last executing test programs: 15m43.994443587s ago: executing program 0 (id=476): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x9}}}}}}, 0x0) 15m25.805910681s ago: executing program 0 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x1f, 0x8, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000080}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 15m5.438186873s ago: executing program 0 (id=480): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 14m45.496123989s ago: executing program 0 (id=482): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x3, @multicast2}}}, 0x108) 14m28.465213825s ago: executing program 0 (id=484): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x42) write(r0, &(0x7f0000000100)="1800000016005f021dfffffffffffff80700000301000000", 0x18) 14m11.917446479s ago: executing program 0 (id=486): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0xd2, &(0x7f0000000980)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {0x4e1a, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7f6099a59a4821e9de204988ebba03d7f8b9ea83ac86dff5f472896599557182", "5db2e3a0e6d68d01681966852198bfd0580cd1e43fced3e8b154eb90e8ee4efacd25d2d64b2058cd759c88fe26e53168", "f8915a9d0c76904a45b22d445b7854fe5e92fc7bfaaa1a550257d0de", {"066d3599053072e445898190a64392b2", "ae93cd20c0467ffc6d6c0aded9aef5b8"}}}}}}}}, 0x0) 13m18.372345768s ago: executing program 32 (id=486): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0xd2, &(0x7f0000000980)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {0x4e1a, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7f6099a59a4821e9de204988ebba03d7f8b9ea83ac86dff5f472896599557182", "5db2e3a0e6d68d01681966852198bfd0580cd1e43fced3e8b154eb90e8ee4efacd25d2d64b2058cd759c88fe26e53168", "f8915a9d0c76904a45b22d445b7854fe5e92fc7bfaaa1a550257d0de", {"066d3599053072e445898190a64392b2", "ae93cd20c0467ffc6d6c0aded9aef5b8"}}}}}}}}, 0x0) 2m3.385543842s ago: executing program 1 (id=521): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000005c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x80, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x64, 0x1000, 0x0, 0x1, 0xa, @local, @rand_addr=0x64010102, {[@ssrr={0x89, 0xf, 0x18, [@multicast2, @remote, @multicast2]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0x7, "2016e44527"}, {0x5, 0x9, "cda155f8446838"}, {0x2, 0xb, "1adbfd38959d4c8d63"}, {0x5, 0xd, "86d299388651838be571c4"}]}]}}}}}}}, 0x0) 1m45.210148953s ago: executing program 1 (id=522): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) sendfile(r0, r0, 0x0, 0x6) 1m19.418047519s ago: executing program 1 (id=523): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 51.587365588s ago: executing program 1 (id=524): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x1000000003, 0x82}], 0x1, 0x0, 0x0, 0x1) 37.905601097s ago: executing program 1 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) 0s ago: executing program 1 (id=526): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000180)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000003d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9", 0x1}], 0x1}}], 0x1, 0x200080fc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:60254' (ED25519) to the list of known hosts. syzkaller login: [ 784.347177][ T3233] cgroup: Unknown subsys name 'net' [ 785.462674][ T3233] cgroup: Unknown subsys name 'cpuset' [ 785.678256][ T3233] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 904.464349][ T3233] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 1115.777469][ T3246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.958639][ T3246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.669958][ T3247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.196830][ T3247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.207470][ T3247] hsr_slave_0: entered promiscuous mode [ 1149.286802][ T3247] hsr_slave_1: entered promiscuous mode [ 1149.697116][ T3246] hsr_slave_0: entered promiscuous mode [ 1149.747170][ T3246] hsr_slave_1: entered promiscuous mode [ 1149.787896][ T3246] debugfs: 'hsr0' already exists in 'hsr' [ 1149.792049][ T3246] Cannot create hsr debugfs directory [ 1174.974765][ T3247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1175.508572][ T3247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1175.705023][ T3247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1175.933119][ T3247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1176.094787][ T3247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1176.278236][ T3247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1177.195595][ T3247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1177.611999][ T3247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1183.065382][ T3246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1183.496026][ T3246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1183.717172][ T3246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1184.192945][ T3246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1184.335852][ T3246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1184.805142][ T3246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1185.127413][ T3246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1185.628640][ T3246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1226.008519][ T3247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.708739][ T3246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.649366][ T3247] veth0_vlan: entered promiscuous mode [ 1353.294777][ T3247] veth1_vlan: entered promiscuous mode [ 1358.036601][ T3247] veth0_macvtap: entered promiscuous mode [ 1359.407970][ T3246] veth0_vlan: entered promiscuous mode [ 1360.025837][ T3247] veth1_macvtap: entered promiscuous mode [ 1361.943471][ T3246] veth1_vlan: entered promiscuous mode [ 1368.225605][ T3475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.388658][ T3475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.594574][ T3475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.805474][ T3475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.167161][ T3246] veth0_macvtap: entered promiscuous mode [ 1371.536691][ T3246] veth1_macvtap: entered promiscuous mode [ 1379.425243][ T3252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.688086][ T3252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.706794][ T3252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.719573][ T3252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.584559][ T3247] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1482.008409][ T3888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 1483.716673][ T3888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 1498.092842][ T3890] mmap: syz.0.9 (3890) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1587.372536][ T3912] ======================================================= [ 1587.372536][ T3912] WARNING: The mand mount option has been deprecated and [ 1587.372536][ T3912] and is ignored by this kernel. Remove the mand [ 1587.372536][ T3912] option from the mount to silence this warning. [ 1587.372536][ T3912] ======================================================= [ 1787.289965][ T3971] capability: warning: `syz.0.41' uses 32-bit capabilities (legacy support in use) [ 1833.914143][ T3987] fuseblk: block size(5120) > page size(4096) not supported by filesystem [ 1852.635337][ T3995] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1925.235756][ T4017] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 1975.614495][ T4031] netlink: 'syz.0.60': attribute type 58 has an invalid length. [ 1975.624744][ T4031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 2118.812189][ T4070] binder_alloc: binder_alloc_mmap_handler: 4068 200000ffc000-200000fff000 already mapped failed -16 [ 2192.787596][ T31] audit: type=1326 audit(2191.220:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4088 comm=297D5922 exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff91933b1a code=0x7ffc0000 [ 2192.818266][ T31] audit: type=1326 audit(2191.050:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4088 comm="syz.0.84" exe="/syz-executor" sig=0 arch=c00000f3 syscall=115 compat=0 ip=0x7fff9191e0fc code=0x7ffc0000 [ 2192.976384][ T31] audit: type=1326 audit(2191.430:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4088 comm=297D5922 exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff91933b1a code=0x7ffc0000 [ 2194.573260][ T31] audit: type=1326 audit(2193.060:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4088 comm="syz.0.84" exe="/syz-executor" sig=0 arch=c00000f3 syscall=436 compat=0 ip=0x7fff91933b1a code=0x7ffc0000 [ 2194.743926][ T31] audit: type=1326 audit(2193.160:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4088 comm="syz.0.84" exe="/syz-executor" sig=0 arch=c00000f3 syscall=94 compat=0 ip=0x7fff91933b1a code=0x7ffc0000 [ 2302.059009][ T4123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 2372.475492][ T4154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 2467.472739][ T4183] syz.1.117 (4183): /proc/4182/oom_adj is deprecated, please use /proc/4182/oom_score_adj instead. [ 2502.058086][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 2502.111880][ T4194] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2582.957637][ T4222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.134'. [ 2622.996574][ T4233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 2628.773142][ T4235] capability: warning: `syz.1.140' uses deprecated v2 capabilities in a way that may be insecure [ 2647.947797][ T4242] netlink: 'syz.0.143': attribute type 29 has an invalid length. [ 2648.379363][ T4243] netlink: 'syz.0.143': attribute type 29 has an invalid length. [ 2824.009498][ T4301] Invalid logical block size (-4) [ 2882.818910][ T4318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.174'. [ 2930.598999][ T4329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.179'. [ 3104.336734][ T4053] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 3105.903060][ T4053] usb 2-1: Using ep0 maxpacket: 32 [ 3106.337048][ T4053] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 172, changing to 11 [ 3106.339256][ T4053] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid maxpacket 17984, setting to 1024 [ 3106.357456][ T4053] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3106.369434][ T4053] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 3106.381231][ T4053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3107.030008][ T4053] usb 2-1: config 0 descriptor?? [ 3107.457900][ T4380] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3114.383299][ T4053] usbhid 2-1:0.0: can't add hid device: -32 [ 3114.498085][ T4053] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 3118.445807][ T4250] usb 2-1: USB disconnect, device number 2 [ 3416.152840][ T4482] netlink: 480 bytes leftover after parsing attributes in process `syz.1.236'. [ 3454.569754][ T4490] CUSE: unknown device info "" [ 3454.621659][ T4490] CUSE: unknown device info "Ö" [ 3454.659394][ T4490] CUSE: unknown device info "" [ 3454.682174][ T4490] CUSE: zero length info key specified [ 3587.354046][ T4528] netlink: 360 bytes leftover after parsing attributes in process `syz.0.253'. [ 3677.126442][ T4550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 3677.158062][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 3677.185691][ T4550] netlink: 'syz.0.263': attribute type 13 has an invalid length. [ 3677.236510][ T4550] netlink: 'syz.0.263': attribute type 12 has an invalid length. [ 3731.325784][ T4567] netlink: 'syz.0.270': attribute type 1 has an invalid length. [ 3819.389342][ T4588] IPv6: sit1: Disabled Multicast RS [ 3913.117637][ T4619] usb usb1: usbfs: process 4619 (syz.1.290) did not claim interface 9 before use [ 3956.484795][ T4633] netlink: 68 bytes leftover after parsing attributes in process `syz.0.296'. [ 4077.494405][ T4677] netlink: 76 bytes leftover after parsing attributes in process `syz.0.312'. [ 4139.919319][ T4694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'. [ 4506.389834][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 4506.455133][ T4786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.354'. [ 4511.724170][ T4786] vlan2: entered allmulticast mode [ 4511.795207][ T4786] gretap0: entered allmulticast mode [ 4608.466739][ T4808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.361'. [ 4856.253748][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 4856.326312][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 4856.576820][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 4856.724762][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 4857.107456][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 4857.227976][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 4857.247119][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 4857.269266][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 4857.318240][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 4857.452630][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 4858.494683][ T4858] Zero length message leads to an empty skb [ 4930.238659][ T4873] netlink: 'syz.1.387': attribute type 22 has an invalid length. [ 4931.035365][ T4873] netlink: 'syz.1.387': attribute type 22 has an invalid length. [ 4931.037758][ T4873] __nla_validate_parse: 40 callbacks suppressed [ 4931.038302][ T4873] netlink: 44 bytes leftover after parsing attributes in process `syz.1.387'. [ 4996.745094][ T4888] netlink: 'syz.1.393': attribute type 4 has an invalid length. [ 4996.783363][ T4888] netlink: 17 bytes leftover after parsing attributes in process `syz.1.393'. [ 5301.764179][ T4958] vlan2: entered promiscuous mode [ 5301.778437][ T4958] geneve1: entered promiscuous mode [ 5301.929903][ T4958] vlan2: entered allmulticast mode [ 5301.994837][ T4958] geneve1: entered allmulticast mode [ 5403.327879][ T4723] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 5403.354442][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 5404.224209][ T4723] usb 1-1: device descriptor read/64, error -32 [ 5404.889702][ T4723] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 5406.833797][ T4723] usb 1-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 5406.837308][ T4723] usb 1-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 5406.839649][ T4723] usb 1-1: config 1 interface 0 has no altsetting 0 [ 5410.657780][ T4723] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 5410.671621][ T4723] usb 1-1: New USB device strings: Mfr=0, Product=252, SerialNumber=1 [ 5410.694313][ T4723] usb 1-1: Product: syz [ 5410.704066][ T4723] usb 1-1: SerialNumber: syz [ 5417.716872][ T4723] usb 1-1: can't set config #1, error -110 [ 5421.338129][ T4723] usb 1-1: USB disconnect, device number 3 [ 5900.604183][ T5100] netlink: 60 bytes leftover after parsing attributes in process `syz.1.469'. [ 5901.508851][ T5100] netlink: 60 bytes leftover after parsing attributes in process `syz.1.469'. [ 6060.897667][ T5144] xt_hashlimit: size too large, truncated to 1048576 [ 6228.827415][ T5104] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6235.692559][ T5104] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6240.373276][ T5104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6244.827597][ T5104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6270.578968][ T5218] usb usb1: usbfs: process 5218 (syz.1.494) did not claim interface 8 before use [ 6292.348330][ T5104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6292.546824][ T5104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6292.699988][ T5104] bond0 (unregistering): Released all slaves [ 6297.188051][ T5104] hsr_slave_0: left promiscuous mode [ 6297.408453][ T5104] hsr_slave_1: left promiscuous mode [ 6298.345652][ T5104] veth1_macvtap: left promiscuous mode [ 6298.423320][ T5104] veth0_macvtap: left promiscuous mode [ 6298.453163][ T5104] veth1_vlan: left promiscuous mode [ 6298.488070][ T5104] veth0_vlan: left promiscuous mode [ 6315.261169][ T5232] tmpfs: Cannot enable quota on remount [ 6410.583476][ T3076] 8021q: adding VLAN 0 to HW filter on device eth1 [ 6421.082810][ T5161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6421.453040][ T5161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6466.643797][ T3076] 8021q: adding VLAN 0 to HW filter on device eth2 [ 6481.707299][ T5161] hsr_slave_0: entered promiscuous mode [ 6481.949844][ T5161] hsr_slave_1: entered promiscuous mode [ 6514.516649][ T5161] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 6515.249892][ T5161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6516.231948][ T5161] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 6517.557370][ T5161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6518.692657][ T5161] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 6519.835089][ T5161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6520.763066][ T5161] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 6521.567808][ T5161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6550.217881][ T3076] 8021q: adding VLAN 0 to HW filter on device eth3 [ 6571.173566][ T5161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6574.448207][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 6602.533528][ T3076] 8021q: adding VLAN 0 to HW filter on device eth4 [ 6640.646299][ T5560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.516'. [ 6664.504656][ T5180] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 6665.923922][ T5180] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 6665.951687][ T5180] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 6665.980055][ T5180] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 6666.056304][ T5180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 6666.104142][ T5180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 6666.557954][ T5180] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 6666.579764][ T5180] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 6666.606109][ T5180] usb 2-1: Product: syz [ 6666.615630][ T5180] usb 2-1: Manufacturer: syz [ 6673.479512][ T5180] usb 2-1: can't set config #1, error -110 [ 6676.495855][ T4874] usb 2-1: USB disconnect, device number 3 [ 6831.027060][ T5643] netlink: 71 bytes leftover after parsing attributes in process `syz.1.523'. [ 6841.863899][ T5104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6842.084883][ T5104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6842.238029][ T5104] bond0 (unregistering): Released all slaves [ 6844.847852][ T5104] hsr_slave_0: left promiscuous mode [ 6845.294693][ T5104] hsr_slave_1: left promiscuous mode [ 7426.815211][ T32] INFO: task kworker/R-ipv6_:1971 blocked for more than 443 seconds. [ 7434.958055][ T32] Tainted: G W L syzkaller #0 [ 7443.538945][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 7448.568270][ T32] task:kworker/R-ipv6_ state:D stack:0 pid:1971 tgid:1971 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 7453.575914][ T32] Workqueue: ipv6_addrconf addrconf_verify_work