last executing test programs: 2m21.640486166s ago: executing program 2 (id=219): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x3492}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x5}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd28, 0x255fdbfd, {0x0, 0x0, 0x0, r1, {0xfff2, 0x2}, {0x0, 0xfff3}, {0xfff1, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xffe0}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x0, 0x7, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045005}, 0x0) 2m21.49841992s ago: executing program 2 (id=224): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x10, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={0x0, 0xc9, 0x2, 0x4, 0x1000, 0x0, 0x1, 0x5, {0x0, @in6={{0xa, 0x4e23, 0x7, @local, 0x4fe9}}, 0x3dd, 0xfffffffc, 0x8001, 0x5, 0xffffffff}}, &(0x7f0000000200)=0xb0) 2m21.358633063s ago: executing program 2 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0x8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m20.988175692s ago: executing program 2 (id=232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x400, 0x1, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x64, 0x0, 0xfd, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 2m20.767609007s ago: executing program 2 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m20.330963798s ago: executing program 2 (id=242): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pK \x00'}, 0x20) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000140)=[{0x2, 0x3, {0x1, 0xff}, {0x0, 0xf}, 0x1, 0x1}, {0x2, 0x400000000000000, {0x2, 0x0, 0x4}, {0x2, 0xff, 0x1}, 0x1, 0x2}, {0x1, 0x2, {0x2, 0x1, 0x4}, {0x2, 0x1}, 0x2, 0xfe}, {0x1, 0x2, {0x2, 0x1}, {0x2, 0x0, 0x2}, 0x0, 0xff}], 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3f, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELTABLE={0x124, 0x2, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xe2, 0x6, "0f47e6f549709fabf58dcdb2b92ccbe55b97cd3f1d79671775094f8f643140cf3fb497f20d9bf4e9fc841b18d4d796bc1e40510cabb95bc7105dfd07039506fd7bb0ed98d59a0786798dc56dcf2c6ddbc7a3d6062a0bafe52ba52e5213471088669ee7e7570a10afa53732a517170d1f17f7771cb3ca308bf7f123720993d6cd2c95e31acdad4c0d583dd38a498ce6fcaeb0bef9d49bd4054db467deff7bec4813ff54384b21eaf8950acbc479bac6472ede26790e29f9fd0c3a012b0a28515204466dfaf5bb28f541fdee7dbe02faaf62bede11444b8c51098841f15e11"}]}, @NFT_MSG_DELFLOWTABLE={0x54, 0x18, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7fff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1cc}, 0x1, 0x0, 0x0, 0x24004000}, 0x24000010) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xe, 0x1a6893ee, 0x8001, 0x1000, r0, 0x3, '\x00', r6, r7, 0x4, 0x0, 0x5, 0xe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110c7000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m5.189840677s ago: executing program 32 (id=242): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pK \x00'}, 0x20) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000140)=[{0x2, 0x3, {0x1, 0xff}, {0x0, 0xf}, 0x1, 0x1}, {0x2, 0x400000000000000, {0x2, 0x0, 0x4}, {0x2, 0xff, 0x1}, 0x1, 0x2}, {0x1, 0x2, {0x2, 0x1, 0x4}, {0x2, 0x1}, 0x2, 0xfe}, {0x1, 0x2, {0x2, 0x1}, {0x2, 0x0, 0x2}, 0x0, 0xff}], 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3f, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELTABLE={0x124, 0x2, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xe2, 0x6, "0f47e6f549709fabf58dcdb2b92ccbe55b97cd3f1d79671775094f8f643140cf3fb497f20d9bf4e9fc841b18d4d796bc1e40510cabb95bc7105dfd07039506fd7bb0ed98d59a0786798dc56dcf2c6ddbc7a3d6062a0bafe52ba52e5213471088669ee7e7570a10afa53732a517170d1f17f7771cb3ca308bf7f123720993d6cd2c95e31acdad4c0d583dd38a498ce6fcaeb0bef9d49bd4054db467deff7bec4813ff54384b21eaf8950acbc479bac6472ede26790e29f9fd0c3a012b0a28515204466dfaf5bb28f541fdee7dbe02faaf62bede11444b8c51098841f15e11"}]}, @NFT_MSG_DELFLOWTABLE={0x54, 0x18, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7fff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1cc}, 0x1, 0x0, 0x0, 0x24004000}, 0x24000010) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xe, 0x1a6893ee, 0x8001, 0x1000, r0, 0x3, '\x00', r6, r7, 0x4, 0x0, 0x5, 0xe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110c7000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 5.241391525s ago: executing program 0 (id=1498): socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000780)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r4}, 0x10) r5 = socket(0x11, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) getpeername(0xffffffffffffffff, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000000)=0x22) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r6) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="011102730000003da26142000000000033c1b2a80630e1153226f922319b209d5f000000000000e3f7c4c8ae18e7d0ba2a020bad34d55ed77de34110a743bc7f9896c76c894c77734d7471", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ce2a4fa77baa108b"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc0d4) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {&(0x7f0000001880)=""/193, 0xc1}], 0x4}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200080286dd608a35f200140600fc01000000000064bc946a0000000001fe80001a0000000000000000000000aa00004e222448af16520bff4703b758e2190acaa0518c32b90a8cd4d30ecb0f17dd68732e7a527e2076099c06d73f0c836531bf08c2da30e287a06548bbbb1340085d3deccbcfb1600845a20b555e58d59069d8c412c5f1a19af6002de550502937fd99cb506fa76e821d08d3c9477a01f9433d47c9ead61f544205f214fa96642e96b32e95f68aedbd0d5de9d55065bcdb265913609765f91f3770486d4b22b501c362480339ba98d027bc4dcc30ecd2d9424e3635d7277f4cfb25cc2c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) 4.637944069s ago: executing program 1 (id=1504): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r2, 0x0, 0x20000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) 4.550816191s ago: executing program 0 (id=1505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0x8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.407490595s ago: executing program 1 (id=1508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 4.224396099s ago: executing program 0 (id=1510): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f000000ab00)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, 0x0) 3.985290275s ago: executing program 1 (id=1514): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008e80), 0x0, 0x40) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 2.813369483s ago: executing program 4 (id=1521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)='d', 0x1}], 0x1}, 0x0) 2.49591031s ago: executing program 4 (id=1524): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x11, 0x2, 0xffc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "0db6542e8f8a5b5766f2ac3114f416e8650d33d6047fadff3af1aae26071376071a5a5068ff8afcccad827e1733feb1322833d40f069a1d592402a4bde185621"}}}}, 0x0) 2.482576201s ago: executing program 0 (id=1525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="400007cb243f577aba0000000000001701000002ffff00280000b55c4a9424c700e58b312d00bd19a432ebf20eb0a0ee39d005e869fe74b984369c3e0ef11fb4150c4da6b474c7b546d0a905d89e020000000e88e49ab69508095e8537750586"], 0x40, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d1", 0x87}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="8c87", 0x2}], 0x1}, 0x48015) sendmsg(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000200)="0f", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4a}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.255963896s ago: executing program 4 (id=1527): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x880) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x50, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x6}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x11) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) 2.034842202s ago: executing program 4 (id=1529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc47f, 0xd, 0xfff, 0xfffffffa, 0x9ca0}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20002000}, 0x0) 1.583151112s ago: executing program 0 (id=1532): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x10}}], 0x30, 0x20004104}}], 0x1, 0x40) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x13f, 0xc}}, 0x20) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r6, 0x7c81, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000300)={'team0\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x0, 0xd8a, 0x0, 0x2, 0x8, 0x5, 0x3, 0x80000001}}) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b", 0x8a}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6ba", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec919157824087", 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000840)="ab65faa98379b3ed", 0x8}, {0x0}], 0x3}}], 0x5, 0x2090) 1.517463034s ago: executing program 4 (id=1533): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/31, 0x1f) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.517079394s ago: executing program 3 (id=1534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)='d', 0x1}], 0x1}, 0x0) 1.332606899s ago: executing program 4 (id=1537): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) unshare(0x64000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000b80)=ANY=[@ANYBLOB="66696c746550000000000000000000000000000000000000000000000000000004"], &(0x7f0000000bc0)=0x2c) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b9a48f10b1134200c9070102030109022400010100100009041302028367160009050402000200fa000905810b40", @ANYRESDEC], 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRES32], 0x1, 0x1fa, &(0x7f0000000940)="$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") chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_usb_connect(0x0, 0x2e4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 1.129190493s ago: executing program 3 (id=1538): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x11, 0x2, 0xffc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "0db6542e8f8a5b5766f2ac3114f416e8650d33d6047fadff3af1aae26071376071a5a5068ff8afcccad827e1733feb1322833d40f069a1d592402a4bde185621"}}}}, 0x0) 963.603808ms ago: executing program 1 (id=1540): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000780)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r6}, 0x10) r7 = socket(0x11, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) getpeername(0xffffffffffffffff, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000000)=0x22) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r8) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="011102730000003da26142000000000033c1b2a80630e1153226f922319b209d5f000000000000e3f7c4c8ae18e7d0ba2a020bad34d55ed77de34110a743bc7f9896c76c894c77734d7471", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ce2a4fa77baa108b"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc0d4) recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {&(0x7f0000001880)=""/193, 0xc1}], 0x4}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200080286dd608a35f200140600fc01000000000064bc946a0000000001fe80001a0000000000000000000000aa00004e222448af16520bff4703b758e2190acaa0518c32b90a8cd4d30ecb0f17dd68732e7a527e2076099c06d73f0c836531bf08c2da30e287a06548bbbb1340085d3deccbcfb1600845a20b555e58d59069d8c412c5f1a19af6002de550502937fd99cb506fa76e821d08d3c9477a01f9433d47c9ead61f544205f214fa96642e96b32e95f68aedbd0d5de9d55065bcdb265913609765f91f3770486d4b22b501c362480339ba98d027bc4dcc30ecd2d9424e3635d7277f4cfb25cc2c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) 958.622668ms ago: executing program 3 (id=1541): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884) 834.313541ms ago: executing program 5 (id=1542): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000000), &(0x7f0000000600)=@udp=r1, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r3}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xd4b, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0xd4b, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}, "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"}}}}}}}, 0x0) 725.878013ms ago: executing program 3 (id=1543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc47f, 0xd, 0xfff, 0xfffffffa, 0x9ca0}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) 720.495694ms ago: executing program 5 (id=1544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b700"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x1138, &(0x7f0000001900)={@empty, @local, @val={@void, {0x8100, 0x1, 0x0, 0x803}}, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "67ba16", 0x10fe, 0x6, 0xff, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x87, 0x1fb, '\x00', [@generic={0x0, 0xf99, "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"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0xf01}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @private2}]}, @fragment={0x84, 0x0, 0xae, 0x1, 0x0, 0x5, 0x66}, @srh={0x88, 0x10, 0x4, 0x8, 0x4d, 0x48, 0x2, [@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, @remote, @private0, @mcast2, @private2, @mcast1, @private2]}, @routing={0xc, 0x8, 0x0, 0x8, 0x0, [@empty, @mcast1, @local, @loopback]}, @fragment={0x2f, 0x0, 0x8f, 0x1, 0x0, 0x0, 0x64}, @hopopts={0x3b}, @routing={0x29, 0x0, 0x0, 0x40}], @payload_mcast={{{{{{0x2e, 0x0, 0x1, 0x0, 0x1, 0xb, 0x1, 0x2, 0x74e5, 0x0, 0x3, 0x4, 0x3, 0x1, 0x9, 0x2066, 0x2, 0x4e21, 0x4e24}, 0x1}, 0x1}, 0x2}}, [0x0, 0x0]}}}}}}, 0x0) 627.265415ms ago: executing program 5 (id=1545): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 552.283877ms ago: executing program 1 (id=1546): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r1, 0x0, 0x20000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) 478.883629ms ago: executing program 3 (id=1547): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 478.679179ms ago: executing program 5 (id=1548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)='d', 0x1}], 0x1}, 0x0) 424.80314ms ago: executing program 1 (id=1549): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x34, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x1048) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) socket$inet6(0xa, 0x3, 0x87) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x4c}}, 0x884) 396.378701ms ago: executing program 3 (id=1550): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008e80), 0x0, 0x40) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 226.765025ms ago: executing program 0 (id=1551): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x11, 0x2, 0xffc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "0db6542e8f8a5b5766f2ac3114f416e8650d33d6047fadff3af1aae26071376071a5a5068ff8afcccad827e1733feb1322833d40f069a1d592402a4bde185621"}}}}, 0x0) 71.566249ms ago: executing program 5 (id=1552): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x880) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x50, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x6}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x11) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045005}, 0x0) 0s ago: executing program 5 (id=1553): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884) kernel console output (not intermixed with test programs): bearer [ 100.604737][ T5553] tipc: Disabling bearer [ 100.667371][ T5507] loop3: detected capacity change from 0 to 8 [ 100.862557][ T5507] udc-core: couldn't find an available UDC or it's busy [ 100.869643][ T5507] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 100.881392][ T1108] usb 4-1: USB disconnect, device number 2 [ 100.887522][ T1412] usb 4-1: Failed to submit usb control message: -71 [ 100.904981][ T1412] usb 4-1: unable to send the bmi data to the device: -71 [ 100.934977][ T1412] usb 4-1: unable to get target info from device [ 100.941371][ T1412] usb 4-1: could not get target info (-71) [ 100.953031][ T1412] usb 4-1: could not probe fw (-71) [ 101.017680][ T5562] netlink: 'syz.1.513': attribute type 1 has an invalid length. [ 101.137046][ T5562] bond6: (slave veth11): Enslaving as an active interface with a down link [ 101.186246][ T5567] bond4: (slave veth0_to_bond): Releasing active interface [ 101.205643][ T5567] bond6: (slave veth0_to_bond): making interface the new active one [ 101.216407][ T5567] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 101.531940][ T5584] device syzkaller0 entered promiscuous mode [ 101.596242][ T5565] chnl_net:caif_netlink_parms(): no params data found [ 101.671751][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 101.814814][ T5593] tipc: Started in network mode [ 101.819760][ T5593] tipc: Node identity f2c5aa807e53, cluster identity 4711 [ 101.828096][ T5593] tipc: Enabled bearer , priority 0 [ 101.847229][ T5593] device syzkaller0 entered promiscuous mode [ 101.857841][ T5590] device syzkaller0 entered promiscuous mode [ 101.917793][ T5593] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 101.942212][ T5565] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.949717][ T5565] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.958336][ T5565] device bridge_slave_0 entered promiscuous mode [ 101.968368][ T5592] tipc: Resetting bearer [ 101.983315][ T5592] tipc: Disabling bearer [ 102.004991][ T5605] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 102.027983][ T5565] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.038572][ T5565] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.047319][ T5565] device bridge_slave_1 entered promiscuous mode [ 102.074994][ T5602] device syzkaller0 entered promiscuous mode [ 102.149934][ T5605] bond6: (slave veth0_to_bond): Releasing active interface [ 102.223705][ T5565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.241136][ T5565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.365124][ T5565] team0: Port device team_slave_0 added [ 102.384181][ T5565] team0: Port device team_slave_1 added [ 102.493952][ T5565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.500965][ T5565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.544969][ T5565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.565720][ T5565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.577259][ T5565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.646524][ T5565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.860020][ T5565] device hsr_slave_0 entered promiscuous mode [ 102.905287][ T5565] device hsr_slave_1 entered promiscuous mode [ 102.927585][ T5565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.977071][ T5565] Cannot create hsr debugfs directory [ 103.021305][ T5640] device syzkaller0 entered promiscuous mode [ 103.142411][ T5640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 103.222412][ T4226] Bluetooth: hci5: command 0x0409 tx timeout [ 103.457786][ T5565] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.497173][ T5565] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.536358][ T5565] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.586496][ T5565] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.618249][ T5654] netlink: 'syz.3.539': attribute type 1 has an invalid length. [ 103.838785][ T5654] bond3: (slave veth0_to_bond): Releasing active interface [ 103.965916][ T5565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.021625][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.043040][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.084476][ T5565] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.140287][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.160420][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.179930][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.187105][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.232833][ T5673] device syzkaller0 entered promiscuous mode [ 104.257680][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.283011][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.311737][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.352889][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.360014][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.473471][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.485553][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.509269][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.531012][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.541787][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.550908][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.560723][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.597183][ T5683] tipc: Enabled bearer , priority 0 [ 104.613801][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.637532][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.662829][ T4226] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.677756][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.693327][ T1412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.705883][ T5565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.714769][ T5683] device syzkaller0 entered promiscuous mode [ 104.728871][ T5685] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 104.759157][ T5682] tipc: Resetting bearer [ 104.800650][ T5682] tipc: Disabling bearer [ 104.826852][ T5687] device syzkaller0 entered promiscuous mode [ 104.847522][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 104.948181][ T4226] usb 1-1: Using ep0 maxpacket: 32 [ 105.072674][ T4226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.110162][ T4226] usb 1-1: config 0 has no interfaces? [ 105.117395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.156821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.202487][ T5565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.315342][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 105.332740][ T4226] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.347266][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.377447][ T4226] usb 1-1: Product: syz [ 105.387025][ T4226] usb 1-1: Manufacturer: syz [ 105.422321][ T4226] usb 1-1: SerialNumber: syz [ 105.467588][ T4226] usb 1-1: config 0 descriptor?? [ 105.739912][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.777510][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.844085][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.872175][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.901791][ T5565] device veth0_vlan entered promiscuous mode [ 105.914897][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.935482][ T5719] dccp_v6_rcv: dropped packet with invalid checksum [ 105.954756][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.979769][ T5565] device veth1_vlan entered promiscuous mode [ 106.017214][ T5721] device syzkaller0 entered promiscuous mode [ 106.050002][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.068771][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.082978][ T5721] tipc: Enabling of bearer rejected, failed to enable media [ 106.112664][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.123901][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.147741][ T5724] tipc: Enabled bearer , priority 0 [ 106.160501][ T5565] device veth0_macvtap entered promiscuous mode [ 106.198304][ T5724] device syzkaller0 entered promiscuous mode [ 106.210139][ T5565] device veth1_macvtap entered promiscuous mode [ 106.230345][ T5724] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 106.268997][ T5723] tipc: Resetting bearer [ 106.349771][ T5723] tipc: Disabling bearer [ 106.376143][ T5565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.395138][ T5565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.410072][ T5565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.425289][ T5565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.441757][ T5565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.460992][ T5565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.471337][ T5565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.489993][ T5565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.500396][ T5565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.527784][ T5565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.545047][ T5565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.565118][ T5730] device syzkaller0 entered promiscuous mode [ 106.576553][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.586705][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.595638][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.605637][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.638319][ T5565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.657375][ T5565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.681544][ T5565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.701464][ T5565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.713940][ T5565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.730037][ T5565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.748041][ T5565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.767257][ T5565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.779906][ T5565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.799516][ T5565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.813034][ T5565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.820674][ T5728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 106.868388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.881323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.899477][ T5565] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.910213][ T5565] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.919742][ T5565] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.928923][ T5565] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.107930][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.132200][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.156117][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.220325][ T5742] device syzkaller0 entered promiscuous mode [ 107.240862][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.264340][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.307221][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.383867][ T4228] Bluetooth: hci5: command 0x040f tx timeout [ 107.437749][ T4229] usb 1-1: USB disconnect, device number 2 [ 107.785847][ T5761] device syzkaller0 entered promiscuous mode [ 107.801397][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 108.034782][ T5767] device syzkaller0 entered promiscuous mode [ 108.394628][ T4229] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.332817][ T5790] device syzkaller0 entered promiscuous mode [ 109.342590][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 109.355681][ T5790] tipc: Enabling of bearer rejected, failed to enable media [ 109.462723][ T4229] usb 4-1: config 1 has an invalid interface number: 19 but max is 0 [ 109.478549][ T4229] usb 4-1: config 1 has no interface number 0 [ 109.482035][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 109.487965][ T4229] usb 4-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 109.509590][ T4229] usb 4-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 109.521973][ T4229] usb 4-1: config 1 interface 19 has no altsetting 0 [ 109.623578][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.648122][ T5797] bond5: (slave veth0_to_bond): Releasing active interface [ 109.712666][ T4229] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 109.721791][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.754524][ T5799] device syzkaller0 entered promiscuous mode [ 109.761563][ T4229] usb 4-1: Product: syz [ 109.772514][ T4229] usb 4-1: Manufacturer: syz [ 109.777176][ T4229] usb 4-1: SerialNumber: syz [ 109.783386][ T5799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 109.854141][ T4229] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 109.879982][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 110.019271][ T1108] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 110.028361][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.047076][ T5769] loop3: detected capacity change from 0 to 8 [ 110.052709][ T1108] usb 1-1: config 0 has no interface number 0 [ 110.069819][ T1108] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.134845][ T5769] SQUASHFS error: xz decompression failed, data probably corrupt [ 110.143023][ T5769] SQUASHFS error: Failed to read block 0xa8: -5 [ 110.149316][ T5769] SQUASHFS error: Unable to read data cache entry [a8] [ 110.156455][ T5769] SQUASHFS error: Unable to read page, block a8, size 54 [ 110.164553][ T5769] SQUASHFS error: Unable to read data cache entry [a8] [ 110.172336][ T5769] SQUASHFS error: Unable to read page, block a8, size 54 [ 110.180765][ T5769] SQUASHFS error: Unable to read data cache entry [a8] [ 110.187755][ T5769] SQUASHFS error: Unable to read page, block a8, size 54 [ 110.198839][ T5769] SQUASHFS error: xz decompression failed, data probably corrupt [ 110.206768][ T5769] SQUASHFS error: Failed to read block 0xa8: -5 [ 110.215557][ T5769] SQUASHFS error: xz decompression failed, data probably corrupt [ 110.223416][ T5769] SQUASHFS error: Failed to read block 0xa8: -5 [ 110.232547][ T26] audit: type=1800 audit(1788093826.197:2): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.574" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 110.312667][ T1108] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 110.332021][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.360021][ T1108] usb 1-1: Product: syz [ 110.364934][ T1108] usb 1-1: Manufacturer: syz [ 110.369618][ T1108] usb 1-1: SerialNumber: syz [ 110.376666][ T5809] tipc: Started in network mode [ 110.381591][ T5809] tipc: Node identity 6ab217719e69, cluster identity 4711 [ 110.398609][ T1108] usb 1-1: config 0 descriptor?? [ 110.403198][ T5809] tipc: Enabled bearer , priority 0 [ 110.411350][ T5807] device syzkaller0 entered promiscuous mode [ 110.426150][ T5810] device syzkaller0 entered promiscuous mode [ 110.444529][ T1108] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 110.486713][ T5809] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 110.504239][ T5808] tipc: Resetting bearer [ 110.530722][ T5808] tipc: Disabling bearer [ 110.642634][ T5812] device syzkaller0 entered promiscuous mode [ 110.652810][ T1108] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 110.661606][ T1108] quatech2: probe of 1-1:0.51 failed with error -8 [ 110.834773][ T5786] usb 4-1: Failed to submit usb control message: -71 [ 110.855855][ T5786] usb 4-1: unable to send the bmi data to the device: -71 [ 111.134018][ T5786] usb 4-1: unable to get target info from device [ 111.150299][ T21] usb 1-1: USB disconnect, device number 3 [ 111.360380][ T5786] usb 4-1: could not get target info (-71) [ 111.522950][ T4256] usb 4-1: USB disconnect, device number 3 [ 111.538951][ T5786] usb 4-1: could not probe fw (-71) [ 111.863296][ T5832] device syzkaller0 entered promiscuous mode [ 111.877961][ T5832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 111.980641][ T5842] device syzkaller0 entered promiscuous mode [ 112.254421][ T5850] device syzkaller0 entered promiscuous mode [ 112.872521][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.192718][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 113.312953][ T4230] usb 1-1: config 1 has an invalid interface number: 19 but max is 0 [ 113.375555][ T4230] usb 1-1: config 1 has no interface number 0 [ 113.464454][ T4230] usb 1-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 113.482950][ T4230] usb 1-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 113.500874][ T4230] usb 1-1: config 1 interface 19 has no altsetting 0 [ 113.713633][ T4230] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 113.764804][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.800533][ T4230] usb 1-1: Product: syz [ 113.805916][ T4230] usb 1-1: Manufacturer: syz [ 113.810852][ T4230] usb 1-1: SerialNumber: syz [ 113.899514][ T5882] device syzkaller0 entered promiscuous mode [ 113.943873][ T4230] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 114.088283][ T5859] loop0: detected capacity change from 0 to 8 [ 114.149329][ T5859] SQUASHFS error: xz decompression failed, data probably corrupt [ 114.157246][ T5859] SQUASHFS error: Failed to read block 0xa8: -5 [ 114.164452][ T5859] SQUASHFS error: Unable to read data cache entry [a8] [ 114.171400][ T5859] SQUASHFS error: Unable to read page, block a8, size 54 [ 114.179342][ T5859] SQUASHFS error: Unable to read data cache entry [a8] [ 114.186822][ T5859] SQUASHFS error: Unable to read page, block a8, size 54 [ 114.194728][ T5859] SQUASHFS error: Unable to read data cache entry [a8] [ 114.201628][ T5859] SQUASHFS error: Unable to read page, block a8, size 54 [ 114.210182][ T5859] SQUASHFS error: xz decompression failed, data probably corrupt [ 114.218121][ T5859] SQUASHFS error: Failed to read block 0xa8: -5 [ 114.225529][ T5859] SQUASHFS error: xz decompression failed, data probably corrupt [ 114.233512][ T5859] SQUASHFS error: Failed to read block 0xa8: -5 [ 114.240123][ T26] audit: type=1800 audit(1788093830.207:3): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.605" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 114.330341][ T5893] device syzkaller0 entered promiscuous mode [ 114.402004][ T5893] tipc: Enabling of bearer rejected, failed to enable media [ 114.434346][ T5897] device syzkaller0 entered promiscuous mode [ 114.784707][ T5822] usb 1-1: Failed to submit usb control message: -71 [ 114.791721][ T5822] usb 1-1: unable to send the bmi data to the device: -71 [ 114.804646][ T4228] usb 1-1: USB disconnect, device number 4 [ 114.849244][ T5822] usb 1-1: unable to get target info from device [ 114.862401][ T5822] usb 1-1: could not get target info (-71) [ 114.900062][ T5822] usb 1-1: could not probe fw (-71) [ 116.171881][ T5922] device syzkaller0 entered promiscuous mode [ 116.385075][ T5935] device syzkaller0 entered promiscuous mode [ 117.582540][ T5928] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 118.273740][ T5975] device syzkaller0 entered promiscuous mode [ 118.352507][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 118.472677][ T5928] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 118.480862][ T5928] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.509586][ T5928] usb 6-1: config 0 has no interface number 0 [ 118.522471][ T5928] usb 6-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.559540][ T5984] device syzkaller0 entered promiscuous mode [ 119.596625][ T5928] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 119.630262][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.646439][ T5928] usb 6-1: Product: syz [ 119.650823][ T5928] usb 6-1: Manufacturer: syz [ 119.666910][ T5928] usb 6-1: SerialNumber: syz [ 119.676817][ T5928] usb 6-1: config 0 descriptor?? [ 119.726995][ T5928] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 119.904355][ T5784] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 119.932743][ T5928] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 119.939750][ T5928] quatech2: probe of 6-1:0.51 failed with error -8 [ 120.161286][ T21] usb 6-1: USB disconnect, device number 2 [ 120.819866][ T5783] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 121.025406][ T5784] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 121.130756][ T6024] device syzkaller0 entered promiscuous mode [ 121.288813][ T6026] netlink: 36 bytes leftover after parsing attributes in process `syz.5.656'. [ 121.324005][ T6030] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 121.447917][ T6039] bond4: (slave veth0_to_bond): making interface the new active one [ 121.567092][ T6039] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 121.718301][ T6032] bond4: (slave veth7): Enslaving as an active interface with a down link [ 121.730437][ T6036] device syzkaller0 entered promiscuous mode [ 121.872826][ T6051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.880479][ T6051] IPv6: NLM_F_CREATE should be set when creating new route [ 122.058998][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 122.319157][ T6030] device macvlan2 entered promiscuous mode [ 122.322579][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.334867][ T6030] device bond4 entered promiscuous mode [ 122.340468][ T6030] device veth0_to_bond entered promiscuous mode [ 122.347500][ T6030] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.356816][ T6030] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 122.373680][ T6030] device bond4 left promiscuous mode [ 122.379020][ T6030] device veth0_to_bond left promiscuous mode [ 122.430039][ T6050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.659780][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 122.802669][ T1108] usb 2-1: config 1 has an invalid interface number: 19 but max is 0 [ 122.810861][ T1108] usb 2-1: config 1 has no interface number 0 [ 122.837511][ T1108] usb 2-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 123.067537][ T1108] usb 2-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 123.080397][ T1108] usb 2-1: config 1 interface 19 has no altsetting 0 [ 123.253445][ T1108] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 123.504589][ T6059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.512000][ T6059] IPv6: NLM_F_CREATE should be set when creating new route [ 123.523154][ T6059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.551413][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.581085][ T1108] usb 2-1: Product: syz [ 123.599822][ T1108] usb 2-1: Manufacturer: syz [ 123.614982][ T1108] usb 2-1: SerialNumber: syz [ 123.802615][ T4176] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.880160][ T1108] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 124.025127][ T6037] loop1: detected capacity change from 0 to 8 [ 124.059220][ T4176] usb 6-1: Using ep0 maxpacket: 32 [ 124.103330][ T6037] SQUASHFS error: xz decompression failed, data probably corrupt [ 124.111533][ T6037] SQUASHFS error: Failed to read block 0xa8: -5 [ 124.117993][ T6037] SQUASHFS error: Unable to read data cache entry [a8] [ 124.125375][ T6037] SQUASHFS error: Unable to read page, block a8, size 54 [ 124.133324][ T6037] SQUASHFS error: Unable to read data cache entry [a8] [ 124.140203][ T6037] SQUASHFS error: Unable to read page, block a8, size 54 [ 124.148257][ T6037] SQUASHFS error: Unable to read data cache entry [a8] [ 124.155227][ T6037] SQUASHFS error: Unable to read page, block a8, size 54 [ 124.164014][ T6037] SQUASHFS error: xz decompression failed, data probably corrupt [ 124.171834][ T6037] SQUASHFS error: Failed to read block 0xa8: -5 [ 124.179286][ T6037] SQUASHFS error: xz decompression failed, data probably corrupt [ 124.187272][ T6037] SQUASHFS error: Failed to read block 0xa8: -5 [ 124.194041][ T26] audit: type=1800 audit(1788093840.167:4): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.660" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 124.216947][ T6078] bond4: (slave veth0_to_bond): Releasing active interface [ 124.224811][ T6037] udc-core: couldn't find an available UDC or it's busy [ 124.231805][ T6037] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 124.234892][ T6078] bond4: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 124.253296][ T4176] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 124.260704][ T1108] usb 2-1: USB disconnect, device number 2 [ 124.272484][ T1278] usb 2-1: Failed to submit usb control message: -71 [ 124.281661][ T1278] usb 2-1: unable to send the bmi data to the device: -71 [ 124.292581][ T1278] usb 2-1: unable to get target info from device [ 124.299226][ T1278] usb 2-1: could not get target info (-71) [ 124.305369][ T4176] usb 6-1: config 0 has no interface number 0 [ 124.305410][ T4176] usb 6-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.326780][ T1278] usb 2-1: could not probe fw (-71) [ 124.409490][ T6084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.670'. [ 124.462918][ T4176] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 124.482807][ T4176] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.498034][ T4176] usb 6-1: Product: syz [ 124.515329][ T4176] usb 6-1: Manufacturer: syz [ 124.540461][ T4176] usb 6-1: SerialNumber: syz [ 124.560364][ T4176] usb 6-1: config 0 descriptor?? [ 124.614116][ T4176] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 124.822666][ T4176] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 124.832472][ T4176] quatech2: probe of 6-1:0.51 failed with error -8 [ 125.033251][ T4176] usb 6-1: USB disconnect, device number 3 [ 125.362679][ T6107] loop1: detected capacity change from 0 to 2048 [ 125.435421][ T6107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.447587][ T6107] UDF-fs: error (device loop1): udf_read_inode: (ino 1376) failed !bh [ 125.456255][ T6107] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 126.790257][ T6162] netlink: 'syz.4.681': attribute type 1 has an invalid length. [ 126.939431][ T6163] bond7: (slave veth9): Enslaving as an active interface with a down link [ 127.060246][ T6112] loop1: detected capacity change from 0 to 40427 [ 127.071789][ T6159] bond7: (slave veth0_to_bond): making interface the new active one [ 127.101449][ T6159] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 127.157703][ T6112] F2FS-fs (loop1): invalid crc value [ 127.246012][ T6112] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.458964][ T6112] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 127.612847][ T6112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 127.810825][ T6185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.818142][ T6185] IPv6: NLM_F_CREATE should be set when creating new route [ 127.827778][ T6185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.341617][ T6112] ODEBUG: Out of memory. ODEBUG disabled [ 128.722989][ T6192] bond7: (slave veth0_to_bond): Releasing active interface [ 128.813166][ T6112] syz.1.675 (6112): drop_caches: 2 [ 128.978975][ T4228] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 129.454191][ T4228] usb 6-1: Using ep0 maxpacket: 16 [ 129.825893][ T4228] usb 6-1: config 1 has an invalid interface number: 19 but max is 0 [ 129.868650][ T4228] usb 6-1: config 1 has no interface number 0 [ 129.893454][ T4228] usb 6-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 129.942292][ T4228] usb 6-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 129.976153][ T4228] usb 6-1: config 1 interface 19 has no altsetting 0 [ 130.132675][ T6210] netlink: 'syz.4.694': attribute type 1 has an invalid length. [ 130.200976][ T4228] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 130.220286][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.239060][ T4228] usb 6-1: Product: syz [ 130.246736][ T4228] usb 6-1: Manufacturer: syz [ 130.251453][ T4228] usb 6-1: SerialNumber: syz [ 130.274693][ T6214] bond8: (slave veth11): Enslaving as an active interface with a down link [ 130.289338][ T6210] bond8: (slave veth0_to_bond): making interface the new active one [ 130.320580][ T4228] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 130.346969][ T6210] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 130.361188][ T6215] tipc: Enabled bearer , priority 0 [ 130.403925][ T5821] usb 6-1: Failed to submit usb control message: -71 [ 130.411529][ T5821] usb 6-1: unable to send the bmi data to the device: -71 [ 130.412403][ T4228] usb 6-1: USB disconnect, device number 4 [ 130.441101][ T6213] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 130.468744][ T5821] usb 6-1: unable to get target info from device [ 130.522527][ T5821] usb 6-1: could not get target info (-71) [ 130.528521][ T5821] usb 6-1: could not probe fw (-71) [ 130.557856][ T6211] tipc: Disabling bearer [ 130.739304][ T6226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.690'. [ 130.920942][ T6237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.929800][ T6237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.618879][ T6243] device syzkaller0 entered promiscuous mode [ 131.699866][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 132.045341][ T6252] device syzkaller0 entered promiscuous mode [ 132.762394][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768754][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.896170][ T6265] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 133.090018][ T6265] bond5: (slave veth9): Enslaving as an active interface with a down link [ 133.132615][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.169133][ T6271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.710'. [ 133.194909][ T6274] bond5: (slave veth0_to_bond): making interface the new active one [ 133.238095][ T6274] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 133.339624][ T6280] tipc: Enabled bearer , priority 0 [ 133.372774][ T6280] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 133.384004][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 133.457752][ T6278] tipc: Disabling bearer [ 133.662494][ T21] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 133.677234][ T21] usb 5-1: config 0 has no interface number 0 [ 133.685185][ T21] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.743163][ T6290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.750464][ T6290] IPv6: NLM_F_CREATE should be set when creating new route [ 133.759091][ T6290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.380396][ T6292] device syzkaller0 entered promiscuous mode [ 134.418683][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 135.502518][ T6305] device syzkaller0 entered promiscuous mode [ 135.599380][ T21] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 135.617278][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.625486][ T21] usb 5-1: Product: syz [ 135.629685][ T21] usb 5-1: Manufacturer: syz [ 135.634890][ T21] usb 5-1: SerialNumber: syz [ 135.641886][ T21] usb 5-1: config 0 descriptor?? [ 135.683956][ T21] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 135.847420][ T21] usb 5-1: qt2_attach - failed to power on unit: -71 [ 135.861696][ T21] quatech2: probe of 5-1:0.51 failed with error -71 [ 135.871058][ T21] usb 5-1: USB disconnect, device number 2 [ 135.955290][ T6323] netlink: 'syz.5.723': attribute type 1 has an invalid length. [ 136.230243][ T6327] bond1: (slave veth3): Enslaving as an active interface with a down link [ 136.291343][ T6328] bond1: (slave veth0_to_bond): making interface the new active one [ 136.301645][ T6328] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 136.529961][ T6340] device syzkaller0 entered promiscuous mode [ 136.548920][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'. [ 136.571958][ T6341] bond1: (slave veth0_to_bond): Releasing active interface [ 137.002036][ T6362] device syzkaller0 entered promiscuous mode [ 137.573162][ T6393] device syzkaller0 entered promiscuous mode [ 137.619558][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.742'. [ 137.654136][ T6396] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 137.846246][ T6396] bond6: (slave veth11): Enslaving as an active interface with a down link [ 137.897098][ T6399] bond5: (slave veth0_to_bond): Releasing active interface [ 137.958413][ T6399] bond6: (slave veth0_to_bond): making interface the new active one [ 137.968771][ T6399] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 138.397771][ T6396] device macvlan2 entered promiscuous mode [ 138.440892][ T6396] device bond6 entered promiscuous mode [ 138.485901][ T6396] device veth0_to_bond entered promiscuous mode [ 138.493003][ T6396] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.604042][ T6396] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth11 [ 138.645973][ T6396] device bond6 left promiscuous mode [ 138.668273][ T6396] device veth0_to_bond left promiscuous mode [ 138.795353][ T6422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.804094][ T6422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.573510][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 139.639315][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.3.751'. [ 140.015214][ T6448] device syzkaller0 entered promiscuous mode [ 140.045562][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.756'. [ 140.261251][ T6454] netlink: 'syz.0.759': attribute type 1 has an invalid length. [ 140.449829][ T6455] bond7: (slave veth13): Enslaving as an active interface with a down link [ 140.559932][ T6459] bond6: (slave veth0_to_bond): Releasing active interface [ 140.598558][ T6459] bond7: (slave veth0_to_bond): making interface the new active one [ 140.622133][ T6459] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 141.580364][ T6484] netlink: 36 bytes leftover after parsing attributes in process `syz.4.766'. [ 141.631923][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.763'. [ 141.950854][ T6498] device syzkaller0 entered promiscuous mode [ 142.091108][ T6505] device syzkaller0 entered promiscuous mode [ 142.290386][ T6514] netlink: 'syz.1.774': attribute type 1 has an invalid length. [ 142.337911][ T6516] bond7: (slave veth0_to_bond): Releasing active interface [ 142.396398][ T6511] bond8: (slave veth13): Enslaving as an active interface with a down link [ 142.408028][ T6515] device syzkaller0 entered promiscuous mode [ 142.427902][ T6514] bond8: (slave veth0_to_bond): making interface the new active one [ 142.738519][ T6514] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 143.117128][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'. [ 143.358030][ T6514] syz.1.774 (6514) used greatest stack depth: 19952 bytes left [ 143.389787][ T6528] netlink: 36 bytes leftover after parsing attributes in process `syz.5.778'. [ 143.450755][ T6533] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 143.883228][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.787'. [ 144.624449][ T6562] bond8: (slave veth0_to_bond): Releasing active interface [ 145.022250][ C1] sched: RT throttling activated [ 145.056631][ T6567] loop0: detected capacity change from 0 to 2048 [ 145.140557][ T6567] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.150478][ T6567] UDF-fs: error (device loop0): udf_read_inode: (ino 1376) failed !bh [ 145.158797][ T6567] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 145.228411][ T6572] device syzkaller0 entered promiscuous mode [ 145.269634][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.790'. [ 146.398422][ T6575] loop0: detected capacity change from 0 to 40427 [ 146.475730][ T6575] F2FS-fs (loop0): invalid crc value [ 146.537734][ T6622] device syzkaller0 entered promiscuous mode [ 146.545160][ T6575] F2FS-fs (loop0): Found nat_bits in checkpoint [ 146.580562][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 146.616732][ T6629] device syzkaller0 entered promiscuous mode [ 146.695260][ T6575] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 146.707515][ T6575] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 146.819746][ T6634] tipc: Enabled bearer , priority 0 [ 146.852203][ T6634] device syzkaller0 entered promiscuous mode [ 146.893012][ T6634] tipc: Resetting bearer [ 146.916724][ T6633] tipc: Resetting bearer [ 146.953645][ T6633] tipc: Disabling bearer [ 147.709198][ T6670] device syzkaller0 entered promiscuous mode [ 147.749159][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'. [ 148.110493][ T6681] device syzkaller0 entered promiscuous mode [ 148.708313][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 148.882440][ T1111] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.097567][ T6711] device syzkaller0 entered promiscuous mode [ 149.215041][ T1111] usb 5-1: Using ep0 maxpacket: 32 [ 149.297684][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.834'. [ 149.338391][ T1111] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 149.348449][ T1111] usb 5-1: config 0 has no interface number 0 [ 149.360406][ T1111] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.371625][ T1111] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 149.507358][ T6723] dccp_v6_rcv: dropped packet with invalid checksum [ 149.542474][ T1111] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 149.551600][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.570738][ T1111] usb 5-1: Product: syz [ 149.580094][ T1111] usb 5-1: Manufacturer: syz [ 149.586907][ T1111] usb 5-1: SerialNumber: syz [ 149.621028][ T1111] usb 5-1: config 0 descriptor?? [ 149.625481][ T6728] device syzkaller0 entered promiscuous mode [ 149.641548][ T6728] tipc: Enabled bearer , priority 0 [ 149.670972][ T6727] tipc: Resetting bearer [ 149.694004][ T1111] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 149.748798][ T6727] tipc: Disabling bearer [ 149.989091][ T1111] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 149.996306][ T1111] quatech2: probe of 5-1:0.51 failed with error -90 [ 150.189990][ T21] usb 5-1: USB disconnect, device number 3 [ 150.402603][ T1111] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 150.526402][ T6766] device syzkaller0 entered promiscuous mode [ 150.642377][ T1111] usb 6-1: Using ep0 maxpacket: 16 [ 150.721860][ T6770] dccp_v6_rcv: dropped packet with invalid checksum [ 150.744723][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'. [ 150.773249][ T1111] usb 6-1: config 1 has an invalid interface number: 19 but max is 0 [ 150.791281][ T1111] usb 6-1: config 1 has no interface number 0 [ 150.828294][ T1111] usb 6-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 150.869612][ T1111] usb 6-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 150.900599][ T1111] usb 6-1: config 1 interface 19 has no altsetting 0 [ 150.940541][ T6777] bond8: (slave veth0_to_bond): Releasing active interface [ 150.993442][ T6776] device syzkaller0 entered promiscuous mode [ 151.037567][ T6776] tipc: Enabled bearer , priority 0 [ 151.064048][ T1111] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 151.082596][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.090949][ T6775] tipc: Resetting bearer [ 151.097336][ T1111] usb 6-1: Product: syz [ 151.108172][ T1111] usb 6-1: Manufacturer: syz [ 151.116609][ T1111] usb 6-1: SerialNumber: syz [ 151.181577][ T6775] tipc: Disabling bearer [ 151.209073][ T1111] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 151.376560][ T6753] loop5: detected capacity change from 0 to 8 [ 151.498964][ T6753] SQUASHFS error: xz decompression failed, data probably corrupt [ 151.506892][ T6753] SQUASHFS error: Failed to read block 0xa8: -5 [ 151.513320][ T6753] SQUASHFS error: Unable to read data cache entry [a8] [ 151.520200][ T6753] SQUASHFS error: Unable to read page, block a8, size 54 [ 151.528123][ T6753] SQUASHFS error: Unable to read data cache entry [a8] [ 151.535052][ T6753] SQUASHFS error: Unable to read page, block a8, size 54 [ 151.543596][ T6753] SQUASHFS error: Unable to read data cache entry [a8] [ 151.550710][ T6753] SQUASHFS error: Unable to read page, block a8, size 54 [ 151.561905][ T6821] udc-core: couldn't find an available UDC or it's busy [ 151.569347][ T6753] SQUASHFS error: xz decompression failed, data probably corrupt [ 151.577240][ T6753] SQUASHFS error: Failed to read block 0xa8: -5 [ 151.585052][ T6753] SQUASHFS error: xz decompression failed, data probably corrupt [ 151.592890][ T6753] SQUASHFS error: Failed to read block 0xa8: -5 [ 151.599469][ T26] audit: type=1800 audit(1788093867.567:5): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.846" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 151.620403][ T6820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.628276][ T6820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.636592][ T6821] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 151.638515][ T6819] netlink: 'syz.4.863': attribute type 1 has an invalid length. [ 151.728415][ T6819] device bond9 entered promiscuous mode [ 151.736585][ T6819] 8021q: adding VLAN 0 to HW filter on device bond9 [ 152.170696][ T6834] loop1: detected capacity change from 0 to 2048 [ 152.192767][ T4229] usb 6-1: USB disconnect, device number 5 [ 152.217752][ T242] usb 6-1: Failed to submit usb control message: -71 [ 152.224168][ T4228] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.251010][ T242] usb 6-1: unable to send the bmi data to the device: -71 [ 152.284433][ T242] usb 6-1: unable to get target info from device [ 152.290849][ T242] usb 6-1: could not get target info (-71) [ 152.298463][ T6834] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.331930][ T6834] UDF-fs: error (device loop1): udf_read_inode: (ino 1376) failed !bh [ 152.340436][ T6834] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 152.363908][ T5784] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 152.383276][ T242] usb 6-1: could not probe fw (-71) [ 152.492376][ T4228] usb 5-1: Using ep0 maxpacket: 32 [ 152.528577][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.5.868'. [ 152.632620][ T4228] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 152.649100][ T4228] usb 5-1: config 0 has no interface number 0 [ 152.668864][ T4228] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.698070][ T4228] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 152.784296][ T6848] device syzkaller0 entered promiscuous mode [ 152.815887][ T6848] tipc: Enabled bearer , priority 0 [ 152.873807][ T6853] netlink: 36 bytes leftover after parsing attributes in process `syz.5.872'. [ 152.898165][ T6847] tipc: Resetting bearer [ 152.905592][ T4228] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 152.926112][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.943383][ T4228] usb 5-1: Product: syz [ 152.967846][ T4228] usb 5-1: Manufacturer: syz [ 153.003087][ T4228] usb 5-1: SerialNumber: syz [ 153.045782][ T4228] usb 5-1: config 0 descriptor?? [ 153.086248][ T6847] tipc: Disabling bearer [ 153.096186][ T4228] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 153.313999][ T4228] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 153.321102][ T4228] quatech2: probe of 5-1:0.51 failed with error -90 [ 153.363145][ T6835] loop1: detected capacity change from 0 to 40427 [ 153.402141][ T6861] netlink: 'syz.5.877': attribute type 1 has an invalid length. [ 153.443506][ T6861] device bond2 entered promiscuous mode [ 153.449531][ T6861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.506692][ T6835] F2FS-fs (loop1): invalid crc value [ 153.517025][ T4229] usb 5-1: USB disconnect, device number 4 [ 153.596061][ T6835] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.653667][ T6835] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 153.670042][ T6835] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 153.793083][ T5784] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 154.232577][ T4229] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 154.254797][ T6884] netlink: 36 bytes leftover after parsing attributes in process `syz.4.884'. [ 154.450378][ T6888] device syzkaller0 entered promiscuous mode [ 154.477909][ T6888] tipc: Enabled bearer , priority 0 [ 154.484924][ T4229] usb 6-1: Using ep0 maxpacket: 16 [ 154.514891][ T6888] tipc: Resetting bearer [ 154.558848][ T6887] tipc: Resetting bearer [ 154.590224][ T6887] tipc: Disabling bearer [ 154.602730][ T4229] usb 6-1: config 1 has an invalid interface number: 19 but max is 0 [ 154.621486][ T4229] usb 6-1: config 1 has no interface number 0 [ 154.628207][ T4229] usb 6-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 154.639725][ T4229] usb 6-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 154.651646][ T6892] tc_dump_action: action bad kind [ 154.698112][ T4229] usb 6-1: config 1 interface 19 has no altsetting 0 [ 154.817039][ T5784] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 154.862711][ T4229] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 154.882108][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.894355][ T4229] usb 6-1: Product: syz [ 154.899327][ T4229] usb 6-1: Manufacturer: syz [ 154.917273][ T4229] usb 6-1: SerialNumber: syz [ 155.127905][ T6906] loop3: detected capacity change from 0 to 2048 [ 155.200612][ T6919] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 155.214577][ T6906] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.224261][ T6906] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 155.233238][ T6906] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 155.253909][ T4229] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 155.328549][ T6874] loop5: detected capacity change from 0 to 8 [ 155.353315][ T6919] device bond8 entered promiscuous mode [ 155.362795][ T6919] 8021q: adding VLAN 0 to HW filter on device bond8 [ 155.466512][ T6874] SQUASHFS error: xz decompression failed, data probably corrupt [ 155.474407][ T6874] SQUASHFS error: Failed to read block 0xa8: -5 [ 155.480702][ T6874] SQUASHFS error: Unable to read data cache entry [a8] [ 155.487691][ T6874] SQUASHFS error: Unable to read page, block a8, size 54 [ 155.495584][ T6874] SQUASHFS error: Unable to read data cache entry [a8] [ 155.502523][ T6874] SQUASHFS error: Unable to read page, block a8, size 54 [ 155.510308][ T6874] SQUASHFS error: Unable to read data cache entry [a8] [ 155.517319][ T6874] SQUASHFS error: Unable to read page, block a8, size 54 [ 155.526865][ T6929] udc-core: couldn't find an available UDC or it's busy [ 155.534555][ T6874] SQUASHFS error: xz decompression failed, data probably corrupt [ 155.542730][ T6874] SQUASHFS error: Failed to read block 0xa8: -5 [ 155.560650][ T6874] SQUASHFS error: xz decompression failed, data probably corrupt [ 155.568751][ T6874] SQUASHFS error: Failed to read block 0xa8: -5 [ 155.575386][ T26] audit: type=1800 audit(1788093871.547:6): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.880" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 155.602325][ T6929] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 155.619236][ T6928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.896'. [ 155.771839][ T6933] tc_dump_action: action bad kind [ 155.863540][ T6937] device syzkaller0 entered promiscuous mode [ 155.908827][ T6937] tipc: Enabled bearer , priority 0 [ 155.958074][ T6937] tipc: Resetting bearer [ 155.982824][ T6939] device syzkaller0 entered promiscuous mode [ 156.023640][ T6936] tipc: Resetting bearer [ 156.044021][ T6936] tipc: Disabling bearer [ 156.126161][ T1111] usb 6-1: USB disconnect, device number 6 [ 156.159087][ T1405] usb 6-1: Failed to submit usb control message: -71 [ 156.169291][ T1405] usb 6-1: unable to send the bmi data to the device: -71 [ 156.222339][ T1405] usb 6-1: unable to get target info from device [ 156.233733][ T1405] usb 6-1: could not get target info (-71) [ 156.270697][ T1405] usb 6-1: could not probe fw (-71) [ 156.623161][ T6911] loop3: detected capacity change from 0 to 40427 [ 156.681662][ T6911] F2FS-fs (loop3): invalid crc value [ 156.714103][ T6957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.721676][ T6961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.736180][ T6911] F2FS-fs (loop3): Found nat_bits in checkpoint [ 156.919612][ T6911] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 156.962443][ T6911] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 157.265592][ T6974] netlink: 'syz.5.912': attribute type 1 has an invalid length. [ 157.481096][ T6974] device bond3 entered promiscuous mode [ 157.537224][ T6974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.992485][ T5928] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 158.233635][ T7008] netlink: 'syz.4.921': attribute type 1 has an invalid length. [ 158.242542][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 158.273519][ T7008] device bond10 entered promiscuous mode [ 158.279530][ T7008] 8021q: adding VLAN 0 to HW filter on device bond10 [ 158.334283][ T7012] device syzkaller0 entered promiscuous mode [ 158.362579][ T5928] usb 1-1: config 1 has an invalid interface number: 19 but max is 0 [ 158.398915][ T5928] usb 1-1: config 1 has no interface number 0 [ 158.433283][ T5928] usb 1-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 158.455525][ T5928] usb 1-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 158.470904][ T5928] usb 1-1: config 1 interface 19 has no altsetting 0 [ 158.528459][ T7008] bond10: (slave veth15): making interface the new active one [ 158.539403][ T7008] device veth15 entered promiscuous mode [ 158.555294][ T7008] bond10: (slave veth15): Enslaving as an active interface with an up link [ 158.569297][ T7014] tipc: Enabled bearer , priority 0 [ 158.580798][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 158.619721][ T7012] tipc: Resetting bearer [ 158.649660][ T7010] tipc: Resetting bearer [ 158.654855][ T5928] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 158.681859][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.720333][ T5928] usb 1-1: Product: syz [ 158.724890][ T5928] usb 1-1: Manufacturer: syz [ 158.729715][ T5928] usb 1-1: SerialNumber: syz [ 158.772543][ T7010] tipc: Disabling bearer [ 158.801093][ T5928] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 158.982195][ T6986] loop0: detected capacity change from 0 to 8 [ 159.110703][ T6986] SQUASHFS error: xz decompression failed, data probably corrupt [ 159.119264][ T6986] SQUASHFS error: Failed to read block 0xa8: -5 [ 159.124681][ T7032] loop1: detected capacity change from 0 to 2048 [ 159.125848][ T6986] SQUASHFS error: Unable to read data cache entry [a8] [ 159.138797][ T6986] SQUASHFS error: Unable to read page, block a8, size 54 [ 159.146909][ T6986] SQUASHFS error: Unable to read data cache entry [a8] [ 159.153849][ T6986] SQUASHFS error: Unable to read page, block a8, size 54 [ 159.161674][ T6986] SQUASHFS error: Unable to read data cache entry [a8] [ 159.168589][ T6986] SQUASHFS error: Unable to read page, block a8, size 54 [ 159.178576][ T6986] SQUASHFS error: xz decompression failed, data probably corrupt [ 159.179622][ T6990] udc-core: couldn't find an available UDC or it's busy [ 159.186699][ T6986] SQUASHFS error: Failed to read block 0xa8: -5 [ 159.201303][ T6986] SQUASHFS error: xz decompression failed, data probably corrupt [ 159.209191][ T6986] SQUASHFS error: Failed to read block 0xa8: -5 [ 159.215830][ T26] audit: type=1800 audit(1788093875.187:7): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.916" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 159.228259][ T6990] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 159.287485][ T4274] usb 1-1: USB disconnect, device number 5 [ 159.302866][ T6152] usb 1-1: Failed to submit usb control message: -71 [ 159.307112][ T7032] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.322569][ T7032] UDF-fs: error (device loop1): udf_read_inode: (ino 1376) failed !bh [ 159.330683][ T6152] usb 1-1: unable to send the bmi data to the device: -71 [ 159.330793][ T6152] usb 1-1: unable to get target info from device [ 159.330809][ T6152] usb 1-1: could not get target info (-71) [ 159.330930][ T6152] usb 1-1: could not probe fw (-71) [ 159.338250][ T7032] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 159.991595][ T7067] netlink: 44 bytes leftover after parsing attributes in process `syz.3.937'. [ 160.154203][ T7069] bond9: (slave veth17): Enslaving as an active interface with an up link [ 160.218611][ T7072] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 160.292676][ T7074] device syzkaller0 entered promiscuous mode [ 160.305330][ T7080] tipc: Enabled bearer , priority 0 [ 160.412747][ T7036] loop1: detected capacity change from 0 to 40427 [ 160.465267][ T7036] F2FS-fs (loop1): invalid crc value [ 160.503842][ T7070] tipc: Resetting bearer [ 160.581442][ T7070] tipc: Disabling bearer [ 160.604136][ T7036] F2FS-fs (loop1): Found nat_bits in checkpoint [ 160.789826][ T7036] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 160.859667][ T7036] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 161.410880][ T7118] netlink: 44 bytes leftover after parsing attributes in process `syz.3.950'. [ 161.629986][ T5928] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.683847][ T7123] device syzkaller0 entered promiscuous mode [ 161.745312][ T7124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.753133][ T7124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.824204][ T7123] tipc: Enabled bearer , priority 0 [ 161.867687][ T7123] tipc: Resetting bearer [ 161.926654][ T7122] tipc: Resetting bearer [ 161.982188][ T7122] tipc: Disabling bearer [ 162.192446][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 162.316333][ T5928] usb 1-1: config 1 has an invalid interface number: 19 but max is 0 [ 162.329113][ T5928] usb 1-1: config 1 has no interface number 0 [ 162.350053][ T5928] usb 1-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 162.372368][ T7128] device syzkaller0 entered promiscuous mode [ 162.402355][ T5928] usb 1-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 162.430346][ T5928] usb 1-1: config 1 interface 19 has no altsetting 0 [ 162.434644][ T7128] 0: reclassify loop, rule prio 0, protocol 700 [ 162.549210][ T7130] bond9: (slave veth15): Enslaving as an active interface with an up link [ 162.592586][ T5928] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 162.608438][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.617438][ T7132] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 162.648555][ T5928] usb 1-1: Product: syz [ 162.652902][ T5928] usb 1-1: Manufacturer: syz [ 162.668081][ T5928] usb 1-1: SerialNumber: syz [ 162.791220][ T5928] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 162.926310][ T7112] loop0: detected capacity change from 0 to 8 [ 162.982944][ T7151] device syzkaller0 entered promiscuous mode [ 163.011639][ T7112] SQUASHFS error: xz decompression failed, data probably corrupt [ 163.019633][ T7112] SQUASHFS error: Failed to read block 0xa8: -5 [ 163.026023][ T7112] SQUASHFS error: Unable to read data cache entry [a8] [ 163.032983][ T7112] SQUASHFS error: Unable to read page, block a8, size 54 [ 163.040837][ T7112] SQUASHFS error: Unable to read data cache entry [a8] [ 163.047804][ T7112] SQUASHFS error: Unable to read page, block a8, size 54 [ 163.055761][ T7112] SQUASHFS error: Unable to read data cache entry [a8] [ 163.062821][ T7112] SQUASHFS error: Unable to read page, block a8, size 54 [ 163.072115][ T7155] udc-core: couldn't find an available UDC or it's busy [ 163.079532][ T7112] SQUASHFS error: xz decompression failed, data probably corrupt [ 163.088179][ T7112] SQUASHFS error: Failed to read block 0xa8: -5 [ 163.095636][ T7112] SQUASHFS error: xz decompression failed, data probably corrupt [ 163.103469][ T7112] SQUASHFS error: Failed to read block 0xa8: -5 [ 163.110695][ T26] audit: type=1800 audit(1788093879.077:8): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.947" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 163.134051][ T7155] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 163.492962][ T7165] netlink: 44 bytes leftover after parsing attributes in process `syz.3.963'. [ 163.536401][ T7161] loop5: detected capacity change from 0 to 2048 [ 163.594843][ T7161] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.604741][ T7161] UDF-fs: error (device loop5): udf_read_inode: (ino 1376) failed !bh [ 163.613039][ T7161] UDF-fs: error (device loop5): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 163.690613][ T1111] usb 1-1: USB disconnect, device number 6 [ 163.709554][ T1405] usb 1-1: Failed to submit usb control message: -71 [ 163.722280][ T1405] usb 1-1: unable to send the bmi data to the device: -71 [ 163.795142][ T1405] usb 1-1: unable to get target info from device [ 163.801557][ T1405] usb 1-1: could not get target info (-71) [ 163.862459][ T1405] usb 1-1: could not probe fw (-71) [ 164.282213][ T7195] bond9: (slave veth0_to_bond): Releasing backup interface [ 164.317908][ T7194] device syzkaller0 entered promiscuous mode [ 164.635178][ T7214] netlink: 44 bytes leftover after parsing attributes in process `syz.3.977'. [ 164.648774][ T7212] device syzkaller0 entered promiscuous mode [ 164.692791][ T7212] tipc: Enabled bearer , priority 0 [ 164.761750][ T7212] tipc: Resetting bearer [ 164.779667][ T7211] tipc: Resetting bearer [ 164.810690][ T7211] tipc: Disabling bearer [ 164.873575][ T7222] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 165.127068][ T7219] bond10: (slave veth17): Enslaving as an active interface with an up link [ 165.255466][ T7230] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 165.320955][ T7234] loop0: detected capacity change from 0 to 2048 [ 165.371013][ T7234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.386966][ T7234] UDF-fs: error (device loop0): udf_read_inode: (ino 1376) failed !bh [ 165.395908][ T7234] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 165.490512][ T7246] device syzkaller0 entered promiscuous mode [ 165.690260][ T7252] netlink: 44 bytes leftover after parsing attributes in process `syz.3.989'. [ 166.106731][ T7265] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 166.261813][ T7266] bond5: (slave veth11): Enslaving as an active interface with an up link [ 166.295763][ T7270] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 166.541827][ T7283] bond9: (slave veth0_to_bond): Releasing backup interface [ 166.626224][ T7290] device syzkaller0 entered promiscuous mode [ 166.649313][ T7293] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1002'. [ 166.896177][ T7303] device syzkaller0 entered promiscuous mode [ 166.952072][ T7303] tipc: Enabled bearer , priority 0 [ 167.019947][ T7303] tipc: Resetting bearer [ 167.066917][ T7302] tipc: Resetting bearer [ 167.100182][ T7302] tipc: Disabling bearer [ 167.113182][ T7317] netlink: 'syz.1.1011': attribute type 1 has an invalid length. [ 167.269265][ T4230] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 167.290829][ T7315] bond11: (slave veth19): Enslaving as an active interface with an up link [ 167.405261][ T7317] bond10: (slave veth0_to_bond): Releasing backup interface [ 167.434030][ T7317] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 167.572589][ T4230] usb 6-1: Using ep0 maxpacket: 32 [ 167.732586][ T4230] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 167.740740][ T4230] usb 6-1: config 0 has no interface number 0 [ 167.747862][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1017'. [ 167.873032][ T7337] device syzkaller0 entered promiscuous mode [ 167.939564][ T4230] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 167.952027][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.960531][ T4230] usb 6-1: Product: syz [ 167.964833][ T4230] usb 6-1: Manufacturer: syz [ 167.969452][ T4230] usb 6-1: SerialNumber: syz [ 167.977971][ T4230] usb 6-1: config 0 descriptor?? [ 167.983060][ T4228] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.026757][ T4230] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 168.169140][ T7347] device syzkaller0 entered promiscuous mode [ 168.201015][ T7347] tipc: Enabled bearer , priority 0 [ 168.239660][ T4230] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 168.250073][ T4228] usb 1-1: Using ep0 maxpacket: 16 [ 168.259563][ T7347] tipc: Resetting bearer [ 168.293929][ T7346] tipc: Resetting bearer [ 168.297295][ T4230] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 168.327094][ T7346] tipc: Disabling bearer [ 168.372140][ T7356] netlink: 'syz.4.1026': attribute type 1 has an invalid length. [ 168.392877][ T4228] usb 1-1: config 1 has an invalid interface number: 19 but max is 0 [ 168.421352][ T4228] usb 1-1: config 1 has no interface number 0 [ 168.437109][ T4228] usb 1-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 168.461964][ T4228] usb 1-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 168.475626][ T4228] usb 1-1: config 1 interface 19 has no altsetting 0 [ 168.523983][ T7354] bond11: (slave veth19): Enslaving as an active interface with an up link [ 168.554234][ T7356] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 168.662800][ T4228] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 168.671924][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.692284][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 168.702882][ T7360] bond11: (slave veth0_to_bond): Releasing backup interface [ 168.731066][ T4228] usb 1-1: Product: syz [ 168.751678][ T4228] usb 1-1: Manufacturer: syz [ 168.756773][ T4228] usb 1-1: SerialNumber: syz [ 168.776807][ T4230] usb 6-1: USB disconnect, device number 7 [ 168.796735][ T4230] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 168.848545][ T4230] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 168.873999][ T4228] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 168.905645][ T4230] quatech2 6-1:0.51: device disconnected [ 168.976540][ T7376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1032'. [ 169.010525][ T7378] device syzkaller0 entered promiscuous mode [ 169.014822][ T7331] loop0: detected capacity change from 0 to 8 [ 169.077042][ T7331] SQUASHFS error: xz decompression failed, data probably corrupt [ 169.085160][ T7331] SQUASHFS error: Failed to read block 0xa8: -5 [ 169.091490][ T7331] SQUASHFS error: Unable to read data cache entry [a8] [ 169.098472][ T7331] SQUASHFS error: Unable to read page, block a8, size 54 [ 169.106354][ T7331] SQUASHFS error: Unable to read data cache entry [a8] [ 169.113278][ T7331] SQUASHFS error: Unable to read page, block a8, size 54 [ 169.121140][ T7331] SQUASHFS error: Unable to read data cache entry [a8] [ 169.128143][ T7331] SQUASHFS error: Unable to read page, block a8, size 54 [ 169.139844][ T7383] udc-core: couldn't find an available UDC or it's busy [ 169.147046][ T7331] SQUASHFS error: xz decompression failed, data probably corrupt [ 169.155530][ T7331] SQUASHFS error: Failed to read block 0xa8: -5 [ 169.162946][ T7331] SQUASHFS error: xz decompression failed, data probably corrupt [ 169.170735][ T7331] SQUASHFS error: Failed to read block 0xa8: -5 [ 169.177432][ T26] audit: type=1800 audit(1788093885.147:9): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1016" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 169.178332][ T7383] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 169.351072][ T7391] device syzkaller0 entered promiscuous mode [ 169.367455][ T7391] tipc: Enabled bearer , priority 0 [ 169.404243][ T7391] tipc: Resetting bearer [ 169.419694][ T7388] tipc: Resetting bearer [ 169.478175][ T7388] tipc: Disabling bearer [ 169.687641][ T7406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1044'. [ 169.722795][ T4230] usb 1-1: USB disconnect, device number 7 [ 169.732934][ T6150] usb 1-1: Failed to submit usb control message: -71 [ 169.740854][ T6150] usb 1-1: unable to send the bmi data to the device: -71 [ 169.756761][ T7408] dccp_v6_rcv: dropped packet with invalid checksum [ 169.783993][ T6150] usb 1-1: unable to get target info from device [ 169.790394][ T6150] usb 1-1: could not get target info (-71) [ 169.832622][ T6150] usb 1-1: could not probe fw (-71) [ 169.839723][ T7411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1046'. [ 170.134497][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1053'. [ 170.276042][ T7434] bond11: (slave veth0_to_bond): Releasing backup interface [ 170.310268][ T7439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1057'. [ 170.372546][ T4230] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 170.752481][ T4229] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.772385][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 170.922454][ T4230] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 170.933905][ T4230] usb 1-1: config 0 has no interface number 0 [ 170.992657][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 171.061477][ T7446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1061'. [ 171.098957][ T7448] dccp_v6_rcv: dropped packet with invalid checksum [ 171.113465][ T4229] usb 4-1: config 1 has an invalid interface number: 19 but max is 0 [ 171.132971][ T4230] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 171.143167][ T4229] usb 4-1: config 1 has no interface number 0 [ 171.149412][ T4229] usb 4-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 171.161213][ T4229] usb 4-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 171.166232][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.183239][ T4229] usb 4-1: config 1 interface 19 has no altsetting 0 [ 171.200215][ T4230] usb 1-1: Product: syz [ 171.228229][ T4230] usb 1-1: Manufacturer: syz [ 171.322417][ T4230] usb 1-1: SerialNumber: syz [ 171.329043][ T4230] usb 1-1: config 0 descriptor?? [ 171.353081][ T4229] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 171.374043][ T4230] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 171.387540][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.418255][ T4229] usb 4-1: Product: syz [ 171.436388][ T4229] usb 4-1: Manufacturer: syz [ 171.441148][ T4229] usb 4-1: SerialNumber: syz [ 171.539222][ T4229] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 171.590203][ T7466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1068'. [ 171.601733][ T4230] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 171.637417][ T7470] device syzkaller0 entered promiscuous mode [ 171.646979][ T7468] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1069'. [ 171.662542][ T4230] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 171.716443][ T7443] loop3: detected capacity change from 0 to 8 [ 171.750130][ T7470] tipc: Enabled bearer , priority 0 [ 171.805467][ T7443] SQUASHFS error: xz decompression failed, data probably corrupt [ 171.813365][ T7443] SQUASHFS error: Failed to read block 0xa8: -5 [ 171.820410][ T7443] SQUASHFS error: Unable to read data cache entry [a8] [ 171.827451][ T7443] SQUASHFS error: Unable to read page, block a8, size 54 [ 171.835801][ T7443] SQUASHFS error: Unable to read data cache entry [a8] [ 171.842742][ T7443] SQUASHFS error: Unable to read page, block a8, size 54 [ 171.850575][ T7443] SQUASHFS error: Unable to read data cache entry [a8] [ 171.857546][ T7443] SQUASHFS error: Unable to read page, block a8, size 54 [ 171.870086][ T7476] udc-core: couldn't find an available UDC or it's busy [ 171.877223][ T7443] SQUASHFS error: xz decompression failed, data probably corrupt [ 171.877295][ T7443] SQUASHFS error: Failed to read block 0xa8: -5 [ 171.892657][ T7443] SQUASHFS error: xz decompression failed, data probably corrupt [ 171.900462][ T7443] SQUASHFS error: Failed to read block 0xa8: -5 [ 171.907152][ T26] audit: type=1800 audit(1788093887.887:10): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1059" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 171.935469][ T7476] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.967725][ T7470] tipc: Resetting bearer [ 172.069060][ T4230] usb 1-1: USB disconnect, device number 8 [ 172.082365][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 172.355455][ T7469] tipc: Resetting bearer [ 172.603893][ T5824] usb 4-1: Failed to submit usb control message: -110 [ 172.685274][ T5824] usb 4-1: unable to send the bmi data to the device: -110 [ 172.816647][ T1111] usb 4-1: USB disconnect, device number 4 [ 172.823915][ T5824] usb 4-1: unable to get target info from device [ 172.830300][ T5824] usb 4-1: could not get target info (-110) [ 172.839806][ T4230] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 172.880193][ T5824] usb 4-1: could not probe fw (-110) [ 172.894156][ T4230] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 172.925392][ T4230] quatech2 1-1:0.51: device disconnected [ 173.017993][ T7469] tipc: Disabling bearer [ 173.098156][ T21] tipc: Node number set to 4107999089 [ 173.439377][ T7501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1081'. [ 173.852525][ T4230] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.200103][ T7513] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1086'. [ 174.282913][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 174.522593][ T4230] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 174.599585][ T4230] usb 1-1: config 0 has no interface number 0 [ 174.764106][ T7518] device syzkaller0 entered promiscuous mode [ 174.802722][ T4230] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 174.813085][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.821126][ T4230] usb 1-1: Product: syz [ 174.842360][ T4230] usb 1-1: Manufacturer: syz [ 174.852511][ T4230] usb 1-1: SerialNumber: syz [ 174.862919][ T7524] device syzkaller0 entered promiscuous mode [ 174.877548][ T4230] usb 1-1: config 0 descriptor?? [ 174.940905][ T4230] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 174.978833][ T7524] tipc: Enabled bearer , priority 0 [ 174.995668][ T7524] tipc: Resetting bearer [ 175.010001][ T7523] tipc: Resetting bearer [ 175.022748][ T7523] tipc: Disabling bearer [ 175.126523][ T7527] device syzkaller0 entered promiscuous mode [ 175.229592][ T7529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.405139][ T7536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1093'. [ 175.503641][ T4230] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 175.516965][ T4230] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 175.581032][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1095'. [ 175.719800][ T1111] usb 1-1: USB disconnect, device number 9 [ 175.735592][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 175.888469][ T1111] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 175.917198][ T1111] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 175.932059][ T1111] quatech2 1-1:0.51: device disconnected [ 176.045246][ T7553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1101'. [ 176.162793][ T7558] bond5: (slave veth0_to_bond): Releasing backup interface [ 176.359599][ T7564] device syzkaller0 entered promiscuous mode [ 176.389354][ T7568] device syzkaller0 entered promiscuous mode [ 176.401784][ T7564] tipc: Enabled bearer , priority 0 [ 176.433605][ T7564] tipc: Resetting bearer [ 176.439691][ T7567] device syzkaller0 entered promiscuous mode [ 176.451549][ T7568] tipc: Enabled bearer , priority 0 [ 176.464502][ T7563] tipc: Resetting bearer [ 176.496479][ T7563] tipc: Disabling bearer [ 176.513354][ T7567] tipc: Enabled bearer , priority 0 [ 176.530905][ T7568] tipc: Resetting bearer [ 176.546551][ T7567] tipc: Resetting bearer [ 176.646916][ T7566] tipc: Resetting bearer [ 176.704936][ T7566] tipc: Disabling bearer [ 176.723389][ T7565] tipc: Resetting bearer [ 176.744633][ T7565] tipc: Disabling bearer [ 176.758119][ T7571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.337186][ T7577] loop0: detected capacity change from 0 to 40427 [ 177.352534][ T1111] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 177.446535][ T7577] F2FS-fs (loop0): invalid crc value [ 177.474433][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1117'. [ 177.485340][ T7577] F2FS-fs (loop0): Found nat_bits in checkpoint [ 177.526765][ T7577] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 177.550872][ T7577] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 177.592452][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 177.712591][ T1111] usb 4-1: config 1 has an invalid interface number: 19 but max is 0 [ 177.741961][ T1111] usb 4-1: config 1 has no interface number 0 [ 177.760160][ T1111] usb 4-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 177.804174][ T1111] usb 4-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 177.842351][ T1111] usb 4-1: config 1 interface 19 has no altsetting 0 [ 177.988209][ T4230] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.012707][ T1111] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 178.032440][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.058306][ T1111] usb 4-1: Product: syz [ 178.080256][ T1111] usb 4-1: Manufacturer: syz [ 178.099123][ T1111] usb 4-1: SerialNumber: syz [ 178.230557][ T1111] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 178.242469][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 178.372496][ T4230] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 178.380657][ T4230] usb 5-1: config 0 has no interface number 0 [ 178.389634][ T7581] loop3: detected capacity change from 0 to 8 [ 178.463952][ T7581] SQUASHFS error: xz decompression failed, data probably corrupt [ 178.472572][ T7581] SQUASHFS error: Failed to read block 0xa8: -5 [ 178.479395][ T7581] SQUASHFS error: Unable to read data cache entry [a8] [ 178.486345][ T7581] SQUASHFS error: Unable to read page, block a8, size 54 [ 178.494247][ T7581] SQUASHFS error: Unable to read data cache entry [a8] [ 178.501144][ T7581] SQUASHFS error: Unable to read page, block a8, size 54 [ 178.509066][ T7581] SQUASHFS error: Unable to read data cache entry [a8] [ 178.516009][ T7581] SQUASHFS error: Unable to read page, block a8, size 54 [ 178.524532][ T7581] SQUASHFS error: xz decompression failed, data probably corrupt [ 178.532408][ T7581] SQUASHFS error: Failed to read block 0xa8: -5 [ 178.540183][ T7605] udc-core: couldn't find an available UDC or it's busy [ 178.547322][ T7581] SQUASHFS error: xz decompression failed, data probably corrupt [ 178.555232][ T7581] SQUASHFS error: Failed to read block 0xa8: -5 [ 178.561835][ T26] audit: type=1800 audit(1788093894.527:11): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1112" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 178.592441][ T7605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.632756][ T4230] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 178.648389][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.687367][ T4230] usb 5-1: Product: syz [ 178.724470][ T7610] dccp_v6_rcv: dropped packet with invalid checksum [ 178.732466][ T4230] usb 5-1: Manufacturer: syz [ 178.737246][ T4230] usb 5-1: SerialNumber: syz [ 178.790749][ T4230] usb 5-1: config 0 descriptor?? [ 178.874095][ T4230] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 178.950597][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 179.094291][ T4230] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 179.106088][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1129'. [ 179.287664][ T4230] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 179.302629][ T5824] usb 4-1: Failed to submit usb control message: -71 [ 179.309710][ T5824] usb 4-1: unable to send the bmi data to the device: -71 [ 179.329525][ T1111] usb 4-1: USB disconnect, device number 5 [ 179.386080][ T5824] usb 4-1: unable to get target info from device [ 179.412518][ T5824] usb 4-1: could not get target info (-71) [ 179.432314][ T5824] usb 4-1: could not probe fw (-71) [ 179.526054][ T4230] usb 5-1: USB disconnect, device number 5 [ 179.532412][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 179.622465][ T4230] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 179.674217][ T4230] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 179.707428][ T4230] quatech2 5-1:0.51: device disconnected [ 180.400894][ T7632] loop0: detected capacity change from 0 to 40427 [ 180.420235][ T7652] device syzkaller0 entered promiscuous mode [ 180.438328][ T7632] F2FS-fs (loop0): invalid crc value [ 180.477176][ T7632] F2FS-fs (loop0): Found nat_bits in checkpoint [ 180.578986][ T7632] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 180.740457][ T7632] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 181.005006][ T7663] device syzkaller0 entered promiscuous mode [ 181.026475][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1143'. [ 181.334638][ T7677] device syzkaller0 entered promiscuous mode [ 181.394044][ T7677] tipc: Enabled bearer , priority 0 [ 181.430191][ T7676] tipc: Resetting bearer [ 181.518915][ T7676] tipc: Disabling bearer [ 181.750711][ T7691] device syzkaller0 entered promiscuous mode [ 181.752930][ T1111] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.002429][ T1111] usb 5-1: Using ep0 maxpacket: 32 [ 182.091329][ T7701] device syzkaller0 entered promiscuous mode [ 182.099025][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1159'. [ 182.123862][ T1111] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 182.143409][ T1111] usb 5-1: config 0 has no interface number 0 [ 182.302718][ T1111] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 182.425802][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.442654][ T1111] usb 5-1: Product: syz [ 182.446955][ T1111] usb 5-1: Manufacturer: syz [ 182.451707][ T1111] usb 5-1: SerialNumber: syz [ 182.488244][ T1111] usb 5-1: config 0 descriptor?? [ 182.549022][ T1111] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 182.664645][ T7720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.678863][ T7720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.701222][ T7719] device syzkaller0 entered promiscuous mode [ 182.731715][ T7719] tipc: Enabled bearer , priority 0 [ 182.754790][ T1111] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 182.789954][ T1111] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 182.874640][ T7718] tipc: Resetting bearer [ 182.932583][ T7718] tipc: Disabling bearer [ 183.036324][ T7725] device syzkaller0 entered promiscuous mode [ 183.173374][ T1111] usb 5-1: USB disconnect, device number 6 [ 183.192359][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 183.203402][ T1111] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 183.232879][ T1111] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 183.273743][ T1111] quatech2 5-1:0.51: device disconnected [ 183.387369][ T6152] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 183.530965][ T7721] loop5: detected capacity change from 0 to 40427 [ 183.593670][ T7721] F2FS-fs (loop5): invalid crc value [ 183.628435][ T7735] device syzkaller0 entered promiscuous mode [ 183.705901][ T7721] F2FS-fs (loop5): Found nat_bits in checkpoint [ 183.904491][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1173'. [ 183.922669][ T7721] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 183.968664][ T7721] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 184.187156][ T7753] dccp_v6_rcv: dropped packet with invalid checksum [ 184.341568][ T7757] device syzkaller0 entered promiscuous mode [ 184.444057][ T7757] tipc: Enabled bearer , priority 0 [ 184.567300][ T7755] tipc: Resetting bearer [ 184.638725][ T7755] tipc: Disabling bearer [ 184.693202][ T7761] device syzkaller0 entered promiscuous mode [ 185.060072][ T7775] device syzkaller0 entered promiscuous mode [ 185.232392][ T4231] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 185.475284][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 185.525971][ T7788] bond12: (slave veth25): Enslaving as an active interface with an up link [ 185.555969][ T7786] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 185.602662][ T4231] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 185.614107][ T4231] usb 4-1: config 0 has no interface number 0 [ 185.782906][ T4231] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 185.796369][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.814751][ T4231] usb 4-1: Product: syz [ 185.825509][ T4231] usb 4-1: Manufacturer: syz [ 185.845514][ T4231] usb 4-1: SerialNumber: syz [ 185.871884][ T7800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.879837][ T7800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.884504][ T4231] usb 4-1: config 0 descriptor?? [ 185.945794][ T5822] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 185.956894][ T4231] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 186.170547][ T4231] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 186.283640][ T4231] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 186.586180][ T1111] usb 4-1: USB disconnect, device number 6 [ 186.592963][ T4231] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 186.602366][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 186.787813][ T1111] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 186.810118][ T1111] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 186.834188][ T1111] quatech2 4-1:0.51: device disconnected [ 187.012515][ T4231] usb 6-1: Using ep0 maxpacket: 16 [ 187.132596][ T4231] usb 6-1: config 1 has an invalid interface number: 19 but max is 0 [ 187.140781][ T4231] usb 6-1: config 1 has no interface number 0 [ 187.162356][ T4231] usb 6-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 187.223180][ T4231] usb 6-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 187.268906][ T4231] usb 6-1: config 1 interface 19 has no altsetting 0 [ 187.363746][ T7821] device syzkaller0 entered promiscuous mode [ 187.436122][ T4231] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 187.455771][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.486432][ T4231] usb 6-1: Product: syz [ 187.490690][ T4231] usb 6-1: Manufacturer: syz [ 187.508987][ T4231] usb 6-1: SerialNumber: syz [ 187.599848][ T7817] loop0: detected capacity change from 0 to 40427 [ 187.631644][ T7817] F2FS-fs (loop0): invalid crc value [ 187.638199][ T4231] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 187.711286][ T7817] F2FS-fs (loop0): Found nat_bits in checkpoint [ 187.787673][ T7808] loop5: detected capacity change from 0 to 8 [ 187.803934][ T7817] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 187.830883][ T7817] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 187.940461][ T7808] SQUASHFS error: xz decompression failed, data probably corrupt [ 187.948350][ T7808] SQUASHFS error: Failed to read block 0xa8: -5 [ 187.954818][ T7808] SQUASHFS error: Unable to read data cache entry [a8] [ 187.961700][ T7808] SQUASHFS error: Unable to read page, block a8, size 54 [ 187.969647][ T7808] SQUASHFS error: Unable to read data cache entry [a8] [ 187.976574][ T7808] SQUASHFS error: Unable to read page, block a8, size 54 [ 187.984606][ T7808] SQUASHFS error: Unable to read data cache entry [a8] [ 187.991667][ T7808] SQUASHFS error: Unable to read page, block a8, size 54 [ 188.001418][ T7808] SQUASHFS error: xz decompression failed, data probably corrupt [ 188.009296][ T7808] SQUASHFS error: Failed to read block 0xa8: -5 [ 188.014823][ T7834] udc-core: couldn't find an available UDC or it's busy [ 188.019837][ T7808] SQUASHFS error: xz decompression failed, data probably corrupt [ 188.030548][ T7808] SQUASHFS error: Failed to read block 0xa8: -5 [ 188.037483][ T26] audit: type=1800 audit(1788093904.017:12): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1193" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 188.061969][ T7834] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 188.194109][ T7835] device syzkaller0 entered promiscuous mode [ 188.245754][ T7837] bond12: (slave veth23): Enslaving as an active interface with an up link [ 188.264743][ T7839] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 188.382483][ T7837] device macvlan2 entered promiscuous mode [ 188.392907][ T7837] device bond12 entered promiscuous mode [ 188.398687][ T7837] device veth23 entered promiscuous mode [ 188.406053][ T7837] device veth0_to_bond entered promiscuous mode [ 188.413398][ T7837] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.624892][ T7837] device bond12 left promiscuous mode [ 188.640507][ T7837] device veth23 left promiscuous mode [ 188.652473][ T7837] device veth0_to_bond left promiscuous mode [ 188.676575][ T1111] usb 6-1: USB disconnect, device number 8 [ 188.682637][ T6152] usb 6-1: Failed to submit usb control message: -110 [ 188.690156][ T6152] usb 6-1: unable to send the bmi data to the device: -110 [ 188.704508][ T6152] usb 6-1: unable to get target info from device [ 188.751996][ T6152] usb 6-1: could not get target info (-110) [ 188.774889][ T6152] usb 6-1: could not probe fw (-110) [ 188.985385][ T7857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1205'. [ 189.079132][ T7858] device syzkaller0 entered promiscuous mode [ 189.122864][ T7862] device syzkaller0 entered promiscuous mode [ 190.331435][ T7876] device syzkaller0 entered promiscuous mode [ 190.472431][ T1111] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 190.580049][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1222'. [ 190.709694][ T7907] device syzkaller0 entered promiscuous mode [ 190.716116][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 190.992445][ T1111] usb 4-1: config 1 has an invalid interface number: 19 but max is 0 [ 191.000750][ T1111] usb 4-1: config 1 has no interface number 0 [ 191.022342][ T1111] usb 4-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 191.042419][ T1111] usb 4-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 191.072343][ T1111] usb 4-1: config 1 interface 19 has no altsetting 0 [ 191.142519][ T4231] Bluetooth: hci1: command 0x0406 tx timeout [ 191.145037][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 191.148649][ T4231] Bluetooth: hci2: command 0x0406 tx timeout [ 191.168738][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 191.242632][ T1111] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 191.432916][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.467530][ T1111] usb 4-1: Product: syz [ 191.472968][ T1111] usb 4-1: Manufacturer: syz [ 192.185779][ T1111] usb 4-1: SerialNumber: syz [ 192.293898][ T7933] device syzkaller0 entered promiscuous mode [ 192.300948][ T1111] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 192.346996][ T4231] usb 4-1: USB disconnect, device number 7 [ 192.362681][ T5821] usb 4-1: Failed to submit usb control message: -71 [ 192.370100][ T7928] bond13: (slave veth25): Enslaving as an active interface with an up link [ 192.371008][ T5821] usb 4-1: unable to send the bmi data to the device: -71 [ 192.432645][ T5821] usb 4-1: unable to get target info from device [ 192.516195][ T5821] usb 4-1: could not get target info (-71) [ 192.544633][ T5821] usb 4-1: could not probe fw (-71) [ 192.622195][ T7937] bond12: (slave veth0_to_bond): Releasing backup interface [ 192.651242][ T7937] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 192.733192][ T7928] device macvlan2 entered promiscuous mode [ 192.750209][ T7928] device bond13 entered promiscuous mode [ 192.758455][ T7928] device veth25 entered promiscuous mode [ 192.769308][ T7928] device veth0_to_bond entered promiscuous mode [ 192.781046][ T7928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.807300][ T7928] device bond13 left promiscuous mode [ 192.822438][ T7928] device veth25 left promiscuous mode [ 192.828126][ T7928] device veth0_to_bond left promiscuous mode [ 192.869583][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1237'. [ 193.048500][ T7953] device syzkaller0 entered promiscuous mode [ 193.452922][ T7966] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 193.483870][ T7970] device syzkaller0 entered promiscuous mode [ 193.760147][ T7974] device syzkaller0 entered promiscuous mode [ 193.814294][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1253'. [ 193.925148][ T7979] bond10: (slave veth19): Enslaving as an active interface with an up link [ 193.998553][ T7984] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 194.027192][ T7984] device macvlan2 entered promiscuous mode [ 194.034502][ T7984] device bond10 entered promiscuous mode [ 194.041328][ T7984] device veth19 entered promiscuous mode [ 194.047288][ T7984] device veth0_to_bond entered promiscuous mode [ 194.054708][ T7984] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.064787][ T7984] device bond10 left promiscuous mode [ 194.070212][ T7984] device veth19 left promiscuous mode [ 194.076489][ T7984] device veth0_to_bond left promiscuous mode [ 194.195354][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.201760][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.300197][ T8000] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 194.423967][ T8002] device syzkaller0 entered promiscuous mode [ 194.603756][ T8013] device syzkaller0 entered promiscuous mode [ 194.659768][ T8013] 0: reclassify loop, rule prio 0, protocol 700 [ 195.810304][ T8028] device syzkaller0 entered promiscuous mode [ 195.896861][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'. [ 196.050496][ T8034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.191380][ T8033] bond12: (slave veth0_to_bond): Releasing backup interface [ 196.294670][ T8038] bond4: (slave veth15): Enslaving as an active interface with an up link [ 196.371492][ T8042] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 196.401927][ T8045] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 196.459533][ T8038] device macvlan2 entered promiscuous mode [ 196.483952][ T8038] device bond4 entered promiscuous mode [ 196.499825][ T8038] device veth15 entered promiscuous mode [ 196.509072][ T8038] device veth0_to_bond entered promiscuous mode [ 196.520119][ T8038] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.532092][ T8038] device bond4 left promiscuous mode [ 196.542033][ T8038] device veth15 left promiscuous mode [ 196.551603][ T8038] device veth0_to_bond left promiscuous mode [ 196.615927][ T8050] device syzkaller0 entered promiscuous mode [ 198.057989][ T8072] device syzkaller0 entered promiscuous mode [ 198.079956][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1285'. [ 198.231729][ T8080] bond4: (slave veth0_to_bond): Releasing backup interface [ 198.251774][ T8082] device syzkaller0 entered promiscuous mode [ 198.328381][ T8093] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1289'. [ 198.573788][ T8097] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1293'. [ 199.858413][ T8115] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 199.913813][ T8115] device syzkaller0 entered promiscuous mode [ 200.073240][ T8120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.112580][ T8123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1301'. [ 200.255126][ T8129] bond13: (slave veth0_to_bond): Releasing backup interface [ 200.298555][ T8124] device syzkaller0 entered promiscuous mode [ 200.324246][ T8124] tipc: Enabled bearer , priority 0 [ 200.398893][ T8124] tipc: Resetting bearer [ 200.460523][ T8121] tipc: Resetting bearer [ 200.490366][ T8121] tipc: Disabling bearer [ 200.518876][ T8138] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1305'. [ 200.565419][ T8136] device syzkaller0 entered promiscuous mode [ 200.584202][ T8099] loop1: detected capacity change from 0 to 40427 [ 200.621342][ T8099] F2FS-fs (loop1): invalid crc value [ 200.681525][ T8099] F2FS-fs (loop1): Found nat_bits in checkpoint [ 200.853993][ T8148] device syzkaller0 entered promiscuous mode [ 200.897824][ T8099] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 201.077690][ T8152] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 201.111992][ T8099] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 201.366306][ T8160] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 201.471442][ T8160] device syzkaller0 entered promiscuous mode [ 201.625180][ T8165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1315'. [ 201.828407][ T8166] bond10: (slave veth0_to_bond): Releasing backup interface [ 201.935012][ T8177] netlink: 'syz.3.1317': attribute type 1 has an invalid length. [ 202.056219][ T8177] bond6: (slave veth13): Enslaving as an active interface with an up link [ 202.099139][ T8180] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 202.189677][ T8185] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1320'. [ 202.228844][ T8184] device syzkaller0 entered promiscuous mode [ 202.267805][ T8177] device macvlan3 entered promiscuous mode [ 202.283465][ T8177] device bond6 entered promiscuous mode [ 202.299351][ T8177] device veth13 entered promiscuous mode [ 202.307097][ T8177] device veth0_to_bond entered promiscuous mode [ 202.314508][ T8177] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 202.324147][ T8177] device bond6 left promiscuous mode [ 202.336968][ T8177] device veth13 left promiscuous mode [ 202.346362][ T8177] device veth0_to_bond left promiscuous mode [ 202.461610][ T8192] device syzkaller0 entered promiscuous mode [ 202.554685][ T8198] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 202.724766][ T8204] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 202.946562][ T8187] loop0: detected capacity change from 0 to 40427 [ 202.958556][ T8207] device syzkaller0 entered promiscuous mode [ 203.015468][ T8212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1328'. [ 203.104337][ T8187] F2FS-fs (loop0): invalid crc value [ 203.151378][ T8187] F2FS-fs (loop0): Found nat_bits in checkpoint [ 203.295372][ T8187] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 203.319708][ T8187] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 203.440213][ T8228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.481322][ T8228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.608604][ T8234] netlink: 'syz.1.1335': attribute type 1 has an invalid length. [ 203.795968][ T8234] bond13: (slave veth27): Enslaving as an active interface with an up link [ 203.849183][ T8236] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 203.876789][ T8242] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 203.889493][ T8240] device syzkaller0 entered promiscuous mode [ 203.902138][ T8234] device macvlan2 entered promiscuous mode [ 203.910734][ T8234] device bond13 entered promiscuous mode [ 203.916866][ T8234] device veth27 entered promiscuous mode [ 203.923322][ T8234] device veth0_to_bond entered promiscuous mode [ 203.930138][ T8234] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.939321][ T8234] device bond13 left promiscuous mode [ 203.946470][ T8234] device veth27 left promiscuous mode [ 203.952629][ T8234] device veth0_to_bond left promiscuous mode [ 204.466903][ T8265] device syzkaller0 entered promiscuous mode [ 204.520639][ T8265] 0: reclassify loop, rule prio 0, protocol 700 [ 204.946614][ T8277] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 205.113719][ T8282] netlink: 'syz.4.1351': attribute type 1 has an invalid length. [ 205.195129][ T8262] loop5: detected capacity change from 0 to 40427 [ 205.210755][ T8288] bond14: (slave veth29): Enslaving as an active interface with an up link [ 205.223989][ T8285] device syzkaller0 entered promiscuous mode [ 205.250938][ T8282] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 205.292075][ T8262] F2FS-fs (loop5): invalid crc value [ 205.377530][ T8262] F2FS-fs (loop5): Found nat_bits in checkpoint [ 205.443292][ T8288] device macvlan2 entered promiscuous mode [ 205.454514][ T8288] device bond14 entered promiscuous mode [ 205.470015][ T8288] device veth29 entered promiscuous mode [ 205.483910][ T8288] device veth0_to_bond entered promiscuous mode [ 205.506284][ T8288] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 205.515473][ T8288] device bond14 left promiscuous mode [ 205.521034][ T8288] device veth29 left promiscuous mode [ 205.527222][ T8288] device veth0_to_bond left promiscuous mode [ 205.624270][ T8262] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 205.646040][ T8301] device syzkaller0 entered promiscuous mode [ 205.652849][ T8262] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 206.259384][ T8315] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 207.087593][ T8330] netlink: 'syz.5.1361': attribute type 1 has an invalid length. [ 207.220722][ T8330] bond5: (slave veth0_to_bond): making interface the new active one [ 207.234757][ T8330] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 207.330407][ T8339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.363078][ T8339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.441155][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1371'. [ 207.646403][ T8345] bond5: (slave veth0_to_bond): Releasing active interface [ 207.923385][ T8349] device syzkaller0 entered promiscuous mode [ 208.126286][ T8355] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1375'. [ 208.216384][ T8357] tipc: Enabling of bearer rejected, failed to enable media [ 208.280426][ T8358] device syzkaller0 entered promiscuous mode [ 208.341085][ T8344] loop4: detected capacity change from 0 to 40427 [ 208.378579][ T8344] F2FS-fs (loop4): invalid crc value [ 208.415029][ T8361] device syzkaller0 entered promiscuous mode [ 208.461777][ T8344] F2FS-fs (loop4): Found nat_bits in checkpoint [ 208.622860][ T8366] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 208.631143][ T8344] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 208.659170][ T8344] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 208.991572][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1383'. [ 209.413285][ T8392] dccp_v6_rcv: dropped packet with invalid checksum [ 209.488211][ T8394] tipc: Enabling of bearer rejected, failed to enable media [ 209.508376][ T8394] device syzkaller0 entered promiscuous mode [ 209.537229][ T8396] device syzkaller0 entered promiscuous mode [ 209.735319][ T8404] netlink: 'syz.5.1393': attribute type 1 has an invalid length. [ 209.798747][ T8402] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 210.084522][ T8407] bond6: (slave veth0_to_bond): making interface the new active one [ 210.101946][ T8407] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 210.124278][ T8413] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1396'. [ 210.146695][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 210.472864][ T8415] bond6: (slave veth0_to_bond): Releasing backup interface [ 210.606064][ T8435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.614741][ T8435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.491500][ T8443] dccp_v6_rcv: dropped packet with invalid checksum [ 211.732610][ T8454] netlink: 'syz.0.1407': attribute type 1 has an invalid length. [ 211.773303][ T8454] device bond11 entered promiscuous mode [ 211.779592][ T8454] 8021q: adding VLAN 0 to HW filter on device bond11 [ 211.841181][ T8456] device veth21 entered promiscuous mode [ 211.861655][ T8456] bond11: (slave veth21): Enslaving as an active interface with an up link [ 211.873803][ T8453] device syzkaller0 entered promiscuous mode [ 211.907696][ T6152] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 211.985205][ T8460] netlink: 'syz.1.1409': attribute type 1 has an invalid length. [ 212.027976][ T8460] bond13: (slave veth0_to_bond): Releasing backup interface [ 212.039825][ T8460] bond14: (slave veth0_to_bond): making interface the new active one [ 212.049448][ T8460] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 212.063882][ T8464] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 212.573565][ T8481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.933854][ T8491] device bond12 entered promiscuous mode [ 212.939962][ T8491] 8021q: adding VLAN 0 to HW filter on device bond12 [ 212.984956][ T8491] device veth23 entered promiscuous mode [ 212.991263][ T8491] bond12: (slave veth23): Enslaving as an active interface with an up link [ 213.013494][ T8493] device syzkaller0 entered promiscuous mode [ 213.043610][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 213.072936][ T8500] netlink: 'syz.1.1423': attribute type 1 has an invalid length. [ 213.099023][ T8500] device bond15 entered promiscuous mode [ 213.105461][ T8500] 8021q: adding VLAN 0 to HW filter on device bond15 [ 213.201292][ T8500] device veth31 entered promiscuous mode [ 213.209441][ T8500] bond15: (slave veth31): Enslaving as an active interface with an up link [ 213.220778][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): bond15: link becomes ready [ 213.242370][ T8506] netlink: 'syz.0.1424': attribute type 1 has an invalid length. [ 213.401112][ T8506] bond13: (slave veth0_to_bond): making interface the new active one [ 213.427816][ T8506] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 213.552481][ T8512] bond14: (slave veth0_to_bond): Releasing active interface [ 213.605145][ T8511] device syzkaller0 entered promiscuous mode [ 214.069450][ T8535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.076842][ T8535] IPv6: NLM_F_CREATE should be set when creating new route [ 214.483459][ T8550] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1435'. [ 214.529053][ T8548] device syzkaller0 entered promiscuous mode [ 214.620851][ T242] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 214.776779][ T8559] netlink: 'syz.5.1441': attribute type 1 has an invalid length. [ 214.920015][ T8568] bond13: (slave veth0_to_bond): Releasing active interface [ 214.975216][ T8566] bond6: (slave veth0_to_bond): Releasing active interface [ 214.994417][ T8566] bond7: (slave veth0_to_bond): making interface the new active one [ 215.004569][ T8566] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 215.034483][ T8573] device syzkaller0 entered promiscuous mode [ 215.556676][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'. [ 216.187827][ T8588] device syzkaller0 entered promiscuous mode [ 216.238305][ T8588] tipc: Enabled bearer , priority 0 [ 216.268896][ T8593] device syzkaller0 entered promiscuous mode [ 216.381167][ T8588] tipc: Resetting bearer [ 216.395453][ T8587] tipc: Resetting bearer [ 216.413276][ T8587] tipc: Disabling bearer [ 216.443949][ T8599] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 216.528581][ T8604] netlink: 'syz.4.1458': attribute type 1 has an invalid length. [ 216.670924][ T8609] bond14: (slave veth0_to_bond): Releasing backup interface [ 216.713434][ T8609] bond15: (slave veth0_to_bond): making interface the new active one [ 216.724173][ T8609] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 216.769110][ T8611] device syzkaller0 entered promiscuous mode [ 217.073241][ T5822] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 217.728624][ T8602] loop0: detected capacity change from 0 to 40427 [ 217.908798][ T8602] F2FS-fs (loop0): invalid crc value [ 217.952035][ T8633] device syzkaller0 entered promiscuous mode [ 217.997941][ T8602] F2FS-fs (loop0): Found nat_bits in checkpoint [ 218.077032][ T8641] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 218.093623][ T8602] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 218.139229][ T8602] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 218.232733][ T21] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 218.421594][ T8656] device syzkaller0 entered promiscuous mode [ 218.456377][ T8655] netlink: 'syz.0.1474': attribute type 1 has an invalid length. [ 218.517729][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 218.655910][ T8655] bond14: (slave veth0_to_bond): making interface the new active one [ 218.666270][ T21] usb 5-1: config 1 has an invalid interface number: 19 but max is 0 [ 218.676965][ T8655] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 218.687188][ T21] usb 5-1: config 1 has no interface number 0 [ 218.694847][ T21] usb 5-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 218.757181][ T21] usb 5-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 218.813319][ T21] usb 5-1: config 1 interface 19 has no altsetting 0 [ 219.013577][ T21] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 219.080271][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.241027][ T21] usb 5-1: Product: syz [ 219.334410][ T21] usb 5-1: Manufacturer: syz [ 219.436774][ T21] usb 5-1: SerialNumber: syz [ 219.658891][ T21] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 219.787187][ T8687] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 219.826222][ T8634] loop4: detected capacity change from 0 to 8 [ 219.905536][ T8634] SQUASHFS error: xz decompression failed, data probably corrupt [ 219.913760][ T8634] SQUASHFS error: Failed to read block 0xa8: -5 [ 219.920062][ T8634] SQUASHFS error: Unable to read data cache entry [a8] [ 219.927005][ T8634] SQUASHFS error: Unable to read page, block a8, size 54 [ 219.934908][ T8634] SQUASHFS error: Unable to read data cache entry [a8] [ 219.941795][ T8634] SQUASHFS error: Unable to read page, block a8, size 54 [ 219.950296][ T8634] SQUASHFS error: Unable to read data cache entry [a8] [ 219.957236][ T8634] SQUASHFS error: Unable to read page, block a8, size 54 [ 219.968731][ T8634] SQUASHFS error: xz decompression failed, data probably corrupt [ 219.976644][ T8634] SQUASHFS error: Failed to read block 0xa8: -5 [ 219.992819][ T8634] SQUASHFS error: xz decompression failed, data probably corrupt [ 220.000658][ T8634] SQUASHFS error: Failed to read block 0xa8: -5 [ 220.008047][ T26] audit: type=1800 audit(1788093935.977:13): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1469" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 220.031041][ T8634] udc-core: couldn't find an available UDC or it's busy [ 220.038464][ T8634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 220.150946][ T8697] device syzkaller0 entered promiscuous mode [ 220.186863][ T8699] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1489'. [ 220.231888][ T8697] tipc: Enabled bearer , priority 0 [ 220.260829][ T8697] tipc: Resetting bearer [ 220.296641][ T8695] tipc: Resetting bearer [ 220.359150][ T8695] tipc: Disabling bearer [ 220.398524][ T8708] netlink: 'syz.3.1493': attribute type 1 has an invalid length. [ 220.430397][ T8706] device syzkaller0 entered promiscuous mode [ 220.466363][ T8686] loop1: detected capacity change from 0 to 40427 [ 220.493984][ T8708] bond7: (slave veth0_to_bond): making interface the new active one [ 220.504392][ T8708] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 220.546086][ T8686] F2FS-fs (loop1): invalid crc value [ 220.567846][ T23] usb 5-1: USB disconnect, device number 7 [ 220.582624][ T1278] usb 5-1: Failed to submit usb control message: -71 [ 220.589696][ T1278] usb 5-1: unable to send the bmi data to the device: -71 [ 220.617107][ T8686] F2FS-fs (loop1): Found nat_bits in checkpoint [ 220.624277][ T1278] usb 5-1: unable to get target info from device [ 220.640913][ T1278] usb 5-1: could not get target info (-71) [ 220.647586][ T1278] usb 5-1: could not probe fw (-71) [ 220.774657][ T8686] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 220.823509][ T8721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1497'. [ 220.850614][ T8686] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 221.017561][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1495'. [ 221.099127][ T8732] bond7: (slave veth0_to_bond): Releasing active interface [ 221.361939][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1504'. [ 221.381744][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1502'. [ 221.478925][ T8756] device syzkaller0 entered promiscuous mode [ 221.505397][ T8758] device syzkaller0 entered promiscuous mode [ 221.532922][ T8756] tipc: Enabled bearer , priority 0 [ 221.563139][ T8756] tipc: Resetting bearer [ 221.589643][ T8755] tipc: Resetting bearer [ 221.614831][ T8755] tipc: Disabling bearer [ 221.655985][ T8762] netlink: 'syz.1.1508': attribute type 1 has an invalid length. [ 221.822584][ T8762] bond16: (slave veth0_to_bond): making interface the new active one [ 221.844855][ T8762] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 221.882387][ T4256] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 222.043862][ T8780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1513'. [ 222.132308][ T4256] usb 6-1: Using ep0 maxpacket: 16 [ 222.190848][ T8783] bond15: (slave veth0_to_bond): Releasing active interface [ 222.252530][ T4256] usb 6-1: config 1 has an invalid interface number: 19 but max is 0 [ 222.260727][ T4256] usb 6-1: config 1 has no interface number 0 [ 222.288729][ T4256] usb 6-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 222.331931][ T4256] usb 6-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 222.369060][ T4256] usb 6-1: config 1 interface 19 has no altsetting 0 [ 222.464166][ T8791] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 222.532940][ T4256] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 222.542052][ T4256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.592418][ T4256] usb 6-1: Product: syz [ 222.596654][ T4256] usb 6-1: Manufacturer: syz [ 222.601278][ T4256] usb 6-1: SerialNumber: syz [ 222.685552][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1519'. [ 222.726949][ T8797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1520'. [ 222.751917][ T4256] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 222.791419][ T8774] loop0: detected capacity change from 0 to 40427 [ 222.811280][ T8774] F2FS-fs (loop0): invalid crc value [ 222.902518][ T8760] loop5: detected capacity change from 0 to 8 [ 222.915174][ T8774] F2FS-fs (loop0): Found nat_bits in checkpoint [ 222.975392][ T8760] SQUASHFS error: xz decompression failed, data probably corrupt [ 222.983549][ T8760] SQUASHFS error: Failed to read block 0xa8: -5 [ 222.989872][ T8760] SQUASHFS error: Unable to read data cache entry [a8] [ 222.996806][ T8760] SQUASHFS error: Unable to read page, block a8, size 54 [ 223.004713][ T8760] SQUASHFS error: Unable to read data cache entry [a8] [ 223.011597][ T8760] SQUASHFS error: Unable to read page, block a8, size 54 [ 223.018811][ T8763] udc-core: couldn't find an available UDC or it's busy [ 223.018830][ T8763] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 223.034599][ T8760] SQUASHFS error: Unable to read data cache entry [a8] [ 223.041488][ T8760] SQUASHFS error: Unable to read page, block a8, size 54 [ 223.052641][ T8760] SQUASHFS error: xz decompression failed, data probably corrupt [ 223.060432][ T8760] SQUASHFS error: Failed to read block 0xa8: -5 [ 223.068053][ T8760] SQUASHFS error: xz decompression failed, data probably corrupt [ 223.075905][ T8760] SQUASHFS error: Failed to read block 0xa8: -5 [ 223.082554][ T26] audit: type=1800 audit(1788093939.057:14): pid=8760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1507" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 223.093258][ T5785] usb 6-1: Failed to submit usb control message: -71 [ 223.118121][ T4229] usb 6-1: USB disconnect, device number 9 [ 223.209815][ T5785] usb 6-1: unable to send the bmi data to the device: -71 [ 223.227305][ T5785] usb 6-1: unable to get target info from device [ 223.235622][ T8774] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 223.248642][ T5785] usb 6-1: could not get target info (-71) [ 223.256535][ T8807] device syzkaller0 entered promiscuous mode [ 223.270512][ T5785] usb 6-1: could not probe fw (-71) [ 223.277760][ T8774] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 223.445858][ T8812] device syzkaller0 entered promiscuous mode [ 223.484200][ T8812] tipc: Enabled bearer , priority 0 [ 223.539694][ T8812] tipc: Resetting bearer [ 223.563434][ T8811] tipc: Resetting bearer [ 223.607272][ T8811] tipc: Disabling bearer [ 223.813148][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1526'. [ 224.137554][ T8822] bond7: (slave veth0_to_bond): Releasing active interface [ 224.537934][ T8845] device syzkaller0 entered promiscuous mode [ 224.753895][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1536'. [ 225.042545][ T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 225.188919][ T8864] dccp_v6_rcv: dropped packet with invalid checksum [ 225.298191][ T8867] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 225.350000][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 225.490698][ T23] usb 5-1: config 1 has an invalid interface number: 19 but max is 0 [ 225.518865][ T23] usb 5-1: config 1 has no interface number 0 [ 225.549343][ T23] usb 5-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 225.563738][ T8877] device syzkaller0 entered promiscuous mode [ 225.601914][ T23] usb 5-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024 [ 225.619784][ T8879] netlink: 'syz.1.1549': attribute type 1 has an invalid length. [ 225.646293][ T23] usb 5-1: config 1 interface 19 has no altsetting 0 [ 225.795131][ T8879] bond17: (slave veth35): Enslaving as an active interface with a down link [ 225.849497][ T23] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 225.869113][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.924408][ T23] usb 5-1: Product: syz [ 225.939064][ T23] usb 5-1: Manufacturer: syz [ 225.949245][ T23] usb 5-1: SerialNumber: syz [ 226.008481][ T8883] bond16: (slave veth0_to_bond): Releasing active interface [ 226.046094][ T8883] bond17: (slave veth0_to_bond): making interface the new active one [ 226.060248][ T23] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 226.066233][ T8883] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 226.188200][ T8879] device macvlan2 entered promiscuous mode [ 226.202531][ T4896] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 226.218927][ T8879] device bond17 entered promiscuous mode [ 226.225270][ T8879] device veth0_to_bond entered promiscuous mode [ 226.233062][ T8851] loop4: detected capacity change from 0 to 8 [ 226.242685][ T8879] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 226.268654][ T8879] bond17: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth35 [ 226.301079][ T8879] device bond17 left promiscuous mode [ 226.313093][ T8851] SQUASHFS error: xz decompression failed, data probably corrupt [ 226.320947][ T8851] SQUASHFS error: Failed to read block 0xa8: -5 [ 226.327406][ T8851] SQUASHFS error: Unable to read data cache entry [a8] [ 226.333319][ T8879] device veth0_to_bond left promiscuous mode [ 226.334642][ T8851] SQUASHFS error: Unable to read page, block a8, size 54 [ 226.348354][ T8851] SQUASHFS error: Unable to read data cache entry [a8] [ 226.355299][ T8851] SQUASHFS error: Unable to read page, block a8, size 54 [ 226.363231][ T8851] SQUASHFS error: Unable to read data cache entry [a8] [ 226.370118][ T8851] SQUASHFS error: Unable to read page, block a8, size 54 [ 226.378346][ T8851] SQUASHFS error: xz decompression failed, data probably corrupt [ 226.386290][ T8851] SQUASHFS error: Failed to read block 0xa8: -5 [ 226.395417][ T8851] SQUASHFS error: xz decompression failed, data probably corrupt [ 226.403273][ T8851] SQUASHFS error: Failed to read block 0xa8: -5 [ 226.409865][ T26] audit: type=1800 audit(1788093942.377:15): pid=8851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1537" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 226.431945][ T8900] udc-core: couldn't find an available UDC or it's busy [ 226.438977][ T8900] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 226.472942][ T8894] __nla_validate_parse: 1 callbacks suppressed [ 226.472959][ T8894] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1553'. [ 226.966076][ T4230] usb 5-1: USB disconnect, device number 8 [ 226.972671][ T1278] usb 5-1: Failed to submit usb control message: -71 [ 226.979780][ T1278] usb 5-1: unable to send the bmi data to the device: -71 [ 226.988959][ T1108] Bluetooth: hci5: command 0x0406 tx timeout [ 227.000339][ T1278] usb 5-1: unable to get target info from device [ 227.007103][ T1278] usb 5-1: could not get target info (-71) [ 227.013910][ T1278] usb 5-1: could not probe fw (-71)