ T5686] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.642044][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.681094][ T5686] as10x_usb: device has been detected [ 571.681910][ T5686] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 571.712988][ T5686] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 571.739464][ T5686] as10x_usb: error during firmware upload part1 [ 571.746330][ T5686] Registered device Abilis Systems DVB-Titan [ 572.701512][T16440] vlan2: entered allmulticast mode [ 572.701559][T16440] bond0: entered allmulticast mode [ 572.705186][T16440] bond_slave_0: entered allmulticast mode [ 572.705212][T16440] bond_slave_1: entered allmulticast mode [ 572.773831][T16449] syzkaller0: entered promiscuous mode [ 572.773874][T16449] syzkaller0: entered allmulticast mode [ 572.819525][T16451] __nla_validate_parse: 22 callbacks suppressed [ 572.819561][T16451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3912'. [ 572.866886][T16453] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3913'. [ 573.019230][T16462] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3917'. [ 573.031082][T16462] tc_dump_action: action bad kind [ 573.105779][T16467] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3920'. [ 573.107325][T16467] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3920'. [ 573.290271][T16475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3923'. [ 573.453334][T16478] syzkaller0: entered promiscuous mode [ 573.453377][T16478] syzkaller0: entered allmulticast mode [ 573.464734][T16480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3925'. [ 573.543769][ T5756] usb 5-1: USB disconnect, device number 44 [ 573.575793][ T5756] Unregistered device Abilis Systems DVB-Titan [ 573.583706][ T5756] as10x_usb: device has been disconnected [ 573.726347][T16491] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3930'. [ 573.726389][T16491] tc_dump_action: action bad kind [ 573.747525][T16493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3931'. [ 573.750914][T16493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3931'. [ 573.885507][T16502] veth0: entered promiscuous mode [ 573.913963][T16500] syzkaller0: entered promiscuous mode [ 573.914003][T16500] syzkaller0: entered allmulticast mode [ 573.954689][T16501] veth0: left promiscuous mode [ 574.211403][T16515] syzkaller0: entered promiscuous mode [ 574.211442][T16515] syzkaller0: entered allmulticast mode [ 574.359365][T14133] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 574.424271][T16520] tc_dump_action: action bad kind [ 574.438326][T16506] Set syz1 is full, maxelem 6117 reached [ 574.518547][T14133] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 574.529352][T14133] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 574.529392][T14133] usb 5-1: config 0 has no interface number 0 [ 574.553215][T14133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.553259][T14133] usb 5-1: Product: syz [ 574.553292][T14133] usb 5-1: Manufacturer: syz [ 574.553309][T14133] usb 5-1: SerialNumber: syz [ 574.582311][T14133] usb 5-1: config 0 descriptor?? [ 574.710336][T16533] syzkaller0: entered promiscuous mode [ 574.716647][T16533] syzkaller0: entered allmulticast mode [ 574.795846][T14133] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 574.805340][T16540] syzkaller0: entered promiscuous mode [ 574.805364][T16540] syzkaller0: entered allmulticast mode [ 574.828387][T14133] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 574.839202][T14133] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 574.847487][T14133] usb 5-1: media controller created [ 574.869002][T14133] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.938114][T14549] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 574.962745][T16546] netlink: 'syz.2.3954': attribute type 4 has an invalid length. [ 574.962799][T16546] tc_dump_action: action bad kind [ 575.006418][T14133] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 575.086341][T14133] usb 5-1: USB disconnect, device number 45 [ 575.088552][T14549] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 575.089684][T14549] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.089729][T14549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.132246][T14549] as10x_usb: device has been detected [ 575.134730][T14549] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 575.170768][T14549] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 575.220959][T14549] as10x_usb: error during firmware upload part1 [ 575.225002][T14549] Registered device Abilis Systems DVB-Titan [ 575.393655][T16563] syzkaller0: entered promiscuous mode [ 575.393699][T16563] syzkaller0: entered allmulticast mode [ 575.548559][T16570] netlink: 'syz.3.3966': attribute type 4 has an invalid length. [ 575.556574][T16570] tc_dump_action: action bad kind [ 576.487983][T16600] syzkaller0: entered promiscuous mode [ 576.493869][T16600] syzkaller0: entered allmulticast mode [ 576.578704][T16595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.779589][T16614] ipvlan8: entered allmulticast mode [ 576.789110][T16614] batman_adv: batadv0: Adding interface: ipvlan8 [ 576.795637][T16614] batman_adv: batadv0: The MTU of interface ipvlan8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.795697][T16614] batman_adv: batadv0: Interface activated: ipvlan8 [ 576.819404][T14549] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 576.968853][T14549] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 576.970344][T14549] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 576.970370][T14549] usb 3-1: config 0 has no interface number 0 [ 576.977156][T14549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.977181][T14549] usb 3-1: Product: syz [ 576.977193][T14549] usb 3-1: Manufacturer: syz [ 576.977206][T14549] usb 3-1: SerialNumber: syz [ 576.995059][T14549] usb 3-1: config 0 descriptor?? [ 577.126549][T16628] syzkaller0: entered promiscuous mode [ 577.126596][T16628] syzkaller0: entered allmulticast mode [ 577.211383][T14549] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 577.221150][T14549] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 577.221436][T14549] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 577.221477][T14549] usb 3-1: media controller created [ 577.331545][T16632] vlan2: entered allmulticast mode [ 577.331586][T16632] bond0: entered allmulticast mode [ 577.331599][T16632] bond_slave_0: entered allmulticast mode [ 577.331615][T16632] bond_slave_1: entered allmulticast mode [ 577.791061][T16654] syzkaller0: entered promiscuous mode [ 577.791114][T16654] syzkaller0: entered allmulticast mode [ 577.981781][T16664] __nla_validate_parse: 15 callbacks suppressed [ 577.981860][T16664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4006'. [ 578.456830][T16681] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4014'. [ 578.590022][T16686] netlink: 'syz.3.4016': attribute type 4 has an invalid length. [ 578.590049][T16686] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4016'. [ 578.590083][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4016'. [ 578.590099][T16686] tc_dump_action: action bad kind [ 578.897962][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 579.048517][ T10] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 579.064704][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 579.064745][ T10] usb 4-1: config 0 has no interface number 0 [ 579.084572][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.084615][ T10] usb 4-1: Product: syz [ 579.084665][ T10] usb 4-1: Manufacturer: syz [ 579.084683][ T10] usb 4-1: SerialNumber: syz [ 579.126352][ T10] usb 4-1: config 0 descriptor?? [ 579.231472][T16716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4030'. [ 579.277888][T14133] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 579.352844][ T10] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 579.371803][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 579.428817][T14133] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 579.439799][T14133] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 579.439858][T14133] usb 1-1: config 0 has no interface number 0 [ 579.460616][T14133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.468907][T14133] usb 1-1: Product: syz [ 579.473209][T14133] usb 1-1: Manufacturer: syz [ 579.473229][T14133] usb 1-1: SerialNumber: syz [ 579.489058][T14133] usb 1-1: config 0 descriptor?? [ 579.702391][T16738] netlink: 'syz.4.4041': attribute type 1 has an invalid length. [ 579.716801][T14133] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 579.737134][T14133] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 579.825343][T16742] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4043'. [ 580.171715][T16747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4045'. [ 580.181785][T16747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4045'. [ 580.229327][T16749] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4046'. [ 580.229368][T16749] tc_dump_action: action bad kind [ 580.377184][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4049'. [ 580.760286][T16770] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001 [ 580.781743][T16772] syzkaller0: entered promiscuous mode [ 580.787322][T16772] syzkaller0: entered allmulticast mode [ 581.297989][T16780] Set syz1 is full, maxelem 6117 reached [ 581.851684][T14549] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.880418][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 581.880502][ T10] usb 4-1: media controller created [ 581.895962][T14133] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 581.896037][T14133] usb 1-1: media controller created [ 581.916238][ T5756] usb 2-1: USB disconnect, device number 37 [ 581.919472][T14549] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 581.958968][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 582.046730][T14133] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 582.068365][ T10] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 582.096891][ T5756] Unregistered device Abilis Systems DVB-Titan [ 582.098248][T14133] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 582.113693][ T5756] as10x_usb: device has been disconnected [ 582.134169][T14549] usb 3-1: USB disconnect, device number 30 [ 582.231744][ T10] usb 4-1: USB disconnect, device number 52 [ 582.271622][T14133] usb 1-1: USB disconnect, device number 31 [ 582.517979][T14549] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 582.597828][T14133] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 582.640273][T16820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 582.640310][T16820] IPv6: NLM_F_CREATE should be set when creating new route [ 582.669480][T14549] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 582.674288][T14549] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.674311][T14549] usb 3-1: config 0 has no interface number 0 [ 582.677538][T14549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.677561][T14549] usb 3-1: Product: syz [ 582.677573][T14549] usb 3-1: Manufacturer: syz [ 582.677586][T14549] usb 3-1: SerialNumber: syz [ 582.683856][T14549] usb 3-1: config 0 descriptor?? [ 582.749214][T14133] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 582.760267][T14133] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.760306][T14133] usb 1-1: config 0 has no interface number 0 [ 582.778362][T14133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.786502][T14133] usb 1-1: Product: syz [ 582.786542][T14133] usb 1-1: Manufacturer: syz [ 582.786558][T14133] usb 1-1: SerialNumber: syz [ 582.803190][T14133] usb 1-1: config 0 descriptor?? [ 582.897497][T14549] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 582.901600][ T5756] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 582.906255][T14549] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 582.906570][T14549] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 582.906611][T14549] usb 3-1: media controller created [ 582.922634][T14549] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 582.959791][T16826] vlan2: entered allmulticast mode [ 583.008241][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 583.041400][T14133] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 583.051026][ T5756] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 583.061640][T14133] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 583.061967][T14133] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 583.062010][T14133] usb 1-1: media controller created [ 583.089356][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.089402][ T5756] usb 5-1: Product: syz [ 583.089454][ T5756] usb 5-1: Manufacturer: syz [ 583.089471][ T5756] usb 5-1: SerialNumber: syz [ 583.092058][T14133] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.093129][T16828] __nla_validate_parse: 6 callbacks suppressed [ 583.093142][T16828] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4079'. [ 583.139958][ T5756] usb 5-1: config 0 descriptor?? [ 583.180405][ T10] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 583.183957][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.184006][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.213527][ T10] as10x_usb: device has been detected [ 583.214467][ T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 583.242379][ T10] usb 4-1: DVB: registering adapter 3 frontend 0 (Abilis Systems DVB-Titan)... [ 583.267695][T14133] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 583.284421][ T10] as10x_usb: error during firmware upload part1 [ 583.284995][ T10] Registered device Abilis Systems DVB-Titan [ 583.352408][T14133] usb 1-1: USB disconnect, device number 32 [ 583.392684][ T5756] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 583.590960][T16822] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4076'. [ 583.665028][T16838] netlink: 'syz.1.4084': attribute type 1 has an invalid length. [ 583.685492][T16838] bond1: entered promiscuous mode [ 583.685877][T16838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.796764][T16842] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4085'. [ 583.796791][T16842] tc_dump_action: action bad kind [ 583.983183][T14549] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 584.073767][T14549] usb 3-1: USB disconnect, device number 31 [ 584.605285][T16868] Set syz1 is full, maxelem 6117 reached [ 584.621325][ T5756] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 584.827911][T14549] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 584.978555][T14549] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 584.979537][T14549] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 584.979558][T14549] usb 1-1: config 0 has no interface number 0 [ 584.981593][T14549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.981614][T14549] usb 1-1: Product: syz [ 584.981627][T14549] usb 1-1: Manufacturer: syz [ 584.981639][T14549] usb 1-1: SerialNumber: syz [ 584.990604][T14549] usb 1-1: config 0 descriptor?? [ 585.197910][T14549] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 585.210104][T14549] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 585.210433][T14549] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 585.210478][T14549] usb 1-1: media controller created [ 585.240872][T14549] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 585.403861][T14549] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 585.478123][T14549] usb 1-1: USB disconnect, device number 33 [ 585.874071][T14133] usb 4-1: USB disconnect, device number 53 [ 585.903453][T14133] Unregistered device Abilis Systems DVB-Titan [ 585.906695][T14133] as10x_usb: device has been disconnected [ 586.461139][T14549] usb 5-1: USB disconnect, device number 46 [ 586.657973][ T5756] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 586.808622][ T5756] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 586.811768][ T5756] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.811818][ T5756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.846625][ T5756] as10x_usb: device has been detected [ 586.847409][ T5756] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 586.884211][ T5756] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 586.900354][ T5756] as10x_usb: error during firmware upload part1 [ 586.908219][ T5756] Registered device Abilis Systems DVB-Titan [ 587.117860][ T10] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 587.166892][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4144'. [ 587.176809][T16984] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4144'. [ 587.244385][T16988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4146'. [ 587.289712][T16989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.311412][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 587.314966][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.314991][ T10] usb 5-1: Product: syz [ 587.315003][ T10] usb 5-1: Manufacturer: syz [ 587.315016][ T10] usb 5-1: SerialNumber: syz [ 587.320533][ T10] usb 5-1: config 0 descriptor?? [ 587.525532][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 587.713145][T16993] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4148'. [ 587.723360][T16996] syzkaller0: entered promiscuous mode [ 587.723382][T16996] syzkaller0: entered allmulticast mode [ 587.779983][T16976] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4142'. [ 587.954455][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4155'. [ 587.966208][T17009] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4155'. [ 588.095540][T17017] syzkaller0: entered promiscuous mode [ 588.101303][T17017] syzkaller0: entered allmulticast mode [ 588.691549][T14549] usb 4-1: USB disconnect, device number 54 [ 588.736174][T14549] Unregistered device Abilis Systems DVB-Titan [ 588.742949][T14549] as10x_usb: device has been disconnected [ 588.865397][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 590.671488][ T10] usb 5-1: USB disconnect, device number 47 [ 591.155975][T17074] __nla_validate_parse: 1 callbacks suppressed [ 591.162981][T17074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4175'. [ 591.184416][T17074] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4175'. [ 591.230353][T17068] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4176'. [ 591.256594][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4173'. [ 591.515913][T17081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4179'. [ 591.687866][T14549] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 591.871216][T14549] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 591.881513][T14549] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.881576][T14549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.916453][T14549] as10x_usb: device has been detected [ 591.923033][T14549] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 591.947359][T14549] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 591.974291][T14549] as10x_usb: error during firmware upload part1 [ 591.987405][T14549] Registered device Abilis Systems DVB-Titan [ 592.170923][T17106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4191'. [ 592.261781][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4192'. [ 592.361864][T17114] netlink: 'syz.4.4194': attribute type 1 has an invalid length. [ 592.439843][T17114] bond1: entered promiscuous mode [ 592.440675][T17114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 592.661823][T17134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4203'. [ 593.481015][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4218'. [ 593.586073][T17163] Set syz1 is full, maxelem 6117 reached [ 593.764726][ T5743] usb 3-1: USB disconnect, device number 32 [ 593.807548][ T5743] Unregistered device Abilis Systems DVB-Titan [ 593.811106][ T5743] as10x_usb: device has been disconnected [ 594.003410][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4230'. [ 595.268298][T17226] Set syz1 is full, maxelem 6117 reached [ 595.287901][ T5743] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 595.448587][ T5743] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 595.459687][ T5743] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.470226][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.490756][ T5743] as10x_usb: device has been detected [ 595.497618][ T5743] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 595.519879][ T5743] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 595.535083][ T5743] as10x_usb: error during firmware upload part1 [ 595.535724][ T5743] Registered device Abilis Systems DVB-Titan [ 596.421946][T17289] __nla_validate_parse: 2 callbacks suppressed [ 596.435835][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4271'. [ 596.534691][T17293] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4273'. [ 596.724175][T17298] syzkaller0: entered promiscuous mode [ 596.724219][T17298] syzkaller0: entered allmulticast mode [ 597.055591][T17319] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4285'. [ 597.316345][ T9] usb 5-1: USB disconnect, device number 48 [ 597.339850][T17336] veth1_to_bond: entered allmulticast mode [ 597.344742][T17336] veth1_to_bond: entered promiscuous mode [ 597.345207][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4291'. [ 597.366867][T17336] veth1_to_bond (unregistering): left promiscuous mode [ 597.366940][T17336] veth1_to_bond (unregistering): left allmulticast mode [ 597.379878][ T9] Unregistered device Abilis Systems DVB-Titan [ 597.385666][ T9] as10x_usb: device has been disconnected [ 597.407556][T17336] bond0: (slave bond_slave_1): Releasing backup interface [ 597.766880][T17342] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4293'. [ 598.210039][T17349] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4298'. [ 598.238411][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 598.243102][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 598.243921][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 598.245301][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 598.245838][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 598.617069][ T9739] tipc: Disabling bearer [ 599.025627][T17355] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.033296][T17355] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.041441][T17355] bridge_slave_0: entered allmulticast mode [ 599.049844][T17355] bridge_slave_0: entered promiscuous mode [ 599.058978][T17355] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.066243][T17355] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.073969][T17355] bridge_slave_1: entered allmulticast mode [ 599.082324][T17355] bridge_slave_1: entered promiscuous mode [ 599.125527][T17355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.128973][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 599.146947][T17355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.192306][T17355] team0: Port device team_slave_0 added [ 599.201239][T17355] team0: Port device team_slave_1 added [ 599.205991][T17388] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4310'. [ 599.251090][T17355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.258643][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.283570][ T10] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 599.284524][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.284568][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.314347][T17355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.332208][T17355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.335888][ T10] as10x_usb: device has been detected [ 599.336650][ T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 599.349900][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.349944][T17355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.374060][ T10] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 599.436467][ T10] as10x_usb: error during firmware upload part1 [ 599.445356][ T10] Registered device Abilis Systems DVB-Titan [ 599.488646][T17355] hsr_slave_0: entered promiscuous mode [ 599.497366][T17355] hsr_slave_1: entered promiscuous mode [ 599.511540][T17355] debugfs: 'hsr0' already exists in 'hsr' [ 599.518884][T17355] Cannot create hsr debugfs directory [ 599.653757][T17398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4315'. [ 599.840559][T17355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.945664][T17411] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4320'. [ 599.998950][T17355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.104228][T17355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.185105][T17355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.262569][T17424] netlink: 'syz.2.4326': attribute type 1 has an invalid length. [ 600.291929][T17424] bond1: entered promiscuous mode [ 600.292382][T17424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.298354][ T5619] Bluetooth: hci3: command tx timeout [ 600.435717][T17355] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 600.452360][T17355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 600.461312][T17355] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 600.472119][T17355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 600.483794][T17355] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 600.496482][T17355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 600.505479][T17355] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 600.519937][T17355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 600.594863][T17441] xt_hashlimit: max too large, truncated to 1048576 [ 600.639387][T17355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.682265][T17355] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.692777][ T1349] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.692886][ T1349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.728767][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.728877][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.904762][T17355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.029319][T17355] veth0_vlan: entered promiscuous mode [ 601.050810][T17355] veth1_vlan: entered promiscuous mode [ 601.115776][T17355] veth0_macvtap: entered promiscuous mode [ 601.133404][T17355] veth1_macvtap: entered promiscuous mode [ 601.182437][T17355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.204498][ T9] usb 5-1: USB disconnect, device number 49 [ 601.206227][T17355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.240511][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.255698][ T9] Unregistered device Abilis Systems DVB-Titan [ 601.258962][ T9] as10x_usb: device has been disconnected [ 601.283691][ T1099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.284961][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.284996][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.392471][T17455] netlink: 'syz.0.4336': attribute type 1 has an invalid length. [ 601.426792][T17455] bond1: entered promiscuous mode [ 601.427250][T17455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 601.479700][ T1349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.490836][ T1349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.577297][ T1349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.577341][ T1349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.715448][T17466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4340'. [ 601.950576][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4348'. [ 602.086912][T17493] syzkaller0: entered promiscuous mode [ 602.086959][T17493] syzkaller0: entered allmulticast mode [ 602.388725][ T5619] Bluetooth: hci3: command tx timeout [ 602.402498][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4357'. [ 602.436194][T17504] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4358'. [ 602.518736][T17511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4363'. [ 602.868216][T17529] syzkaller0: entered promiscuous mode [ 602.868257][T17529] syzkaller0: entered allmulticast mode [ 602.992573][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4371'. [ 603.049659][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4375'. [ 603.153652][T17537] bridge0: port 3(wlan1) entered blocking state [ 603.153834][T17537] bridge0: port 3(wlan1) entered disabled state [ 603.154000][T17537] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 603.186698][T17537] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 603.790535][T17564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4386'. [ 603.821722][T17563] syzkaller0: entered promiscuous mode [ 603.821767][T17563] syzkaller0: entered allmulticast mode [ 604.044225][T17573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4388'. [ 604.458286][ T5619] Bluetooth: hci3: command tx timeout [ 604.794441][T17603] syzkaller0: entered promiscuous mode [ 604.794493][T17603] syzkaller0: entered allmulticast mode [ 604.867524][T17606] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4406'. [ 605.481182][T17641] syzkaller0: entered promiscuous mode [ 605.481239][T17641] syzkaller0: entered allmulticast mode [ 606.155608][T17654] bridge0: port 3(wlan1) entered blocking state [ 606.157328][T17654] bridge0: port 3(wlan1) entered disabled state [ 606.157531][T17654] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 606.188165][T17654] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode [ 606.200959][T17654] bridge0: port 3(wlan1) entered blocking state [ 606.201084][T17654] bridge0: port 3(wlan1) entered forwarding state [ 606.320445][T17660] syzkaller1: entered promiscuous mode [ 606.326118][T17660] syzkaller1: entered allmulticast mode [ 606.451983][T17666] syzkaller0: entered promiscuous mode [ 606.461707][T17666] syzkaller0: entered allmulticast mode [ 606.549157][ T5619] Bluetooth: hci3: command tx timeout [ 606.667862][T14549] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 606.841061][T14549] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 606.842309][T14549] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.842357][T14549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.893674][T14549] as10x_usb: device has been detected [ 606.898467][T14549] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 606.938431][ T12] bridge0: port 3(wlan1) entered disabled state [ 606.940556][T14549] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 607.003912][T14549] as10x_usb: error during firmware upload part1 [ 607.007460][T14549] Registered device Abilis Systems DVB-Titan [ 607.158889][T17699] syzkaller0: entered promiscuous mode [ 607.174322][T17699] syzkaller0: entered allmulticast mode [ 607.397373][T17709] __nla_validate_parse: 3 callbacks suppressed [ 607.406672][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4452'. [ 607.407893][T17712] netlink: 'syz.0.4455': attribute type 1 has an invalid length. [ 607.434637][T17712] bond2: entered promiscuous mode [ 607.435161][T17712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 607.551757][T17721] ip6tnl0: entered allmulticast mode [ 607.788282][T17734] syzkaller0: entered promiscuous mode [ 607.788311][T17734] syzkaller0: entered allmulticast mode [ 607.942432][T17742] netlink: 'syz.1.4467': attribute type 1 has an invalid length. [ 607.959971][T17742] bond2: entered promiscuous mode [ 607.960392][T17742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 608.726031][ T9] usb 4-1: USB disconnect, device number 55 [ 608.773238][ T9] Unregistered device Abilis Systems DVB-Titan [ 608.775166][ T9] as10x_usb: device has been disconnected [ 609.126874][T17773] netlink: 'syz.4.4479': attribute type 1 has an invalid length. [ 609.157317][T17773] bond2: entered promiscuous mode [ 609.162993][T17773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.176550][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4479'. [ 609.462921][T17792] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4487'. [ 609.987873][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 610.138776][ T9] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 610.149125][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.149188][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.184607][ T9] as10x_usb: device has been detected [ 610.192108][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 610.216935][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 610.232455][ T9] as10x_usb: error during firmware upload part1 [ 610.241097][ T9] Registered device Abilis Systems DVB-Titan [ 610.431414][T17816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4499'. [ 610.472397][T17818] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4497'. [ 610.652543][T17818] Set syz1 is full, maxelem 6117 reached [ 610.790104][T17837] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4507'. [ 610.795424][T17833] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4506'. [ 610.938402][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 611.075809][T17845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4510'. [ 611.079869][T17845] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4510'. [ 611.088498][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 611.089451][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 611.089471][ T9] usb 1-1: config 0 has no interface number 0 [ 611.091637][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.091658][ T9] usb 1-1: Product: syz [ 611.091670][ T9] usb 1-1: Manufacturer: syz [ 611.091682][ T9] usb 1-1: SerialNumber: syz [ 611.094395][ T9] usb 1-1: config 0 descriptor?? [ 611.097981][T17768] Bluetooth: hci5: command 0x0406 tx timeout [ 611.098079][T17768] Bluetooth: hci0: command 0x0406 tx timeout [ 611.346111][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 611.357999][T17857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4514'. [ 611.358179][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 611.358470][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 611.358512][ T9] usb 1-1: media controller created [ 611.396598][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 612.054606][T14133] usb 3-1: USB disconnect, device number 33 [ 612.121639][T14133] Unregistered device Abilis Systems DVB-Titan [ 612.127256][T14133] as10x_usb: device has been disconnected [ 612.436696][T17895] __nla_validate_parse: 5 callbacks suppressed [ 612.451400][T17895] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4531'. [ 612.460983][ T9] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 612.462591][T17829] ================================================================== ** replaying previous printk message ** [ 612.462591][T17829] ================================================================== [ 612.462603][T17829] BUG: KASAN: slab-out-of-bounds in ec168_i2c_xfer+0x4d4/0x630 [ 612.462643][T17829] Read of size 1 at addr ffff888029e3fc01 by task syz.0.4505/17829 [ 612.462658][T17829] [ 612.462679][T17829] CPU: 0 UID: 0 PID: 17829 Comm: syz.0.4505 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.462705][T17829] Tainted: [L]=SOFTLOCKUP [ 612.462712][T17829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.462732][T17829] Call Trace: [ 612.462742][T17829] [ 612.462750][T17829] dump_stack_lvl+0xe8/0x150 [ 612.462776][T17829] print_address_description+0x55/0x1e0 [ 612.462801][T17829] ? ec168_i2c_xfer+0x4d4/0x630 [ 612.462820][T17829] print_report+0x58/0x70 [ 612.462841][T17829] kasan_report+0x117/0x150 [ 612.462863][T17829] ? ec168_i2c_xfer+0x4d4/0x630 [ 612.462885][T17829] ec168_i2c_xfer+0x4d4/0x630 [ 612.462910][T17829] __i2c_transfer+0x7bf/0x1fe0 [ 612.462940][T17829] ? rt_mutex_lock_nested+0x167/0x1c0 [ 612.462959][T17829] ? i2c_transfer+0xc7/0x2d0 [ 612.462984][T17829] i2c_transfer+0x1cb/0x2d0 [ 612.463008][T17829] i2cdev_ioctl_rdwr+0x460/0x740 [ 612.463038][T17829] compat_i2cdev_ioctl+0x59f/0x5c0 [ 612.463067][T17829] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 612.463095][T17829] ? __fget_files+0x3a2/0x420 [ 612.463116][T17829] ? __fget_files+0x2a/0x420 [ 612.463140][T17829] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 612.463168][T17829] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 612.463187][T17829] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 612.463205][T17829] ? kmem_cache_free+0x182/0x650 [ 612.463225][T17829] ? __se_sys_futex_time32+0x3ab/0x440 [ 612.463253][T17829] ? rcu_is_watching+0x16/0xb0 [ 612.463288][T17829] __do_fast_syscall_32+0x27a/0x6a0 [ 612.463306][T17829] ? do_fast_syscall_32+0x33/0x70 [ 612.463323][T17829] ? asm_int80_emulation+0x1a/0x20 [ 612.463341][T17829] ? do_int80_emulation+0x299/0x500 [ 612.463359][T17829] ? trace_irq_disable+0x3b/0x140 [ 612.463377][T17829] do_fast_syscall_32+0x33/0x70 [ 612.463395][T17829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 612.463416][T17829] RIP: 0023:0xf708f0ec [ 612.463436][T17829] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 612.463453][T17829] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 612.463477][T17829] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 612.463490][T17829] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 612.463502][T17829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 612.463512][T17829] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 612.463523][T17829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 612.463541][T17829] [ 612.463549][T17829] [ 612.463553][T17829] Allocated by task 17829: [ 612.463562][T17829] kasan_save_track+0x3e/0x80 [ 612.463578][T17829] __kasan_kmalloc+0x93/0xb0 [ 612.463594][T17829] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 612.463619][T17829] memdup_user+0x2b/0xd0 [ 612.463634][T17829] i2cdev_ioctl_rdwr+0x1c6/0x740 [ 612.463658][T17829] compat_i2cdev_ioctl+0x59f/0x5c0 [ 612.463681][T17829] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 612.463697][T17829] __do_fast_syscall_32+0x27a/0x6a0 [ 612.463712][T17829] do_fast_syscall_32+0x33/0x70 [ 612.463727][T17829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 612.463747][T17829] [ 612.463752][T17829] The buggy address belongs to the object at ffff888029e3fc00 [ 612.463752][T17829] which belongs to the cache kmalloc-8 of size 8 [ 612.463766][T17829] The buggy address is located 0 bytes to the right of [ 612.463766][T17829] allocated 1-byte region [ffff888029e3fc00, ffff888029e3fc01) [ 612.463784][T17829] [ 612.463789][T17829] The buggy address belongs to the physical page: [ 612.463802][T17829] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29e3f [ 612.463818][T17829] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 612.463838][T17829] page_type: f5(slab) [ 612.463860][T17829] raw: 00fff00000000000 ffff88801b041500 dead000000000100 dead000000000122 [ 612.463875][T17829] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 612.463885][T17829] page dumped because: kasan: bad access detected [ 612.463898][T17829] page_owner tracks the page as allocated [ 612.463905][T17829] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9366086424 [ 612.463932][T17829] post_alloc_hook+0x1f9/0x250 [ 612.463956][T17829] get_page_from_freelist+0x2209/0x2280 [ 612.463972][T17829] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 612.463989][T17829] allocate_slab+0x7d/0x620 [ 612.464008][T17829] refill_objects+0x2d5/0x350 [ 612.464027][T17829] __pcs_replace_empty_main+0x2c8/0x6c0 [ 612.464046][T17829] __kmalloc_cache_noprof+0x39b/0x600 [ 612.464070][T17829] usb_control_msg+0x73/0x3e0 [ 612.464094][T17829] usb_get_descriptor+0xb1/0x3e0 [ 612.464118][T17829] usb_get_device_descriptor+0x6d/0xd0 [ 612.464132][T17829] register_root_hub+0x10f/0x5c0 [ 612.464153][T17829] usb_add_hcd+0xac7/0xf80 [ 612.464173][T17829] dummy_hcd_probe+0x134/0x270 [ 612.464190][T17829] platform_probe+0xf9/0x190 [ 612.464218][T17829] really_probe+0x254/0xae0 [ 612.464232][T17829] __driver_probe_device+0x1e8/0x360 [ 612.464247][T17829] page_owner free stack trace missing [ 612.464254][T17829] [ 612.464265][T17829] Memory state around the buggy address: [ 612.464275][T17829] ffff888029e3fb00: 06 fc fc fc 06 fc fc fc 06 fc fc fc 05 fc fc fc [ 612.464286][T17829] ffff888029e3fb80: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 612.464299][T17829] >ffff888029e3fc00: 01 fc fc fc 05 fc fc fc 00 fc fc fc 05 fc fc fc [ 612.464309][T17829] ^ [ 612.464318][T17829] ffff888029e3fc80: 05 fc fc fc 06 fc fc fc 07 fc fc fc 06 fc fc fc [ 612.464330][T17829] ffff888029e3fd00: 06 fc fc fc 05 fc fc fc 06 fc fc fc 06 fc fc fc [ 612.464339][T17829] ================================================================== [ 612.475760][T17829] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 613.073965][T17829] CPU: 0 UID: 0 PID: 17829 Comm: syz.0.4505 Tainted: G L syzkaller #0 PREEMPT(full) [ 613.084895][T17829] Tainted: [L]=SOFTLOCKUP [ 613.089209][T17829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.099257][T17829] Call Trace: [ 613.102530][T17829] [ 613.105452][T17829] vpanic+0x56d/0xa60 [ 613.109435][T17829] ? rcu_is_watching+0x16/0xb0 [ 613.114203][T17829] ? __pfx_vpanic+0x10/0x10 [ 613.118721][T17829] ? __pfx___schedule+0x10/0x10 [ 613.123574][T17829] panic+0xc5/0xd0 [ 613.127298][T17829] ? __pfx_panic+0x10/0x10 [ 613.131718][T17829] ? preempt_schedule_common+0x7f/0xd0 [ 613.137178][T17829] ? ec168_i2c_xfer+0x4d4/0x630 [ 613.142028][T17829] check_panic_on_warn+0x89/0xb0 [ 613.146960][T17829] ? ec168_i2c_xfer+0x4d4/0x630 [ 613.151806][T17829] end_report+0x73/0x170 [ 613.156041][T17829] ? ec168_i2c_xfer+0x4d4/0x630 [ 613.160887][T17829] kasan_report+0x128/0x150 [ 613.165390][T17829] ? ec168_i2c_xfer+0x4d4/0x630 [ 613.170245][T17829] ec168_i2c_xfer+0x4d4/0x630 [ 613.174919][T17829] __i2c_transfer+0x7bf/0x1fe0 [ 613.179692][T17829] ? rt_mutex_lock_nested+0x167/0x1c0 [ 613.185065][T17829] ? i2c_transfer+0xc7/0x2d0 [ 613.189667][T17829] i2c_transfer+0x1cb/0x2d0 [ 613.194174][T17829] i2cdev_ioctl_rdwr+0x460/0x740 [ 613.199113][T17829] compat_i2cdev_ioctl+0x59f/0x5c0 [ 613.204252][T17829] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 613.209886][T17829] ? __fget_files+0x3a2/0x420 [ 613.214563][T17829] ? __fget_files+0x2a/0x420 [ 613.219153][T17829] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 613.224705][T17829] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 613.230167][T17829] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 613.236139][T17829] ? kmem_cache_free+0x182/0x650 [ 613.241069][T17829] ? __se_sys_futex_time32+0x3ab/0x440 [ 613.246524][T17829] ? rcu_is_watching+0x16/0xb0 [ 613.251282][T17829] __do_fast_syscall_32+0x27a/0x6a0 [ 613.256469][T17829] ? do_fast_syscall_32+0x33/0x70 [ 613.261478][T17829] ? asm_int80_emulation+0x1a/0x20 [ 613.266579][T17829] ? do_int80_emulation+0x299/0x500 [ 613.271763][T17829] ? trace_irq_disable+0x3b/0x140 [ 613.276778][T17829] do_fast_syscall_32+0x33/0x70 [ 613.281619][T17829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 613.287940][T17829] RIP: 0023:0xf708f0ec [ 613.291996][T17829] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 613.311591][T17829] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 613.320005][T17829] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 613.327965][T17829] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 613.335923][T17829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 613.343880][T17829] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 613.351839][T17829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 613.359804][T17829] [ 613.362971][T17829] Kernel Offset: disabled [ 613.367284][T17829] Rebooting in 86400 seconds..