last executing test programs: 5.516998924s ago: executing program 3 (id=2425): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback, {[@routing={0x32, 0x0, 0x1, 0x4}]}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) setns(0xc9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 5.516886749s ago: executing program 3 (id=2426): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup3(r0, r2, 0x80000) r4 = dup(r3) read(r4, &(0x7f00000014c0)=""/4096, 0x1000) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(0xffffffffffffffff, 0x0, &(0x7f000009de80), 0x0) io_uring_enter(0xffffffffffffffff, 0x67e, 0xa9e7, 0x3, &(0x7f0000000040)={[0x2]}, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffffc, 0x2) 2.371113149s ago: executing program 3 (id=2446): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback, {[@routing={0x32, 0x0, 0x1, 0x4}]}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000000808"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) setns(0xc9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.146980527s ago: executing program 3 (id=2447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf25230000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 2.139397984s ago: executing program 1 (id=2450): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="020052487f00000100"/128, 0x80) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="020030397f00000100"/128, 0x80) close(r1) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) 2.068383331s ago: executing program 3 (id=2451): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)={'a', ' *:* ', 'w\x00'}, 0x8) 2.067930744s ago: executing program 1 (id=2452): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x560, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x534, 0x2, [@TCA_BPF_ACT={0x530, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1f4, 0x5, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd9, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036ca696f840b6fd058e9831b7d5556fc2ddb3310402db87ab3b0fb053ee9ec6a5623950d5c8c27e52368dee7c43591d3c28005b61db04d1f0e1"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x140, 0x1b, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58800, 0x3, 0x5, 0x6, 0x7}, 0xc33}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x7, 0x4}, 0x1}}]}, {0xd5, 0x6, "f270d82c886adacf5114c5d4956f4c0386b817377052208700569e3e94411f8656731bf43d4ce53f014d54b20522c3d868362a84b835ace8d5781d9502179d3ae2be79b08417ea95f622fbbe392f9a4a239373bb16bf08e1d1a31eb023d2007b6b41cb949b6308ddb142dbe0d846716145c55703fbd8c7a3936b5f2be5c41d959a6ae73d3b986e29a38be71293c21abf0c9e792157a90f9cc665de40a6566ab690253f7096302d89dfe6ecf48b4e79a6b22d951064f151a6ef776fe1ef8b510d561b11fe7475fb5af8fe93bec2dae22e1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}]}]}}]}, 0x560}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.999129191s ago: executing program 3 (id=2453): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000002000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80000000}) 1.997981905s ago: executing program 1 (id=2454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002900)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a310000000009"], 0xf0}}, 0x0) 1.878216904s ago: executing program 1 (id=2457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r0], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10810) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r4, 0x0, 0x200000) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11000000ffff000004000000fdffffff00000000", @ANYRES32, @ANYBLOB="0000000000000000040000a8c0000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.877979995s ago: executing program 0 (id=2458): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x4}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 1.489758194s ago: executing program 0 (id=2460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x2, 0x4, 0x6, 0x1, 0x6, 0x43}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}}, {0x4e22, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "5bf0f1684c27309854afb8d4b202c5876b94d689c2967b880816531ea1becb1f", "28b6f388875966eeb9ed8d936ced5d92", {"4f862904b1233de46aa934ad0e8fb4ce", "28c2d1466ee6546ffdb5978df0858dc6"}}}}}, 0x86) 990.667594ms ago: executing program 1 (id=2461): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce) 930.196415ms ago: executing program 0 (id=2462): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) accept4$phonet_pipe(r1, 0x0, 0x0, 0x80000) timer_create(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)=@ethtool_gfeatures}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 718.055232ms ago: executing program 1 (id=2466): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101002) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b5000000"], 0xc8) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x24000000) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x5, {0x42, 0x200, 0xfffffffd}}, 0x10) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0a4586d, &(0x7f0000000240)={0x0, r4, r0, 0x7, 0xffff, '\x00', {0xfe, 0x4, 0x0, 0x31a, 0x7fffffff, 0xa, 0x1, 0x643, {0x0, 0x6}, {0x1, 0xfffffffe}, {0x3, 0x1}, 0x4, 0x3ff, 0x9, 0x10000, 0x0, 0x7, 0x9, 0xffff, 0xff, 0x0, '\x00', 0x8, 0x73580, 0x0, 0x2c0}}) r5 = socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000440)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigpending(0x0, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @rand_addr, 0x8}, 0x1c) shutdown(r9, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'basic\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}]}, 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xc4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r10, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0xc) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0xbf00bf00, 0x2e}) 510.47653ms ago: executing program 2 (id=2468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x470, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x444, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x3, 0x4ad, 0x2, 0x2, 0x40, 0xfffffffc, 0x4, 0xcff, 0x7, 0x7ff, 0x2, 0x3, 0x6, 0x3, 0x2, 0x6, 0x9, 0x4, 0xf0b, 0xfffffff8, 0x3, 0x8, 0x0, 0x81, 0xd25, 0x6, 0x80000001, 0x101, 0xa, 0xac6, 0x6, 0x3, 0x0, 0x0, 0x9, 0xc090, 0xc, 0x8, 0x400000, 0x6, 0x7fff, 0x2799, 0x5d9, 0x80, 0xeb3, 0x7, 0x7, 0x5, 0x3, 0x2bc1, 0x2, 0x102d, 0x7f, 0x2, 0x7, 0xa, 0x101, 0x0, 0x400000, 0x5, 0xb8, 0x7, 0x7f, 0x4, 0x1, 0x9, 0x7ff, 0x6, 0xfffffff7, 0x427, 0x7fffffff, 0x2, 0xf07, 0x3, 0xfffffffb, 0x1, 0xf, 0x2, 0x400, 0x2, 0x0, 0x2, 0x6, 0x10001, 0x0, 0x9af6, 0x4, 0x10000, 0xffffffff, 0x7, 0x0, 0x7, 0x2e3d, 0x4, 0x4, 0x45, 0x3, 0xa, 0x1ff, 0x1000, 0xfffffffe, 0xa, 0x2, 0x5, 0xa, 0x1, 0x4, 0x5, 0x0, 0x7, 0x4e1, 0x7, 0x8, 0x8000, 0x3ff, 0xf0, 0x1ff, 0x8, 0x1, 0x80, 0x0, 0x9, 0x200, 0xbffcc13f, 0x9, 0x24f4, 0xffffffff, 0x6, 0x957, 0xf1, 0x9, 0x7, 0x6, 0x0, 0x8, 0x577db72f, 0xc, 0x5, 0xffa3, 0xffff, 0x3ff, 0x4, 0x5, 0x9, 0x8000, 0x8c3, 0x5, 0x7, 0xd, 0xf1a5, 0x7, 0x3, 0x3ff, 0x1, 0x3ff, 0x9, 0x5, 0x9, 0x4, 0x5, 0x55, 0x4, 0x8953, 0x100, 0x0, 0x28, 0x5, 0x33a4, 0x6, 0x9a7, 0x8000, 0x2, 0x9, 0x0, 0xffffff17, 0x81, 0x3322, 0x2, 0x4, 0x3, 0x259, 0x1, 0x0, 0x6, 0x7, 0x7, 0x2, 0x4, 0x7f, 0x2, 0x3, 0x946, 0xba34, 0x8, 0x5, 0x1c69, 0x2, 0x70, 0x3, 0x5, 0xb, 0x200, 0x8, 0x0, 0x2, 0x6, 0xd, 0x13c73831, 0xfed, 0x1295, 0x6, 0x200, 0x3ff, 0x8, 0xffffff53, 0x4, 0x6, 0xfffffff9, 0xc116, 0x2, 0xffffff80, 0x1, 0x7, 0x1, 0x3ff, 0x11, 0x0, 0x7db, 0x3, 0x7f, 0x1, 0x8e, 0x3, 0x7ff, 0xaf73, 0x10000, 0x59, 0x4d09, 0x7, 0xae, 0x6, 0x4, 0x1000, 0xffffff42, 0x1, 0x7ff, 0x0, 0xfffffe01, 0x2ed, 0x3, 0xe19d, 0x1, 0xf, 0x7, 0x2, 0x4]}, @TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf118a815524c8bb}, @TCA_TBF_PARMS={0x28, 0x1, {{0xed, 0x2, 0xe1, 0x400, 0xac, 0x8}, {0x36, 0x2, 0x4, 0x2, 0x3, 0x5}, 0x6, 0x9, 0x1e69}}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 380.299302ms ago: executing program 2 (id=2469): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf25230000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="05000f00d6000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 379.655153ms ago: executing program 2 (id=2470): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 260.479998ms ago: executing program 2 (id=2471): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x4c050) 260.275716ms ago: executing program 2 (id=2472): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x4010018) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000340)="5a28ad33f107f6176a1f5cbf9b8be41f0d36542973b0", 0x16}], 0x2) 119.556568ms ago: executing program 2 (id=2473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r0], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10810) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r4, 0x0, 0x200000) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11000000ffff000004000000fdffffff00000000", @ANYRES32, @ANYBLOB="0000000000000000040000a8c0000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 58.53842ms ago: executing program 0 (id=2474): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4048010) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) eventfd2(0x4, 0x1) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) 396.394µs ago: executing program 0 (id=2475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) 0s ago: executing program 0 (id=2476): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd3b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x2}, {}, {0x7, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000600)="70ebd4219aa416e7b2c1f0731d88", 0xe}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ulticast mode [ 183.815671][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.817114][ T1355] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 183.874763][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 183.877275][ T10] usbtmc 6-1:16.0: can't read capabilities [ 183.968584][ T1355] usb 5-1: unable to get BOS descriptor set [ 183.971472][ T1355] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 183.974568][ T1355] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 183.974876][T10055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1587'. [ 183.980949][ T1355] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.985112][ T1355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.989311][ T1355] usb 5-1: Product: 〉 [ 183.990699][ T1355] usb 5-1: Manufacturer: Ы [ 183.992188][ T1355] usb 5-1: SerialNumber: Р [ 184.078367][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.081145][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.083859][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.086607][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.089218][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.092007][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.095313][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.098153][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.100948][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.103796][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.106616][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.109406][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.112207][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.115056][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.117829][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.120641][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 184.123826][ C3] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 184.139313][T10035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.143440][T10035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.143866][T10059] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 184.148493][ T845] usb 6-1: USB disconnect, device number 18 [ 184.149944][T10059] PKCS7: Only support pkcs7_signedData type [ 184.204379][ T1355] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 184.207257][ T1355] cdc_ncm 5-1:1.0: bind() failure [ 184.214913][ T1355] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 184.219452][ T1355] cdc_ncm 5-1:1.1: bind() failure [ 184.227113][ T1355] usb 5-1: USB disconnect, device number 19 [ 185.793851][T10095] loop5: detected capacity change from 0 to 7 [ 185.804062][T10095] Dev loop5: unable to read RDB block 7 [ 185.807476][T10095] loop5: AHDI p3 p4 [ 185.808908][T10095] loop5: partition table partially beyond EOD, truncated [ 185.813685][T10095] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 185.866690][T10095] Dev loop5: unable to read RDB block 7 [ 185.869177][T10095] loop5: AHDI p3 p4 [ 185.870683][T10095] loop5: partition table partially beyond EOD, truncated [ 185.873012][T10095] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 185.968801][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1606'. [ 186.011890][T10109] tipc: Enabled bearer , priority 0 [ 186.015063][T10109] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 186.019647][T10109] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 186.028794][T10108] tipc: Disabling bearer [ 186.517806][ T10] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 186.705481][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 186.710364][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 186.713647][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.717380][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.721713][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 186.731317][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 186.735699][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 186.740215][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.745082][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.750710][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 186.760104][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 186.763307][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 186.766781][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.770885][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.774653][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 186.792128][ T10] usb 6-1: string descriptor 0 read error: -22 [ 186.795051][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 186.798170][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.905041][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 187.251473][T10136] tipc: Enabled bearer , priority 0 [ 187.254432][T10136] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 187.261591][T10136] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 187.276804][T10135] tipc: Disabling bearer [ 187.970671][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 187.970693][ T42] audit: type=1326 audit(1785906087.635:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.1623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 187.987813][ T42] audit: type=1326 audit(1785906087.635:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.1623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 188.001830][ T42] audit: type=1326 audit(1785906087.635:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.1623" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 188.010765][ T42] audit: type=1326 audit(1785906087.635:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.1623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 188.019162][ T42] audit: type=1326 audit(1785906087.635:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.1623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 188.026612][ T42] audit: type=1326 audit(1785906087.635:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.1623" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 188.034392][ T42] audit: type=1326 audit(1785906087.635:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.1623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 188.041870][ T42] audit: type=1326 audit(1785906087.635:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.1623" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 188.044271][T10162] tipc: Enabled bearer , priority 0 [ 188.048520][ T42] audit: type=1326 audit(1785906087.635:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.1623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 188.048547][ T42] audit: type=1326 audit(1785906087.635:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.1623" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 188.075222][T10162] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 188.079608][T10162] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 188.090732][T10161] tipc: Disabling bearer [ 188.774365][T10179] syzkaller0: entered promiscuous mode [ 188.776173][T10179] syzkaller0: entered allmulticast mode [ 189.000496][ T5758] Bluetooth: hci1: ACL packet for unknown connection handle 4040 [ 189.049899][T10191] tipc: Enabled bearer , priority 0 [ 189.055543][T10191] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 189.065945][T10191] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 189.086923][T10189] tipc: Disabling bearer [ 189.537616][ T5895] usb 6-1: USB disconnect, device number 19 [ 189.820833][T10204] syzkaller0: entered promiscuous mode [ 189.823179][T10204] syzkaller0: entered allmulticast mode [ 190.222670][T10213] netlink: 'syz.0.1644': attribute type 1 has an invalid length. [ 190.999372][T10219] tipc: Enabled bearer , priority 0 [ 191.003628][T10219] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 191.013472][T10219] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 191.024284][T10218] tipc: Disabling bearer [ 191.264295][T10232] batman_adv: batadv0: Adding interface: dummy0 [ 191.266299][T10232] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.277155][T10232] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 191.287823][T10232] netlink: 'syz.0.1650': attribute type 10 has an invalid length. [ 191.292766][T10232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.299359][T10232] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 191.317137][ T1355] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 191.469128][ T1355] usb 6-1: unable to get BOS descriptor set [ 191.473991][ T1355] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 191.478272][ T1355] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 191.484583][ T1355] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.488414][ T1355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.491584][ T1355] usb 6-1: Product: 〉 [ 191.493420][ T1355] usb 6-1: Manufacturer: Ы [ 191.495304][ T1355] usb 6-1: SerialNumber: Р [ 191.539211][T10243] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 191.707377][ T1355] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 191.709577][ T1355] cdc_ncm 6-1:1.0: bind() failure [ 191.713900][ T1355] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 191.716156][ T1355] cdc_ncm 6-1:1.1: bind() failure [ 191.722962][ T1355] usb 6-1: USB disconnect, device number 20 [ 192.240684][T10248] tipc: Enabling of bearer rejected, failed to enable media [ 193.707683][ T5895] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 193.854530][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.857141][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.927134][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 194.426098][ T5895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.784512][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.787752][ T5895] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 194.792539][ T5895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 194.797553][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 194.800858][ T5895] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.801856][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 194.804810][ T5895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 194.804826][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.832100][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1672'. [ 195.016216][ T5895] usb 5-1: GET_CAPABILITIES returned 0 [ 195.018138][ T5895] usbtmc 5-1:16.0: can't read capabilities [ 195.218563][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.221366][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.224185][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.227088][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.230041][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.232827][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.235678][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.238477][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.266090][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.268982][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.271811][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.276239][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.279369][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.282248][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.285200][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 195.288102][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 195.291361][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 195.302362][T10290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.313124][T10290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.319537][ T5895] usb 5-1: USB disconnect, device number 20 [ 195.873633][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 195.873644][ T42] audit: type=1326 audit(1785906095.535:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.3.1678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 195.885456][ T42] audit: type=1326 audit(1785906095.535:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.3.1678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 195.894684][ T42] audit: type=1326 audit(1785906095.535:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.3.1678" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 195.904054][ T42] audit: type=1326 audit(1785906095.535:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.3.1678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 195.914665][ T42] audit: type=1326 audit(1785906095.535:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.3.1678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 195.923994][ T42] audit: type=1326 audit(1785906095.535:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.3.1678" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 195.933194][ T42] audit: type=1326 audit(1785906095.535:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.3.1678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 195.942392][ T42] audit: type=1326 audit(1785906095.535:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.3.1678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 195.952621][ T42] audit: type=1326 audit(1785906095.535:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.3.1678" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 195.962029][ T42] audit: type=1326 audit(1785906095.535:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.3.1678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 196.321108][T10329] CIFS: Attempting to mount //127.0.0.1/share [ 197.117096][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 197.149398][T10329] CIFS: VFS: Error connecting to socket. Aborting operation. [ 197.152551][T10329] CIFS: VFS: cifs_mount failed w/return code = -4 [ 197.278881][ T9] usb 5-1: Dual-Role OTG device on HNP port [ 197.281213][ T9] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 197.284506][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.304387][T10340] netlink: 'syz.1.1684': attribute type 1 has an invalid length. [ 197.337806][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 197.355833][ T9] gspca_spca501: reg write: error -32 [ 197.360660][T10340] 8021q: adding VLAN 0 to HW filter on device bond6 [ 197.364187][ T9] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 197.369289][ T9] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 197.402952][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.504647][T10348] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1687'. [ 197.577697][T10351] loop5: detected capacity change from 0 to 7 [ 197.602063][T10351] Dev loop5: unable to read RDB block 7 [ 197.615082][T10351] loop5: AHDI p3 p4 [ 197.618357][T10351] loop5: partition table partially beyond EOD, truncated [ 197.625678][T10351] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 197.715670][T10353] Dev loop5: unable to read RDB block 7 [ 197.718582][T10353] loop5: AHDI p3 p4 [ 197.720344][T10353] loop5: partition table partially beyond EOD, truncated [ 197.726943][T10353] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 198.097907][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 198.286117][T10361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.290314][T10361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.298350][T10361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.301827][T10361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.597125][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 199.747328][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 199.752395][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.755476][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.758828][ T9] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 199.763173][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 199.766772][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 199.770527][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.775801][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.778863][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.030237][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 200.032013][ T9] usbtmc 6-1:16.0: can't read capabilities [ 200.073329][T10387] jffs2: notice: (10387) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 200.236020][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.239019][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.241821][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.244728][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.248203][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.251684][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.254703][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.257839][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.264593][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.267873][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.270866][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.275434][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.278808][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.282282][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.292228][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.297388][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 200.306480][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.312419][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.328134][ T1355] usb 6-1: USB disconnect, device number 21 [ 201.393671][T10421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.402711][T10421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.435913][T10421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.445841][T10423] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1712'. [ 201.447356][T10421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.449373][T10423] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1712'. [ 202.115115][ T5758] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 202.230740][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.234125][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.245363][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.248911][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.269155][T10446] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 202.271864][T10446] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 202.276015][T10447] vhci_hcd: xmit failed -107 [ 202.283378][T10446] vhci_hcd vhci_hcd.0: Device attached [ 202.290430][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 202.293278][ T5796] vhci_hcd vhci_hcd.0: release socket [ 202.295499][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 205.308995][T10505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.312750][T10505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.735090][T10514] loop5: detected capacity change from 0 to 7 [ 205.743923][T10514] Dev loop5: unable to read RDB block 7 [ 205.746195][T10514] loop5: AHDI p3 p4 [ 205.747941][T10514] loop5: partition table partially beyond EOD, truncated [ 205.749373][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 205.752375][T10514] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 205.760800][T10515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1743'. [ 205.764223][T10515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1743'. [ 205.773479][T10515] vlan2: entered promiscuous mode [ 205.817133][T10514] Dev loop5: unable to read RDB block 7 [ 205.819059][T10514] loop5: AHDI p3 p4 [ 205.820305][T10514] loop5: partition table partially beyond EOD, truncated [ 205.828028][T10514] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 205.887563][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 205.900319][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 206.078740][T10526] kAFS: unable to lookup cell 'ÿ' [ 206.742236][T10547] syzkaller0: entered promiscuous mode [ 206.744082][T10547] syzkaller0: entered allmulticast mode [ 206.892802][T10552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.896326][T10552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.058839][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 207.058852][ T42] audit: type=1804 audit(1785906106.715:215): pid=10560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1761" name="/newroot/352/bus/bus" dev="overlay" ino=1833 res=1 errno=0 [ 207.376966][ T9] libceph: connect (1)[c::]:6789 error -101 [ 207.381971][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 207.388496][ T9] libceph: connect (1)[c::]:6789 error -101 [ 207.391221][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 207.617466][T10571] loop5: detected capacity change from 0 to 7 [ 207.622734][T10571] Dev loop5: unable to read RDB block 7 [ 207.624653][T10571] loop5: AHDI p1 p3 p4 [ 207.626184][T10571] loop5: partition table partially beyond EOD, truncated [ 207.630310][T10571] loop5: p1 size 100663296 extends beyond EOD, truncated [ 207.636887][T10571] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 207.660124][ T9] libceph: connect (1)[c::]:6789 error -101 [ 207.671088][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 207.694531][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 207.695139][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 207.873626][T10579] syzkaller0: entered promiscuous mode [ 207.876031][T10579] syzkaller0: entered allmulticast mode [ 207.951724][T10564] ceph: No mds server is up or the cluster is laggy [ 208.826468][T10598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.831824][T10598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.327163][ T40] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 209.391004][T10606] syzkaller0: entered promiscuous mode [ 209.393543][T10606] syzkaller0: entered allmulticast mode [ 209.457130][ T40] usb 6-1: device descriptor read/64, error -71 [ 209.707223][ T40] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 209.837075][ T40] usb 6-1: device descriptor read/64, error -71 [ 209.947290][ T40] usb usb6-port1: attempt power cycle [ 210.199165][ T42] audit: type=1800 audit(1785906109.865:216): pid=10625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1780" name="ipv4_port" dev="configfs" ino=33964 res=0 errno=0 [ 210.257699][T10613] tipc: Enabled bearer , priority 0 [ 210.264154][T10611] tipc: Disabling bearer [ 210.287213][ T40] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 210.307769][ T40] usb 6-1: device descriptor read/8, error -71 [ 210.547280][ T40] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 210.567839][ T40] usb 6-1: device descriptor read/8, error -71 [ 210.679825][ T40] usb usb6-port1: unable to enumerate USB device [ 211.024772][ T42] audit: type=1326 audit(1785906110.685:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 211.031794][ T42] audit: type=1326 audit(1785906110.705:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 211.039024][ T42] audit: type=1326 audit(1785906110.705:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 211.046093][ T42] audit: type=1326 audit(1785906110.705:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 211.053844][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'. [ 211.057112][T10644] netlink: 'syz.0.1788': attribute type 2 has an invalid length. [ 211.060612][ T42] audit: type=1326 audit(1785906110.705:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 211.075397][ T42] audit: type=1326 audit(1785906110.705:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 211.084187][ T42] audit: type=1326 audit(1785906110.705:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 211.092434][ T42] audit: type=1326 audit(1785906110.705:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10643 comm="syz.0.1788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 211.133502][T10646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.140970][T10646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.153023][T10646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.158859][T10646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.273883][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 211.454676][T10661] netlink: 'syz.2.1793': attribute type 1 has an invalid length. [ 211.743526][T10663] tipc: Enabled bearer , priority 0 [ 211.746565][T10663] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 211.750775][T10663] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 211.761836][T10662] tipc: Disabling bearer [ 212.148241][T10679] loop5: detected capacity change from 0 to 7 [ 212.152661][T10679] Dev loop5: unable to read RDB block 7 [ 212.155415][T10679] loop5: AHDI p1 p3 p4 [ 212.160614][T10679] loop5: partition table partially beyond EOD, truncated [ 212.165835][T10679] loop5: p1 size 100663296 extends beyond EOD, truncated [ 212.176195][T10679] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 212.231467][T10679] Dev loop5: unable to read RDB block 7 [ 212.257459][T10679] loop5: AHDI p1 p3 p4 [ 212.269680][T10679] loop5: partition table partially beyond EOD, truncated [ 212.307413][T10679] loop5: p1 size 100663296 extends beyond EOD, truncated [ 212.311262][T10679] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 212.341742][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 212.345602][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 212.364649][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 212.371699][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 213.185376][T10697] syzkaller0: entered promiscuous mode [ 213.187888][T10697] syzkaller0: entered allmulticast mode [ 213.507178][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 213.959579][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 213.959590][ T42] audit: type=1326 audit(1785906113.625:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.2.1808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 213.969944][ T42] audit: type=1326 audit(1785906113.625:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.2.1808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 213.979365][ T42] audit: type=1326 audit(1785906113.635:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.2.1808" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 213.987831][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 213.988280][ T42] audit: type=1326 audit(1785906113.635:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.2.1808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 213.991007][T10700] netlink: 'syz.2.1808': attribute type 2 has an invalid length. [ 213.999547][ T42] audit: type=1326 audit(1785906113.635:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.2.1808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 214.011891][ T42] audit: type=1326 audit(1785906113.645:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.2.1808" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 214.020486][ T42] audit: type=1326 audit(1785906113.645:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.2.1808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 214.029646][ T42] audit: type=1326 audit(1785906113.645:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.2.1808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 214.037624][ T42] audit: type=1326 audit(1785906113.655:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.2.1808" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 214.047704][ T42] audit: type=1326 audit(1785906113.655:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.2.1808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96fec code=0x7ffc0000 [ 214.097201][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 214.100624][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 214.103969][ T9] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 214.106732][ T9] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 214.109373][ T9] usb 6-1: config 14 has no interface number 0 [ 214.111397][ T9] usb 6-1: config 14 has no interface number 1 [ 214.113424][ T9] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 214.116927][ T9] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 214.120818][ T9] usb 6-1: config 14 interface 57 has no altsetting 0 [ 214.123046][ T9] usb 6-1: config 14 interface 228 has no altsetting 0 [ 214.127746][ T9] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 214.130762][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.133381][ T9] usb 6-1: Product: syz [ 214.134761][ T9] usb 6-1: Manufacturer: syz [ 214.136381][ T9] usb 6-1: SerialNumber: syz [ 214.179457][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.185900][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.545828][ T9] legousbtower 6-1:14.57: interrupt endpoints not found [ 214.749578][ T9] legousbtower 6-1:14.228: interrupt endpoints not found [ 216.862441][T10773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1834'. [ 216.937782][ T9] usb 6-1: USB disconnect, device number 26 [ 216.976033][T10776] x_tables: duplicate underflow at hook 1 [ 218.071937][T10789] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 218.071937][T10789] Please contact the netfilter-devel mailing list or update your nftables rules. [ 219.582267][T10824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1850'. [ 221.255184][T10849] loop5: detected capacity change from 0 to 7 [ 221.258326][T10849] Dev loop5: unable to read RDB block 7 [ 221.260201][T10849] loop5: unable to read partition table [ 221.262125][T10849] loop5: partition table beyond EOD, truncated [ 221.264204][T10849] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 221.310239][T10851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1859'. [ 222.052833][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 222.872735][T10893] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1874'. [ 222.933953][T10895] IPVS: set_ctl: invalid protocol: 124 255.0.0.0:0 [ 224.091057][T10927] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1884'. [ 225.018299][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 225.021459][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 225.021473][ T42] audit: type=1326 audit(1785906124.675:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10945 comm="syz.3.1894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 225.030997][ T42] audit: type=1326 audit(1785906124.675:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10945 comm="syz.3.1894" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 225.038482][T10948] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1895'. [ 225.043722][ T42] audit: type=1326 audit(1785906124.675:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10945 comm="syz.3.1894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 225.052001][ T42] audit: type=1326 audit(1785906124.675:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10945 comm="syz.3.1894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 225.061452][ T42] audit: type=1326 audit(1785906124.685:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10945 comm="syz.3.1894" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 225.069014][ T42] audit: type=1326 audit(1785906124.685:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10945 comm="syz.3.1894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 225.078277][ T42] audit: type=1326 audit(1785906124.685:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10945 comm="syz.3.1894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 225.085613][ T42] audit: type=1326 audit(1785906124.685:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10945 comm="syz.3.1894" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 225.092375][ T42] audit: type=1326 audit(1785906124.685:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10945 comm="syz.3.1894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 225.099085][ T42] audit: type=1326 audit(1785906124.685:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10945 comm="syz.3.1894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x7ffc0000 [ 225.157308][ T40] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 225.257964][T10961] loop5: detected capacity change from 0 to 7 [ 225.262542][T10961] Dev loop5: unable to read RDB block 7 [ 225.264378][T10961] loop5: AHDI p1 p3 p4 [ 225.265753][T10961] loop5: partition table partially beyond EOD, truncated [ 225.268494][T10961] loop5: p1 size 100663296 extends beyond EOD, truncated [ 225.277210][T10961] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 225.291085][T10965] kAFS: No cell specified [ 225.317047][ T40] usb 6-1: Using ep0 maxpacket: 8 [ 225.321904][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 225.324020][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 225.331136][ T40] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.346209][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.352257][ T40] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 225.357643][T10972] netlink: 'syz.0.1900': attribute type 1 has an invalid length. [ 225.360163][ T40] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 225.368088][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 225.371367][ T40] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.375713][ T40] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.381356][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.468487][ T6887] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 225.591542][ T40] usb 6-1: GET_CAPABILITIES returned 0 [ 225.593884][ T40] usbtmc 6-1:16.0: can't read capabilities [ 225.597056][T10983] binder: 10980:10983 ioctl c0306201 0 returned -14 [ 225.800821][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.804613][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.808323][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.811936][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.817511][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.822532][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.826260][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.829983][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.833631][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.837273][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.840984][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.844666][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.848322][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.851998][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.855596][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 225.859297][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 225.871657][T10940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.876673][T10940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.883008][ T40] usb 6-1: USB disconnect, device number 27 [ 226.432910][T11032] kAFS: No cell specified [ 226.569209][T11045] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid [ 226.627215][T11047] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1915'. [ 226.672936][T11048] ======================================================= [ 226.672936][T11048] WARNING: The mand mount option has been deprecated and [ 226.672936][T11048] and is ignored by this kernel. Remove the mand [ 226.672936][T11048] option from the mount to silence this warning. [ 226.672936][T11048] ======================================================= [ 226.702052][T11048] overlayfs: conflicting options: userxattr,redirect_dir=on [ 226.907349][T11055] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 227.442306][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.449282][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.453652][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.457865][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.461633][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 227.565897][T11066] loop5: detected capacity change from 0 to 7 [ 227.570294][T11066] Dev loop5: unable to read RDB block 7 [ 227.572638][T11066] loop5: AHDI p1 p3 p4 [ 227.574595][T11066] loop5: partition table partially beyond EOD, truncated [ 227.578216][T11066] loop5: p1 size 100663296 extends beyond EOD, truncated [ 227.581962][T11066] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 227.656350][T11066] Dev loop5: unable to read RDB block 7 [ 227.661536][T11066] loop5: AHDI p1 p3 p4 [ 227.662962][T11066] loop5: partition table partially beyond EOD, truncated [ 227.670204][T11066] loop5: p1 size 100663296 extends beyond EOD, truncated [ 227.685177][T11066] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 227.704319][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 227.709749][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 227.727274][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 227.731064][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 228.181929][T11059] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.185223][T11059] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.188678][T11059] bridge_slave_0: entered allmulticast mode [ 228.192583][T11059] bridge_slave_0: entered promiscuous mode [ 228.197840][T11059] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.200902][T11059] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.203935][T11059] bridge_slave_1: entered allmulticast mode [ 228.208906][T11059] bridge_slave_1: entered promiscuous mode [ 228.250770][T11102] netlink: 'syz.0.1929': attribute type 1 has an invalid length. [ 228.260004][ T5824] bridge_slave_1: left allmulticast mode [ 228.263771][ T5824] bridge_slave_1: left promiscuous mode [ 228.268779][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.277226][ T5824] bridge_slave_0: left allmulticast mode [ 228.280230][ T5824] bridge_slave_0: left promiscuous mode [ 228.283189][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.444493][ T5824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.458640][ T5824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.464000][ T5824] bond0 (unregistering): Released all slaves [ 228.480729][ T5824] bond1 (unregistering): (slave veth3): Releasing backup interface [ 228.485700][ T5824] bond1 (unregistering): Released all slaves [ 228.503183][ T5824] bond2 (unregistering): (slave veth9): Releasing backup interface [ 228.512166][ T5824] bond2 (unregistering): Released all slaves [ 228.527543][ T5824] bond3 (unregistering): (slave veth11): Releasing backup interface [ 228.532184][ T5824] bond3 (unregistering): Released all slaves [ 228.550704][ T5824] bond4 (unregistering): (slave veth13): Releasing active interface [ 228.555552][ T5824] bond4 (unregistering): Released all slaves [ 228.572222][ T5824] bond5 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 228.583229][ T5824] bond5 (unregistering): Released all slaves [ 228.595762][ T5824] bond6 (unregistering): Released all slaves [ 228.619093][T11059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.625663][T11059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.654288][T11059] team0: Port device team_slave_0 added [ 228.667571][T11059] team0: Port device team_slave_1 added [ 228.719476][T11059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.730342][T11059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.742949][T11059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.756891][T11059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.759944][T11059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.771061][T11059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.792181][ T5824] tipc: Left network mode [ 228.845817][T11059] hsr_slave_0: entered promiscuous mode [ 228.859207][T11059] hsr_slave_1: entered promiscuous mode [ 228.862291][T11059] debugfs: 'hsr0' already exists in 'hsr' [ 228.864712][T11059] Cannot create hsr debugfs directory [ 228.946506][ T5457] 8021q: adding VLAN 0 to HW filter on device eth2 [ 229.005453][T11111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.010271][T11111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.027753][T11111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.031534][T11111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.049988][T11114] loop5: detected capacity change from 0 to 7 [ 229.060376][T11114] Dev loop5: unable to read RDB block 7 [ 229.062919][T11114] loop5: AHDI p1 p3 p4 [ 229.066350][T11114] loop5: partition table partially beyond EOD, truncated [ 229.072109][T11114] loop5: p1 size 100663296 extends beyond EOD, truncated [ 229.076122][T11114] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 229.124076][T11114] Dev loop5: unable to read RDB block 7 [ 229.125993][T11114] loop5: AHDI p1 p3 p4 [ 229.128941][T11114] loop5: partition table partially beyond EOD, truncated [ 229.131298][T11114] loop5: p1 size 100663296 extends beyond EOD, truncated [ 229.134768][T11114] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 229.148706][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 229.148745][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 229.167141][ T5749] udevd[5749]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 229.171318][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 229.240706][ T5457] 8021q: adding VLAN 0 to HW filter on device eth3 [ 229.352205][ T5824] hsr_slave_0: left promiscuous mode [ 229.355257][ T5824] hsr_slave_1: left promiscuous mode [ 229.368244][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.388320][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.527149][ T5758] Bluetooth: hci4: command tx timeout [ 229.667957][ T5824] team0 (unregistering): Port device team_slave_1 removed [ 229.684034][ T5824] team0 (unregistering): Port device team_slave_0 removed [ 230.533387][T11059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.551263][T11059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.560030][T11059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.573359][T11059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.580123][T11059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.600622][T11059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.606825][T11059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.616520][ T5824] IPVS: stop unused estimator thread 0... [ 230.619653][T11059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.736840][T11059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.788635][T11059] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.842277][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.844602][ T6887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.889099][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.891439][ T6887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.048623][T11178] kAFS: unable to lookup cell 'ÿ' [ 231.522192][T11059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.607230][ T5758] Bluetooth: hci4: command tx timeout [ 231.640777][T11059] veth0_vlan: entered promiscuous mode [ 231.688058][T11059] veth1_vlan: entered promiscuous mode [ 231.811832][T11059] veth0_macvtap: entered promiscuous mode [ 231.819804][T11059] veth1_macvtap: entered promiscuous mode [ 231.837449][T11059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.854327][T11059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.880532][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.888393][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.895578][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.926732][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.945904][T11193] loop5: detected capacity change from 0 to 7 [ 231.954241][T11193] Dev loop5: unable to read RDB block 7 [ 231.956089][T11193] loop5: unable to read partition table [ 231.958331][T11193] loop5: partition table beyond EOD, truncated [ 231.966381][T11193] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.977827][ T6887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.985672][ T6887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.017188][T11193] Dev loop5: unable to read RDB block 7 [ 232.017947][ T8568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.019129][T11193] loop5: unable to read partition table [ 232.025120][ T8568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.116911][T11193] loop5: partition table beyond EOD, truncated [ 232.122004][T11193] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 232.380681][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 232.380692][ T42] audit: type=1800 audit(1785906132.045:288): pid=11213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1946" name="id" dev="configfs" ino=34805 res=0 errno=0 [ 232.621975][T11228] loop5: detected capacity change from 0 to 7 [ 232.629674][T11228] Dev loop5: unable to read RDB block 7 [ 232.635145][T11228] loop5: unable to read partition table [ 232.640880][T11228] loop5: partition table beyond EOD, truncated [ 232.649154][T11228] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 232.721704][T11228] Dev loop5: unable to read RDB block 7 [ 232.724001][T11228] loop5: unable to read partition table [ 232.726848][T11228] loop5: partition table beyond EOD, truncated [ 232.731734][T11228] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 232.813327][T11231] netlink: 'syz.0.1951': attribute type 16 has an invalid length. [ 232.816313][T11231] netlink: 'syz.0.1951': attribute type 17 has an invalid length. [ 232.939856][T11231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.958545][T11231] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.979711][T11231] batman_adv: batadv0: Interface activated: dummy0 [ 233.003050][T11231] batadv0: mtu less than device minimum [ 233.014616][T11231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.020711][T11231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.024366][T11231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.027982][T11231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.031609][T11231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.035240][T11231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.038928][T11231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.042455][T11231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.046156][T11231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 233.155656][T11231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.183321][T11231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.218113][ T42] audit: type=1800 audit(1785906132.885:289): pid=11240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1959" name="id" dev="configfs" ino=37139 res=0 errno=0 [ 233.234244][T11231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.251270][T11231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.263849][T11231] veth1_vlan: left promiscuous mode [ 233.266174][T11231] veth0_vlan: left promiscuous mode [ 233.275114][T11231] veth0_vlan: entered promiscuous mode [ 233.287931][T11231] veth1_vlan: entered promiscuous mode [ 233.293549][T11231] veth1_macvtap: left promiscuous mode [ 233.300409][T11231] veth0_macvtap: left promiscuous mode [ 233.304274][T11231] veth0_macvtap: entered promiscuous mode [ 233.306691][T11231] veth1_macvtap: entered promiscuous mode [ 233.318232][T11231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 233.323305][T11231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 233.326289][T11231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 233.330009][T11231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 233.335129][T11231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.339357][T11231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.342970][T11231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.348361][T11231] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.352245][T11231] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.363228][ T8568] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.366088][ T8568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.370986][ T8568] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.373837][ T8568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.447325][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.450877][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.528392][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.531628][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.697078][ T5758] Bluetooth: hci4: command tx timeout [ 234.375474][ T42] audit: type=1800 audit(1785906134.035:290): pid=11271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1971" name="id" dev="configfs" ino=37174 res=0 errno=0 [ 234.472701][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'. [ 234.641682][T11283] kAFS: unable to lookup cell 'ÿ' [ 235.206615][T11298] syzkaller0: entered promiscuous mode [ 235.210432][T11298] syzkaller0: entered allmulticast mode [ 235.778367][ T5758] Bluetooth: hci4: command tx timeout [ 235.967161][ T5745] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 235.971111][T11315] syzkaller0: entered promiscuous mode [ 235.972941][T11315] syzkaller0: entered allmulticast mode [ 235.979436][T11315] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 235.992626][T11315] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 236.097383][ T5745] usb 6-1: device descriptor read/64, error -71 [ 236.347153][ T5745] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 236.489476][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 236.498653][ T5745] usb 6-1: device descriptor read/64, error -71 [ 236.619774][ T5745] usb usb6-port1: attempt power cycle [ 236.834721][T11344] binder: 11343:11344 ioctl c0186405 800028c0 returned -22 [ 236.855389][T11344] i2c i2c-0: new_device: Instantiated device rt1711h at 0x04 [ 236.858881][ T42] audit: type=1800 audit(1785906136.525:291): pid=11338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1997" name="id" dev="configfs" ino=37259 res=0 errno=0 [ 236.937318][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'. [ 236.957176][ T5745] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 236.977523][ T5745] usb 6-1: device descriptor read/8, error -71 [ 237.477050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 237.654274][ T5745] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 237.799937][ T5745] usb 6-1: device descriptor read/8, error -71 [ 237.907758][T11364] binder: 11362:11364 ioctl c0306201 0 returned -14 [ 237.907831][ T5745] usb usb6-port1: unable to enumerate USB device [ 238.061117][ T42] audit: type=1326 audit(1785906137.725:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.0.2008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 238.068253][ T42] audit: type=1326 audit(1785906137.735:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.0.2008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 238.077592][ T42] audit: type=1326 audit(1785906137.735:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.0.2008" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 238.079391][T11368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2008'. [ 238.084556][ T42] audit: type=1326 audit(1785906137.735:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.0.2008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 238.097410][ T42] audit: type=1326 audit(1785906137.735:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.0.2008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 238.104633][ T42] audit: type=1326 audit(1785906137.745:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.0.2008" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 238.112233][ T42] audit: type=1326 audit(1785906137.745:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.0.2008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 238.121242][ T42] audit: type=1326 audit(1785906137.745:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.0.2008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 238.128060][ T42] audit: type=1326 audit(1785906137.745:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.0.2008" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 238.134651][ T42] audit: type=1326 audit(1785906137.745:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.0.2008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 238.477797][T11374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.481875][T11374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.491034][T11374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.494080][T11374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.033148][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 239.044580][T11389] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2017'. [ 239.094526][T11391] syzkaller0: entered promiscuous mode [ 239.096475][T11391] syzkaller0: entered allmulticast mode [ 239.100807][T11391] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 239.119230][T11391] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 239.197914][ T5745] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 239.270716][T11392] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 239.274553][T11392] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 239.278034][T11392] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 239.308388][T11395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.312415][T11395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.377940][ T5745] usb 6-1: Using ep0 maxpacket: 8 [ 239.385001][ T5745] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.389842][ T5745] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.394231][ T5745] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 239.400558][ T5745] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 239.408109][ T5745] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 239.416596][ T5745] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.427438][ T5745] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.434773][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.645665][ T5745] usb 6-1: GET_CAPABILITIES returned 0 [ 239.648550][ T5745] usbtmc 6-1:16.0: can't read capabilities [ 239.845208][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.848088][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.850922][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.853721][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.856526][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.859514][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.862295][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.866592][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.869411][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.872202][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.875007][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.877807][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.880608][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.886370][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.889235][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.892040][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.908002][T11380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.912401][T11380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.919394][ T40] usb 6-1: USB disconnect, device number 32 [ 240.024977][T11414] syzkaller0: entered promiscuous mode [ 240.026900][T11414] syzkaller0: entered allmulticast mode [ 240.031374][T11414] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 240.034661][T11416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.038749][T11416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.045538][T11414] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 240.475809][T11424] logitech-hidpp-device 0005:046D:B012.000A: received hid++ report of bad size (3) [ 240.485496][ T40] logitech-hidpp-device 0005:046D:B012.000A: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 240.526075][T11425] fido_id[11425]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 241.141345][T11444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.141929][T11444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.715582][ T56] hid-generic 0005:4C4A:5505.000B: collection stack underflow [ 241.721397][ T56] hid-generic 0005:4C4A:5505.000B: item 0 2 0 12 parsing failed [ 241.728274][ T56] hid-generic 0005:4C4A:5505.000B: probe with driver hid-generic failed with error -22 [ 241.916863][T11476] program syz.1.2051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.800643][T11510] syzkaller0: entered promiscuous mode [ 243.802428][T11510] syzkaller0: entered allmulticast mode [ 243.808511][T11510] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 243.819135][T11510] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 244.357108][ T40] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 244.507141][ T40] usb 6-1: Using ep0 maxpacket: 8 [ 244.511106][ T40] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.515224][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.519202][ T40] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 244.524022][ T40] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 244.533896][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 244.538063][ T40] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.545411][ T40] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.551480][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.772821][ T40] usb 6-1: GET_CAPABILITIES returned 0 [ 244.776061][ T40] usbtmc 6-1:16.0: can't read capabilities [ 244.977563][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.980560][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.983393][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.986254][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.990564][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.993414][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.996257][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.999130][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 245.001977][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 245.004809][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 245.007637][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 245.010511][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 245.017102][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 245.020084][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 245.023002][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 245.025941][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 245.038131][T11528] lo: left promiscuous mode [ 245.038580][T11517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.043593][T11528] tunl0: left promiscuous mode [ 245.047923][T11528] gre0: left promiscuous mode [ 245.051954][T11528] gretap0: left promiscuous mode [ 245.055407][T11528] erspan0: left promiscuous mode [ 245.058989][T11528] ip_vti0: left promiscuous mode [ 245.062245][T11528] ip6_vti0: left promiscuous mode [ 245.065419][T11528] sit0: left promiscuous mode [ 245.071682][T11528] ip6tnl0: left promiscuous mode [ 245.075317][T11528] ip6gre0: left promiscuous mode [ 245.078868][T11528] syz_tun: left promiscuous mode [ 245.082430][T11528] ip6gretap0: left promiscuous mode [ 245.086044][T11528] bridge0: left promiscuous mode [ 245.088666][T11528] vcan0: left promiscuous mode [ 245.091450][T11528] bond0: left promiscuous mode [ 245.094982][T11528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.098682][T11528] team0: left promiscuous mode [ 245.101769][T11528] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.105424][T11528] nlmon0: left promiscuous mode [ 245.108513][T11528] batadv0: left promiscuous mode [ 245.111846][T11528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.115318][T11528] vxcan0: left promiscuous mode [ 245.118697][T11528] vxcan1: left promiscuous mode [ 245.121568][T11528] veth0: left promiscuous mode [ 245.124550][T11528] veth1: left promiscuous mode [ 245.127617][T11528] wg0: left promiscuous mode [ 245.130143][T11528] wg1: left promiscuous mode [ 245.132598][T11528] wg2: left promiscuous mode [ 245.134783][T11528] veth0_to_bridge: left promiscuous mode [ 245.138616][T11528] veth1_to_bridge: left promiscuous mode [ 245.141484][T11528] veth0_to_bond: left promiscuous mode [ 245.143770][T11528] bond_slave_0: left promiscuous mode [ 245.145863][T11528] veth1_to_bond: left promiscuous mode [ 245.148864][T11528] veth0_to_team: left promiscuous mode [ 245.151104][T11528] team_slave_0: left promiscuous mode [ 245.153193][T11528] veth1_to_team: left promiscuous mode [ 245.155419][T11528] team_slave_1: left promiscuous mode [ 245.157609][T11528] veth0_to_batadv: left promiscuous mode [ 245.160000][T11528] batadv_slave_0: left promiscuous mode [ 245.162098][T11528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.164382][T11528] veth1_to_batadv: left promiscuous mode [ 245.166665][T11528] batadv_slave_1: left promiscuous mode [ 245.168797][T11528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.171247][T11528] xfrm0: left promiscuous mode [ 245.173522][T11528] veth0_to_hsr: left promiscuous mode [ 245.176022][T11528] veth1_to_hsr: left promiscuous mode [ 245.178555][T11528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.181749][T11528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.184945][T11528] hsr0: left promiscuous mode [ 245.187233][T11528] veth1_virt_wifi: left promiscuous mode [ 245.189589][T11528] veth0_virt_wifi: left promiscuous mode [ 245.191971][T11528] virt_wifi0: left promiscuous mode [ 245.194329][T11528] veth1_vlan: left promiscuous mode [ 245.198305][T11528] vlan0: left promiscuous mode [ 245.200420][T11528] vlan1: left promiscuous mode [ 245.202481][T11528] veth1_vlan: entered promiscuous mode [ 245.204777][T11528] macvlan1: left promiscuous mode [ 245.206971][T11528] ipvlan0: left promiscuous mode [ 245.209255][T11528] ipvlan1: left promiscuous mode [ 245.211465][T11528] veth1_macvtap: left promiscuous mode [ 245.213740][T11528] veth0_macvtap: left promiscuous mode [ 245.215887][T11528] veth0_macvtap: entered promiscuous mode [ 245.217962][T11528] macvtap0: left promiscuous mode [ 245.220151][T11528] veth1_macvtap: entered promiscuous mode [ 245.222098][T11528] macsec0: left promiscuous mode [ 245.224434][T11528] geneve0: left promiscuous mode [ 245.227121][T11528] geneve1: left promiscuous mode [ 245.230288][T11528] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 245.232647][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.235270][T11528] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 245.237880][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.240511][T11528] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 245.243130][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.245795][T11528] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 245.248183][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.250902][T11528] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 245.253482][T11528] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 245.255936][T11528] syztnl0: left promiscuous mode [ 245.258288][T11528] vxcan2: left promiscuous mode [ 245.258621][T11517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.260305][T11528] vxcan3: left promiscuous mode [ 245.264633][T11528] vxcan4: left promiscuous mode [ 245.266517][T11528] vxcan5: left promiscuous mode [ 245.268378][T11528] geneve2: left promiscuous mode [ 245.272933][ T8568] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.275166][ T8568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.279445][ T8568] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.281759][ T8568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.314260][ T10] usb 6-1: USB disconnect, device number 33 [ 245.317150][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.320135][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.322912][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.326569][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.227071][ T40] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 246.410238][ T40] usb 6-1: Using ep0 maxpacket: 8 [ 246.424027][ T40] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.430713][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.445417][ T40] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 246.455701][ T40] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 246.463406][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 246.472117][ T40] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.479187][ T40] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.484746][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.778742][ T40] usb 6-1: GET_CAPABILITIES returned 0 [ 246.787291][ T40] usbtmc 6-1:16.0: can't read capabilities [ 247.019904][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.023561][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.029288][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.034872][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.038117][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.041718][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.070488][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.080340][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.098264][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.106635][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.110972][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.136287][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.140832][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.144485][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.148502][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.152261][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 247.281833][T11544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.296734][T11544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.359811][ T40] usb 6-1: USB disconnect, device number 34 [ 247.841466][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.844664][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.859041][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.863907][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.928692][ T40] IPVS: starting estimator thread 0... [ 248.037192][T11566] IPVS: using max 32 ests per chain, 76800 per kthread [ 248.046673][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 248.046687][ T42] audit: type=1800 audit(1785906147.705:330): pid=11568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2084" name="id" dev="configfs" ino=38247 res=0 errno=0 [ 248.742731][T11592] binder_alloc: 11589: binder_alloc_buf, no vma [ 248.751238][T11591] tmpfs: Unknown parameter 'grpquotaL' [ 249.472564][T11610] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2094'. [ 249.594449][T11614] tipc: Enabling of bearer rejected, failed to enable media [ 249.611768][T11614] syzkaller0: entered promiscuous mode [ 249.619035][T11614] syzkaller0: entered allmulticast mode [ 249.632128][T11614] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 249.674773][T11614] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 250.073238][T11636] program syz.1.2109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.143473][T11641] tipc: Enabling of bearer rejected, failed to enable media [ 250.150188][T11641] syzkaller0: entered promiscuous mode [ 250.152126][T11641] syzkaller0: entered allmulticast mode [ 250.158334][T11641] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 250.160224][T11640] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4044617448 (258855516672 ns) > initial count (110676013376 ns). Using initial count to start timer. [ 250.169931][T11640] kvm: apic: phys broadcast and lowest prio [ 250.227364][T11641] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 253.051187][T11698] vlan2: entered promiscuous mode [ 253.052950][T11698] hsr0: entered promiscuous mode [ 253.057961][T11698] vlan2: entered allmulticast mode [ 253.059705][T11698] hsr0: entered allmulticast mode [ 253.061502][T11698] hsr_slave_0: entered allmulticast mode [ 253.063399][T11698] hsr_slave_1: entered allmulticast mode [ 254.754648][T11714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.761988][T11714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.822273][T11715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2139'. [ 254.826081][T11715] nbd: must specify a device to reconfigure [ 255.012157][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 255.288901][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.291562][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.977150][ T34] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 256.023311][T11736] veth0: entered promiscuous mode [ 256.025376][T11736] batadv_slave_1: entered promiscuous mode [ 256.028605][T11736] batadv_slave_1: left promiscuous mode [ 256.032259][T11736] veth0: left promiscuous mode [ 256.141373][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 256.144806][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 256.149718][ T34] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.154543][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 256.162641][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 256.170665][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 256.175242][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 256.182231][ T34] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.187364][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 256.192261][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 256.198193][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 256.201527][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 256.206187][ T34] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.211486][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 256.216161][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 256.224387][ T34] usb 6-1: string descriptor 0 read error: -22 [ 256.227455][ T34] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 256.231296][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.252988][ T34] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 256.266715][T11747] syzkaller0: entered promiscuous mode [ 256.272825][T11747] syzkaller0: entered allmulticast mode [ 256.501453][T11749] net_ratelimit: 50 callbacks suppressed [ 256.501466][T11749] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:77:88:99:aa:bb [ 256.661771][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.665465][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.458135][T11762] binder_alloc: 11760: binder_alloc_buf, no vma [ 257.636796][T11768] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.698546][T11772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.049432][ T40] usb 6-1: USB disconnect, device number 35 [ 259.298891][T11793] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 259.713341][T11799] kAFS: unable to lookup cell 'ÿ' [ 260.767382][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 260.799395][T11821] syzkaller0: entered promiscuous mode [ 260.801216][T11821] syzkaller0: entered allmulticast mode [ 260.942813][ T9] usb 6-1: unable to get BOS descriptor set [ 260.946918][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 260.951398][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 260.961173][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.964935][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.969505][ T9] usb 6-1: Product: 〉 [ 260.971256][ T9] usb 6-1: Manufacturer: Ы [ 260.973175][ T9] usb 6-1: SerialNumber: Р [ 261.024105][T11831] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 261.052000][T11834] syzkaller1: entered promiscuous mode [ 261.053846][T11834] syzkaller1: entered allmulticast mode [ 261.102862][T11836] syzkaller0: entered promiscuous mode [ 261.104680][T11836] syzkaller0: entered allmulticast mode [ 261.194856][ T9] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 261.197744][ T9] cdc_ncm 6-1:1.0: bind() failure [ 261.202479][ T9] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 261.205225][ T9] cdc_ncm 6-1:1.1: bind() failure [ 261.212973][ T9] usb 6-1: USB disconnect, device number 36 [ 261.362546][T11850] syzkaller0: entered promiscuous mode [ 261.364315][T11850] syzkaller0: entered allmulticast mode [ 261.369382][T11850] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 261.383356][T11850] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 261.439015][T11854] syzkaller1: entered promiscuous mode [ 261.440888][T11854] syzkaller1: entered allmulticast mode [ 261.515509][T11858] syzkaller0: entered promiscuous mode [ 261.518428][T11858] syzkaller0: entered allmulticast mode [ 261.642060][T11864] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 261.859466][T11864] veth13: entered allmulticast mode [ 261.868560][T11864] bond6: (slave veth13): Enslaving as an active interface with a down link [ 261.886816][T11871] bond6: (slave veth0_to_bond): making interface the new active one [ 261.891304][T11871] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 261.908143][T11877] macvlan2: entered promiscuous mode [ 261.909925][T11877] macvlan2: entered allmulticast mode [ 261.912138][T11877] bond6: entered promiscuous mode [ 261.913787][T11877] veth0_to_bond: entered promiscuous mode [ 261.916128][T11877] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 261.920379][T11877] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 261.925874][T11877] bond6: left promiscuous mode [ 261.928242][T11877] veth0_to_bond: left promiscuous mode [ 261.963315][T11876] syzkaller0: entered promiscuous mode [ 261.965467][T11876] syzkaller0: entered allmulticast mode [ 261.973009][T11889] syzkaller0: entered promiscuous mode [ 261.974850][T11889] syzkaller0: entered allmulticast mode [ 263.427861][T11904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.434680][T11904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.447222][T11904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.450488][T11904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.583707][T11908] kAFS: unable to lookup cell 'ÿ' [ 264.130476][T11918] syzkaller0: entered promiscuous mode [ 264.132283][T11918] syzkaller0: entered allmulticast mode [ 264.508865][T11930] syzkaller0: entered promiscuous mode [ 264.510714][T11930] syzkaller0: entered allmulticast mode [ 264.528977][T11930] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 264.550301][T11930] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 265.256762][T11975] netlink: 'syz.1.2249': attribute type 1 has an invalid length. [ 265.261243][T11975] netlink: 'syz.1.2249': attribute type 1 has an invalid length. [ 265.426582][T11988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2254'. [ 265.434360][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2254'. [ 265.614102][T11995] syzkaller1: entered promiscuous mode [ 265.616029][T11995] syzkaller1: entered allmulticast mode [ 265.768827][T12011] syzkaller0: entered promiscuous mode [ 265.771055][T12011] syzkaller0: entered allmulticast mode [ 265.992193][T12030] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.137147][ T10] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 266.288901][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 266.292416][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 266.296976][ T10] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.304171][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 266.307541][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 266.312054][ T10] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.318735][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 266.322052][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 266.326528][ T10] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.334793][ T10] usb 6-1: string descriptor 0 read error: -22 [ 266.337557][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 266.340970][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.347902][ T10] adutux 6-1:168.0: interrupt endpoints not found [ 266.443824][T12044] syzkaller0: entered promiscuous mode [ 266.446067][T12044] syzkaller0: entered allmulticast mode [ 266.802639][ T10] usb 6-1: USB disconnect, device number 37 [ 267.197176][T12071] syzkaller1: entered promiscuous mode [ 267.199646][T12071] syzkaller1: entered allmulticast mode [ 267.425284][T12081] syzkaller0: entered promiscuous mode [ 267.428291][T12081] syzkaller0: entered allmulticast mode [ 267.764363][T12093] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 268.510991][T12150] binder_alloc: 12149: binder_alloc_buf, no vma [ 268.699436][T12162] syzkaller1: entered promiscuous mode [ 268.701522][T12162] syzkaller1: entered allmulticast mode [ 268.735860][T12164] syzkaller0: entered promiscuous mode [ 268.738414][T12164] syzkaller0: entered allmulticast mode [ 268.939808][T12173] syzkaller0: entered promiscuous mode [ 268.941570][T12173] syzkaller0: entered allmulticast mode [ 268.945427][T12173] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 268.955893][T12175] binder_alloc: 12174: binder_alloc_buf, no vma [ 268.961137][T12173] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 269.147221][T12190] syzkaller1: entered promiscuous mode [ 269.149095][T12190] syzkaller1: entered allmulticast mode [ 269.847338][ T5758] Bluetooth: hci4: command tx timeout [ 269.899258][T12230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.145299][T12240] syzkaller0: entered promiscuous mode [ 270.148322][T12240] syzkaller0: entered allmulticast mode [ 270.377078][ T5745] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 270.527132][ T5745] usb 6-1: Using ep0 maxpacket: 8 [ 270.531600][ T5745] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.536322][ T5745] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 270.540512][ T5745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 270.545492][ T5745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 270.550700][ T5745] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 270.554907][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.569342][ T5745] hub 6-1:1.0: bad descriptor, ignoring hub [ 270.572944][ T5745] hub 6-1:1.0: probe with driver hub failed with error -5 [ 270.576657][ T5745] cdc_wdm 6-1:1.0: skipping garbage [ 270.579358][ T5745] cdc_wdm 6-1:1.0: skipping garbage [ 270.585266][ T5745] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 270.588212][ T5745] cdc_wdm 6-1:1.0: Unknown control protocol [ 271.130208][T12257] kAFS: unable to lookup cell 'ÿ' [ 271.344722][T12265] syzkaller0: entered promiscuous mode [ 271.347235][T12265] syzkaller0: entered allmulticast mode [ 271.558781][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.566595][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.570636][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.575994][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.580480][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.822713][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.846965][T12279] syzkaller0: entered promiscuous mode [ 271.849245][T12279] syzkaller0: entered allmulticast mode [ 271.914125][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.010956][ T13] team0: Port device netdevsim1 removed [ 272.016026][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.060368][ T42] audit: type=1800 audit(1785906171.725:331): pid=12288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2372" name="ipv4_port" dev="configfs" ino=39692 res=0 errno=0 [ 272.121677][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.189075][T12295] syzkaller0: entered promiscuous mode [ 272.191356][T12295] syzkaller0: entered allmulticast mode [ 273.272596][ T40] usb 6-1: USB disconnect, device number 38 [ 273.569709][T12313] syzkaller0: entered promiscuous mode [ 273.572042][T12313] syzkaller0: entered allmulticast mode [ 273.693418][ T5758] Bluetooth: hci0: command tx timeout [ 275.129468][ T13] bridge_slave_1: left allmulticast mode [ 275.131320][ T13] bridge_slave_1: left promiscuous mode [ 275.134886][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.143200][ T13] bridge_slave_0: left allmulticast mode [ 275.145072][ T13] bridge_slave_0: left promiscuous mode [ 275.146962][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.230625][T12339] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2386'. [ 275.558097][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.562915][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.567105][ T13] bond0 (unregistering): Released all slaves [ 275.589822][T12267] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.592022][T12336] lo speed is unknown, defaulting to 1000 [ 275.592239][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.596669][T12267] bridge_slave_0: entered allmulticast mode [ 275.601006][T12267] bridge_slave_0: entered promiscuous mode [ 275.619836][T12336] lo speed is unknown, defaulting to 1000 [ 275.620357][T12267] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.626481][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.634986][T12267] bridge_slave_1: entered allmulticast mode [ 275.638783][T12267] bridge_slave_1: entered promiscuous mode [ 275.648351][T12336] lo speed is unknown, defaulting to 1000 [ 275.649765][ T13] tipc: Left network mode [ 275.664379][T12267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.667342][T12336] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 275.673547][T12267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.673617][T12336] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 275.689484][T12336] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 275.708859][T12336] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 275.724558][T12336] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 275.728219][T12267] team0: Port device team_slave_0 added [ 275.732179][T12267] team0: Port device team_slave_1 added [ 275.759984][T12267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.762359][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.772058][ T5758] Bluetooth: hci0: command tx timeout [ 275.773149][T12267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.797225][T12267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.800473][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.807858][T12336] lo speed is unknown, defaulting to 1000 [ 275.809346][T12267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.829959][T12336] lo speed is unknown, defaulting to 1000 [ 275.842337][T12336] lo speed is unknown, defaulting to 1000 [ 275.852386][T12267] hsr_slave_0: entered promiscuous mode [ 275.854805][T12267] hsr_slave_1: entered promiscuous mode [ 275.866148][T12267] debugfs: 'hsr0' already exists in 'hsr' [ 275.874525][T12267] Cannot create hsr debugfs directory [ 275.879240][T12336] lo speed is unknown, defaulting to 1000 [ 275.900192][ T5457] 8021q: adding VLAN 0 to HW filter on device eth2 [ 275.916790][T12336] lo speed is unknown, defaulting to 1000 [ 275.980553][T12355] netlink: 'syz.0.2390': attribute type 2 has an invalid length. [ 275.994025][T12360] netlink: 'syz.3.2392': attribute type 1 has an invalid length. [ 276.082449][T12360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.092372][ T42] audit: type=1800 audit(1785906175.755:332): pid=12364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2394" name="id" dev="configfs" ino=42126 res=0 errno=0 [ 276.218469][ T13] hsr_slave_0: left promiscuous mode [ 276.221034][ T13] hsr_slave_1: left promiscuous mode [ 276.223124][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.225660][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.240406][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.245908][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.261805][ T13] veth1_macvtap: left promiscuous mode [ 276.263828][ T13] veth0_macvtap: left promiscuous mode [ 276.265839][ T13] veth1_vlan: left promiscuous mode [ 276.268734][ T13] veth0_vlan: left promiscuous mode [ 276.335169][T12394] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 276.486288][ T13] team0 (unregistering): Port device team_slave_1 removed [ 276.501292][ T13] team0 (unregistering): Port device team_slave_0 removed [ 276.634034][ T5457] 8021q: adding VLAN 0 to HW filter on device eth3 [ 276.753019][T12398] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2404'. [ 276.856804][ T42] audit: type=1800 audit(1785906176.515:333): pid=12405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2405" name="id" dev="configfs" ino=41436 res=0 errno=0 [ 277.071106][T12427] syzkaller0: entered promiscuous mode [ 277.072921][T12427] syzkaller0: entered allmulticast mode [ 277.225876][ T13] IPVS: stop unused estimator thread 0... [ 277.232386][T12267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.249285][T12267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.257969][T12267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.263251][T12267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.266272][T12267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.274517][T12267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 277.277435][T12267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.282444][T12267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 277.382347][T12267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.403647][T12267] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.423530][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.426914][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.442346][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.445338][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.847136][ T5758] Bluetooth: hci0: command tx timeout [ 277.849462][ T42] audit: type=1800 audit(1785906177.515:334): pid=12466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2416" name="id" dev="configfs" ino=43056 res=0 errno=0 [ 277.863703][T12267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.899801][T12267] veth0_vlan: entered promiscuous mode [ 277.909900][T12267] veth1_vlan: entered promiscuous mode [ 277.931022][T12267] veth0_macvtap: entered promiscuous mode [ 277.935881][T12267] veth1_macvtap: entered promiscuous mode [ 277.946238][T12267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.954372][T12267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.977229][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.981028][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.000843][T11112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.007915][T11112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.063722][ T8558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.066690][ T8558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.094575][ T8554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.097065][ T8554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.244270][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.250067][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.253831][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.258335][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.263355][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.351534][T12483] syzkaller0: entered promiscuous mode [ 278.353498][T12483] syzkaller0: entered allmulticast mode [ 278.419157][ T5824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.500139][T12477] lo speed is unknown, defaulting to 1000 [ 278.544985][ T5824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.682322][ T5824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.738704][T12477] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.740993][T12477] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.743414][T12477] bridge_slave_0: entered allmulticast mode [ 278.746188][T12477] bridge_slave_0: entered promiscuous mode [ 278.752207][T12477] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.755251][T12477] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.758693][T12477] bridge_slave_1: entered allmulticast mode [ 278.762608][T12477] bridge_slave_1: entered promiscuous mode [ 278.774195][T12498] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2420'. [ 278.791253][T12477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.818874][ T5824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.831731][T12477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.853700][T12477] team0: Port device team_slave_0 added [ 278.857854][T12477] team0: Port device team_slave_1 added [ 278.871834][T12477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.874507][T12477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.882854][T12477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.887453][T12477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.889663][T12477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.899261][T12477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.922297][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2422'. [ 278.959797][T12502] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2422'. [ 278.963343][T12477] hsr_slave_0: entered promiscuous mode [ 278.965764][T12477] hsr_slave_1: entered promiscuous mode [ 278.968253][T12477] debugfs: 'hsr0' already exists in 'hsr' [ 278.970040][T12477] Cannot create hsr debugfs directory [ 278.989330][T12502] bridge1: port 1(erspan0) entered blocking state [ 278.991586][T12502] bridge1: port 1(erspan0) entered disabled state [ 278.993757][T12502] erspan0: entered allmulticast mode [ 278.996392][T12502] erspan0: entered promiscuous mode [ 279.000930][T12502] bridge1: port 1(erspan0) entered blocking state [ 279.003121][T12502] bridge1: port 1(erspan0) entered forwarding state [ 279.072339][ T5824] bridge_slave_1: left allmulticast mode [ 279.074879][ T5824] bridge_slave_1: left promiscuous mode [ 279.077771][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.082041][ T5824] bridge_slave_0: left allmulticast mode [ 279.084540][ T5824] bridge_slave_0: left promiscuous mode [ 279.086960][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.214349][ T5824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.221211][ T5824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.225426][ T5824] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 279.229266][ T5824] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 279.235912][ T5824] bond0 (unregistering): Released all slaves [ 279.241591][ T5824] bond1 (unregistering): Released all slaves [ 279.249072][ T5824] bond2 (unregistering): Released all slaves [ 279.256315][ T5824] bond3 (unregistering): Released all slaves [ 279.266627][ T5824] bond4 (unregistering): (slave veth9): Releasing backup interface [ 279.271155][ T5824] bond4 (unregistering): Released all slaves [ 279.277586][ T40] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 279.285579][ T5824] bond5 (unregistering): (slave veth11): Releasing backup interface [ 279.290054][ T5824] bond5 (unregistering): Released all slaves [ 279.301606][ T5824] bond6 (unregistering): (slave veth13): Releasing active interface [ 279.306889][ T5824] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 279.311852][ T5824] bond6 (unregistering): Released all slaves [ 279.427977][ T40] usb 6-1: Using ep0 maxpacket: 8 [ 279.430977][ T40] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.434185][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.438522][ T40] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 279.442181][ T40] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 279.445768][ T40] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 279.449880][ T40] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.453929][ T40] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 279.457467][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.485657][ T5824] tipc: Left network mode [ 279.535597][ T5457] 8021q: adding VLAN 0 to HW filter on device eth2 [ 279.670069][ T40] usb 6-1: GET_CAPABILITIES returned 0 [ 279.671824][ T40] usbtmc 6-1:16.0: can't read capabilities [ 279.825885][ T5824] hsr_slave_0: left promiscuous mode [ 279.829282][ T5824] hsr_slave_1: left promiscuous mode [ 279.832169][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.835260][ T5824] batadv0: mtu less than device minimum [ 279.838611][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.845375][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.850336][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.854925][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.860286][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.864774][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.869796][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.874609][ T5824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 279.875229][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.881537][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.885227][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.888766][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.890473][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.892477][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.898839][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.902577][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.906299][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.910741][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.911711][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.914520][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.921403][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.925125][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.930483][ T5758] Bluetooth: hci0: command tx timeout [ 279.932861][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.932900][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.932932][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.932964][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.939499][T12504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.940899][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.958594][ T5824] batman_adv: batadv0: Interface deactivated: dummy0 [ 279.960145][T12504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.962908][ T5824] batman_adv: batadv0: Removing interface: dummy0 [ 279.980892][ T5745] usb 6-1: USB disconnect, device number 39 [ 279.986643][ T5824] veth1_macvtap: left promiscuous mode [ 279.989342][ T5824] veth0_macvtap: left promiscuous mode [ 279.991894][ T5824] veth1_vlan: left promiscuous mode [ 279.994235][ T5824] veth0_vlan: left promiscuous mode [ 280.327291][ T5758] Bluetooth: hci3: command tx timeout [ 280.559157][T12536] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2428'. [ 280.656210][ T5824] team0 (unregistering): Port device team_slave_1 removed [ 280.693454][ T5824] team0 (unregistering): Port device team_slave_0 removed [ 281.042289][T12540] tipc: Started in network mode [ 281.044259][T12540] tipc: Node identity 1ac2bcb7a405, cluster identity 4711 [ 281.053803][T12540] tipc: Enabled bearer , priority 0 [ 281.056523][T12541] syzkaller0: entered promiscuous mode [ 281.060414][T12541] syzkaller0: entered allmulticast mode [ 281.067535][T12538] tipc: Resetting bearer [ 281.076214][T12537] tipc: Resetting bearer [ 281.126299][T12537] tipc: Disabling bearer [ 281.240931][T12477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.246895][T12477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 281.251070][T12477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.260554][T12477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.264447][T12477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.281214][T12477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.285047][T12477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.306895][T12477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.386960][T12477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.404347][T12477] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.413469][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.416520][ T8558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.426903][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.430088][ T8558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.463584][ T5824] IPVS: stop unused estimator thread 0... [ 281.473447][T12576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2436'. [ 281.607243][ T34] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 281.663647][T12590] netlink: 17780 bytes leftover after parsing attributes in process `syz.2.2438'. [ 281.720151][T12477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.758315][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 281.764426][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.772440][T12477] veth0_vlan: entered promiscuous mode [ 281.775142][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.783958][ T34] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 281.798512][T12477] veth1_vlan: entered promiscuous mode [ 281.801103][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 281.808449][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 281.818654][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.828831][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.837533][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.869392][T12477] veth0_macvtap: entered promiscuous mode [ 281.874627][T12477] veth1_macvtap: entered promiscuous mode [ 281.894773][T12477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.903883][T12477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.928600][T11112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.984844][ T6887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.987621][T11112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.990430][ T6887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.997141][T11112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.000019][T11112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.014950][ T8558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.018627][ T8558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.062483][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 282.066585][ T34] usbtmc 6-1:16.0: can't read capabilities [ 282.263521][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.267029][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.270537][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.274057][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.277588][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.296469][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.299788][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.303109][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.306645][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.319090][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.322645][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.326183][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.329725][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.335468][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.339077][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.342530][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 282.346333][ C3] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 282.357067][ T34] usb 6-1: USB disconnect, device number 40 [ 282.407287][ T5758] Bluetooth: hci3: command tx timeout [ 283.387959][T12618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2447'. [ 283.552334][T12634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2454'. [ 283.612718][T12638] netlink: 'syz.0.2456': attribute type 1 has an invalid length. [ 284.492566][ T5758] Bluetooth: hci3: command tx timeout [ 284.645641][T12659] vlan2: entered promiscuous mode [ 284.648389][T12659] hsr0: entered promiscuous mode [ 284.650334][T12659] vlan2: entered allmulticast mode [ 284.651981][T12659] hsr0: entered allmulticast mode [ 284.653891][T12659] hsr_slave_0: entered allmulticast mode [ 284.656175][T12659] hsr_slave_1: entered allmulticast mode [ 284.674278][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2462'. [ 284.677637][T12659] hsr_slave_0: left promiscuous mode [ 284.679995][T12659] hsr_slave_1: left promiscuous mode [ 284.689560][T12660] binder_alloc: 12657: binder_alloc_buf, no vma [ 284.783624][T12666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2466'. [ 284.806033][T12668] syzkaller0: entered promiscuous mode [ 284.811698][T12668] syzkaller0: entered allmulticast mode [ 285.004239][T12672] tipc: Started in network mode [ 285.006015][T12672] tipc: Node identity fa263df73ba3, cluster identity 4711 [ 285.008709][T12672] tipc: Enabled bearer , priority 0 [ 285.011451][T12672] syzkaller0: entered promiscuous mode [ 285.013231][T12672] syzkaller0: entered allmulticast mode [ 285.020638][T12672] tipc: Resetting bearer [ 285.023910][T12671] tipc: Resetting bearer [ 285.035909][T12671] tipc: Disabling bearer [ 285.132506][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'. [ 285.660089][ T5825] [ 285.660930][ T5825] ============================================ [ 285.662877][ T5825] WARNING: possible recursive locking detected [ 285.664845][ T5825] syzkaller #0 Tainted: G L [ 285.667213][ T5825] -------------------------------------------- [ 285.669631][ T5825] kworker/2:3/5825 is trying to acquire lock: [ 285.671999][ T5825] ffff88804ace2128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 285.675659][ T5825] [ 285.675659][ T5825] but task is already holding lock: [ 285.678528][ T5825] ffff88806c930128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 285.682149][ T5825] [ 285.682149][ T5825] other info that might help us debug this: [ 285.685164][ T5825] Possible unsafe locking scenario: [ 285.685164][ T5825] [ 285.687992][ T5825] CPU0 [ 285.689350][ T5825] ---- [ 285.690684][ T5825] lock(&grp->list_lock); [ 285.692442][ T5825] lock(&grp->list_lock); [ 285.694205][ T5825] [ 285.694205][ T5825] *** DEADLOCK *** [ 285.694205][ T5825] [ 285.697337][ T5825] May be due to missing lock nesting notation [ 285.697337][ T5825] [ 285.700555][ T5825] 3 locks held by kworker/2:3/5825: [ 285.702591][ T5825] #0: ffff88801bcaa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 285.706634][ T5825] #1: ffffc90004547d08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 285.711259][ T5825] #2: ffff88806c930128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 285.715216][ T5825] [ 285.715216][ T5825] stack backtrace: [ 285.717514][ T5825] CPU: 2 UID: 0 PID: 5825 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.717556][ T5825] Tainted: [L]=SOFTLOCKUP [ 285.717562][ T5825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.717574][ T5825] Workqueue: events snd_rawmidi_input_event_work [ 285.717595][ T5825] Call Trace: [ 285.717616][ T5825] [ 285.717622][ T5825] dump_stack_lvl+0x100/0x190 [ 285.717635][ T5825] print_deadlock_bug.cold+0xbd/0xca [ 285.717653][ T5825] __lock_acquire+0x1256/0x1a40 [ 285.717672][ T5825] lock_acquire+0x1b9/0x370 [ 285.717688][ T5825] ? snd_seq_deliver_event+0x230/0x860 [ 285.717700][ T5825] ? do_raw_read_unlock+0x3f/0x70 [ 285.717713][ T5825] _raw_read_lock+0x5f/0x70 [ 285.717727][ T5825] ? snd_seq_deliver_event+0x230/0x860 [ 285.717737][ T5825] snd_seq_deliver_event+0x230/0x860 [ 285.717748][ T5825] ? do_raw_spin_lock+0x128/0x260 [ 285.717760][ T5825] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 285.717771][ T5825] ? mark_held_locks+0x40/0x70 [ 285.717788][ T5825] ? lockdep_hardirqs_on+0x78/0x100 [ 285.717802][ T5825] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 285.717815][ T5825] ? client_use_ptr+0x107/0x4b0 [ 285.717833][ T5825] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 285.717846][ T5825] queue_broadcast_event.isra.0+0x143/0x1b0 [ 285.717859][ T5825] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 285.717875][ T5825] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 285.717888][ T5825] ? snd_seq_timer_start+0x1f0/0x2a0 [ 285.717903][ T5825] snd_seq_control_queue+0x709/0xb70 [ 285.717917][ T5825] ? __pfx_event_input_timer+0x10/0x10 [ 285.717933][ T5825] __snd_seq_deliver_single_event+0x127/0x1c0 [ 285.717946][ T5825] snd_seq_deliver_single_event+0x31f/0x8c0 [ 285.717958][ T5825] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 285.717969][ T5825] ? __lock_acquire+0x49f/0x1a40 [ 285.717987][ T5825] snd_seq_deliver_event+0x44b/0x860 [ 285.717998][ T5825] ? do_raw_spin_lock+0x128/0x260 [ 285.718010][ T5825] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 285.718020][ T5825] ? mark_held_locks+0x40/0x70 [ 285.718036][ T5825] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 285.718049][ T5825] ? lockdep_hardirqs_on+0x78/0x100 [ 285.718062][ T5825] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 285.718075][ T5825] ? client_use_ptr+0x107/0x4b0 [ 285.718092][ T5825] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 285.718104][ T5825] send_timer_event.isra.0+0x130/0x190 [ 285.718116][ T5825] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 285.718127][ T5825] ? lockdep_hardirqs_on+0x78/0x100 [ 285.718141][ T5825] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 285.718156][ T5825] snd_seq_oss_timer_start+0x1db/0x320 [ 285.718168][ T5825] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 285.718179][ T5825] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 285.718195][ T5825] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 285.718208][ T5825] ? find_slot+0x166/0x1b0 [ 285.718220][ T5825] snd_seq_oss_midi_input+0x467/0xa30 [ 285.718235][ T5825] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 285.718250][ T5825] ? find_held_lock+0x2b/0x80 [ 285.718263][ T5825] ? snd_seq_port_use_ptr+0x128/0x190 [ 285.718280][ T5825] snd_seq_oss_event_input+0x194/0x250 [ 285.718292][ T5825] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 285.718305][ T5825] __snd_seq_deliver_single_event+0x127/0x1c0 [ 285.718317][ T5825] snd_seq_deliver_single_event+0x31f/0x8c0 [ 285.718328][ T5825] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 285.718340][ T5825] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 285.718352][ T5825] ? lockdep_hardirqs_on+0x78/0x100 [ 285.718369][ T5825] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 285.718382][ T5825] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 285.718399][ T5825] snd_seq_deliver_event+0x2c1/0x860 [ 285.718410][ T5825] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 285.718422][ T5825] ? mark_held_locks+0x40/0x70 [ 285.718438][ T5825] ? lockdep_hardirqs_on+0x78/0x100 [ 285.718451][ T5825] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 285.718464][ T5825] ? client_use_ptr+0x107/0x4b0 [ 285.718481][ T5825] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 285.718493][ T5825] snd_midi_input_event+0x32f/0x470 [ 285.718510][ T5825] ? __pfx_snd_midi_input_event+0x10/0x10 [ 285.718526][ T5825] ? lock_acquire+0x5e/0x370 [ 285.718543][ T5825] ? __pfx_snd_midi_input_event+0x10/0x10 [ 285.718559][ T5825] snd_rawmidi_input_event_work+0x61/0x80 [ 285.718571][ T5825] process_one_work+0xa23/0x1940 [ 285.718589][ T5825] ? __pfx_process_one_work+0x10/0x10 [ 285.718606][ T5825] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 285.718618][ T5825] worker_thread+0x5ef/0xe50 [ 285.718635][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 285.718651][ T5825] ? kthread+0x13a/0x450 [ 285.718664][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 285.718679][ T5825] kthread+0x370/0x450 [ 285.718692][ T5825] ? __pfx_kthread+0x10/0x10 [ 285.718706][ T5825] ret_from_fork+0x72b/0xd50 [ 285.718720][ T5825] ? __pfx_ret_from_fork+0x10/0x10 [ 285.718733][ T5825] ? __switch_to+0x800/0x10f0 [ 285.718749][ T5825] ? __pfx_kthread+0x10/0x10 [ 285.718763][ T5825] ret_from_fork_asm+0x1a/0x30 [ 285.718781][ T5825] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 286.353021][T11112] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.550681][T11112] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.592547][T11112] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.651224][T11112] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.726770][T11112] bridge_slave_1: left allmulticast mode [ 286.728826][T11112] bridge_slave_1: left promiscuous mode [ 286.730771][T11112] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.734378][T11112] bridge_slave_0: left allmulticast mode [ 286.736885][T11112] bridge_slave_0: left promiscuous mode [ 286.739421][T11112] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.744494][T11112] erspan0: left allmulticast mode [ 286.746729][T11112] erspan0: left promiscuous mode [ 286.749248][T11112] bridge1: port 1(erspan0) entered disabled state [ 286.809076][T11112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.814774][T11112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.819513][T11112] bond0 (unregistering): Released all slaves [ 286.897916][T11112] tipc: Left network mode [ 286.932408][ T5457] 8021q: adding VLAN 0 to HW filter on device eth2 [ 287.049653][ T5457] 8021q: adding VLAN 0 to HW filter on device eth3 [ 287.143178][T11112] hsr_slave_0: left promiscuous mode [ 287.145336][T11112] hsr_slave_1: left promiscuous mode [ 287.147351][T11112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.150161][T11112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.153183][T11112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.155899][T11112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.161165][T11112] veth1_macvtap: left promiscuous mode [ 287.162953][T11112] veth0_macvtap: left promiscuous mode [ 287.164731][T11112] veth1_vlan: left promiscuous mode [ 287.166452][T11112] veth0_vlan: left promiscuous mode [ 287.250606][T11112] team0 (unregistering): Port device team_slave_1 removed [ 287.267189][T11112] team0 (unregistering): Port device team_slave_0 removed [ 287.328162][ T8554] smbdirect: ib_dev[syz2] removed [ 287.330926][ T5457] 8021q: adding VLAN 0 to HW filter on device eth4 [ 287.333229][ T56] lo speed is unknown, defaulting to 1000 [ 287.335926][ T56] infiniband syz2: ib_query_port failed (-19) [ 287.449911][ T5457] 8021q: adding VLAN 0 to HW filter on device eth5 [ 287.811081][T11112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.891475][T11112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.981047][T11112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.021431][T11112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.120553][T11112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.173307][T11112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.246592][ T5457] 8021q: adding VLAN 0 to HW filter on device eth6 [ 288.262987][T11112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.322103][T11112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.353722][ T5457] 8021q: adding VLAN 0 to HW filter on device eth7 [ 288.399513][T11112] bridge_slave_1: left allmulticast mode [ 288.402035][T11112] bridge_slave_1: left promiscuous mode [ 288.404561][T11112] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.411000][T11112] bridge_slave_0: left allmulticast mode [ 288.413402][T11112] bridge_slave_0: left promiscuous mode [ 288.415313][T11112] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.421688][T11112] bridge_slave_1: left allmulticast mode [ 288.423951][T11112] bridge_slave_1: left promiscuous mode [ 288.426232][T11112] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.430491][T11112] bridge_slave_0: left allmulticast mode [ 288.432611][T11112] bridge_slave_0: left promiscuous mode [ 288.434501][T11112] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.513065][T11112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.517323][T11112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.520902][T11112] bond0 (unregistering): Released all slaves [ 288.543675][T11112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.549885][T11112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.553413][T11112] bond0 (unregistering): Released all slaves [ 288.557268][ T5457] 8021q: adding VLAN 0 to HW filter on device eth8 [ 288.649079][T11112] tipc: Left network mode [ 288.685210][ T5457] 8021q: adding VLAN 0 to HW filter on device eth9 [ 288.844146][ T5457] 8021q: adding VLAN 0 to HW filter on device eth10 [ 288.961395][ T5457] 8021q: adding VLAN 0 to HW filter on device eth11 [ 289.096151][ T5457] 8021q: adding VLAN 0 to HW filter on device eth12 [ 289.107592][T11112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.110560][T11112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.113615][T11112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.116650][T11112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.123843][T11112] hsr_slave_0: left promiscuous mode [ 289.126517][T11112] hsr_slave_1: left promiscuous mode [ 289.128949][T11112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.131255][T11112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.134540][T11112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.138943][T11112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.144322][T11112] veth1_macvtap: left promiscuous mode [ 289.146529][T11112] veth0_macvtap: left promiscuous mode [ 289.148984][T11112] veth1_vlan: left promiscuous mode [ 289.151175][T11112] veth0_vlan: left promiscuous mode [ 289.154130][T11112] veth1_macvtap: left promiscuous mode [ 289.156463][T11112] veth0_macvtap: left promiscuous mode [ 289.161154][T11112] veth1_vlan: left promiscuous mode [ 289.163362][T11112] veth0_vlan: left promiscuous mode [ 289.248855][T11112] team0 (unregistering): Port device team_slave_1 removed [ 289.253821][T11112] team0 (unregistering): Port device team_slave_0 removed [ 289.325362][T11112] team0 (unregistering): Port device team_slave_1 removed [ 289.331844][T11112] team0 (unregistering): Port device team_slave_0 removed [ 289.481052][ T5457] 8021q: adding VLAN 0 to HW filter on device eth13