last executing test programs: 15.370248356s ago: executing program 2 (id=3087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0xa, 0x40000003, 0xfffffffc, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12.965090597s ago: executing program 2 (id=3095): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081", 0x7}], 0x1}, 0x4000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 12.763871241s ago: executing program 2 (id=3097): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000400)="e9fd5c348e", 0x5}], 0x1}, 0x0) 12.555739376s ago: executing program 2 (id=3100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ff"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0xc080) 12.310900691s ago: executing program 2 (id=3102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r3}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 10.020829459s ago: executing program 2 (id=3109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) openat$zero(0xffffff9c, &(0x7f00000001c0), 0x18000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffcca}, 0x48) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0xc, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000005c0)={0x3, 0x2, 0x2, "0d159fe28bdca5a7951c5861adf99c93ee9288816c78b6ef0482e45b0ec1eb6e", 0x796a7f23}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r3, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) close_range(r5, 0xffffffffffffffff, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) 7.1196449s ago: executing program 1 (id=3118): socket$kcm(0xa, 0x1de6f9820a911058, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.751157718s ago: executing program 1 (id=3119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r3}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 6.334885386s ago: executing program 0 (id=3121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0xa, 0x40000003, 0xfffffffc, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.357411738s ago: executing program 4 (id=3129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x5}], &(0x7f0000000340)='GPL\x00', 0x5, 0x26, &(0x7f0000000380)=""/38, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 4.223229131s ago: executing program 4 (id=3130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="6400000002060347f1ab2f00000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300"], 0x64}}, 0x8000) sendmsg(r0, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) 4.006997766s ago: executing program 4 (id=3131): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.901693878s ago: executing program 4 (id=3132): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x400, 0xfffffffd, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x7}, {0xa, 0x7}, {0xd, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008080}, 0x48c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff81", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 3.729581071s ago: executing program 1 (id=3133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) openat$zero(0xffffff9c, &(0x7f00000001c0), 0x18000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffcca}, 0x48) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0xc, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000005c0)={0x3, 0x2, 0x2, "0d159fe28bdca5a7951c5861adf99c93ee9288816c78b6ef0482e45b0ec1eb6e", 0x796a7f23}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r3, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) close_range(r5, 0xffffffffffffffff, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) 3.543679175s ago: executing program 0 (id=3135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="002000000102"}) 3.179967543s ago: executing program 0 (id=3138): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f00000000c0)="c0", 0x0, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) 3.002746736s ago: executing program 4 (id=3140): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100), 0x2010000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 2.932853288s ago: executing program 0 (id=3141): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000019c0)={@cgroup, 0xffffffffffffffff, 0x5, 0x8}, 0x20) 2.815142691s ago: executing program 0 (id=3142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r3}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 2.699918043s ago: executing program 4 (id=3144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0xa, 0x40000003, 0xfffffffc, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.535222716s ago: executing program 3 (id=3145): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.454417878s ago: executing program 3 (id=3146): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48884) 2.287594322s ago: executing program 3 (id=3147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x8081) 1.927402979s ago: executing program 1 (id=3148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb000009080001400040"], 0xf8}, 0x1, 0x0, 0x0, 0x890}, 0x0) 1.92727531s ago: executing program 3 (id=3149): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x400, 0xfffffffd, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x7}, {0xa, 0x7}, {0xd, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008080}, 0x48c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.749035083s ago: executing program 1 (id=3150): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f00000000c0)="c0", 0x0, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) 1.670761055s ago: executing program 1 (id=3151): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 967.28971ms ago: executing program 3 (id=3152): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)}, {&(0x7f0000000400)="e9fd5c348e", 0x5}], 0x2}, 0x0) 932.030291ms ago: executing program 3 (id=3153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9b, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3ff}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xeb}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x2}}]}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x28, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7fffffff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xa2}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7ff}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x18014045}, 0x800) 0s ago: executing program 0 (id=3154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000001000000004920800024000000001"], 0xfea1}}, 0x800) kernel console output (not intermixed with test programs): ][ T8942] loop5: AHDI p1 p2 p3 [ 297.340169][ T8944] blktrace: Concurrent blktraces are not allowed on sg0 [ 297.350651][ T4277] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 297.390260][ T8942] loop5: partition table partially beyond EOD, truncated [ 297.447684][ T8942] loop5: p1 start 1601398130 is beyond EOD, truncated [ 297.480805][ T8942] loop5: p2 start 1702059890 is beyond EOD, truncated [ 297.668542][ T8946] fido_id[8946]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 297.798782][ T8952] device syzkaller0 entered promiscuous mode [ 298.391828][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 298.407283][ T8972] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.416597][ T8972] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.425411][ T8972] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.434175][ T8972] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.445207][ T8972] device vxlan0 entered promiscuous mode [ 299.031434][ T8984] loop5: detected capacity change from 0 to 7 [ 299.046683][ T8984] Dev loop5: unable to read RDB block 7 [ 299.055607][ T8984] loop5: AHDI p1 p2 p3 [ 299.060333][ T8984] loop5: partition table partially beyond EOD, truncated [ 299.068123][ T8984] loop5: p1 start 1601398130 is beyond EOD, truncated [ 299.075645][ T8984] loop5: p2 start 1702059890 is beyond EOD, truncated [ 299.310292][ T8990] device syzkaller0 entered promiscuous mode [ 301.255681][ T9031] device syzkaller0 entered promiscuous mode [ 302.336992][ T4321] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 302.534875][ T4321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.555369][ T4321] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.565684][ T9063] device syzkaller0 entered promiscuous mode [ 302.581286][ T4321] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 302.600237][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 302.623934][ T4321] usb 4-1: SerialNumber: syz [ 302.978793][ T4321] usb 4-1: 0:2 : does not exist [ 303.018181][ T4321] usb 4-1: USB disconnect, device number 16 [ 303.119718][ T4277] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 303.138922][ T4277] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 303.236453][ T9088] fido_id[9088]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 304.000432][ T9106] device syzkaller0 entered promiscuous mode [ 304.872177][ T4316] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 304.916748][ T4316] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 305.188006][ T9123] fido_id[9123]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 306.112042][ T4284] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 306.362628][ T4321] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 306.572567][ T4321] usb 4-1: Using ep0 maxpacket: 32 [ 306.582224][ T4321] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 306.605426][ T4321] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 306.629943][ T4321] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 306.674004][ T4321] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 306.700265][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.728390][ T4321] usb 4-1: Product: syz [ 306.754149][ T4321] usb 4-1: Manufacturer: syz [ 306.762152][ T4321] usb 4-1: SerialNumber: syz [ 306.787037][ T4321] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 306.804901][ T4321] imon 4-1:155.0: unable to initialize intf0, err -19 [ 306.818344][ T4321] imon:imon_probe: failed to initialize context! [ 306.831687][ T4321] imon 4-1:155.0: unable to register, err -19 [ 308.436605][ T4321] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 308.644365][ T4321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 308.661384][ T4321] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 308.682553][ T4321] usb 2-1: can't read configurations, error -71 [ 308.733733][ T126] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 308.923853][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.937108][ T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.953225][ T126] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 308.962442][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 308.977482][ T126] usb 3-1: SerialNumber: syz [ 309.102110][ T4316] usb 4-1: USB disconnect, device number 17 [ 309.357479][ T126] usb 3-1: 0:2 : does not exist [ 309.402523][ T126] usb 3-1: USB disconnect, device number 20 [ 310.912476][ T4321] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 311.106946][ T4321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 311.139788][ T4321] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 311.165530][ T4321] usb 2-1: can't read configurations, error -71 [ 313.452448][ T4277] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 313.656332][ T4277] usb 2-1: unable to get BOS descriptor or descriptor too short [ 313.671652][ T4277] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 313.698638][ T4277] usb 2-1: can't read configurations, error -71 [ 316.196624][ T4277] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 316.212519][ T126] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 316.224613][ T4277] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 316.418320][ T126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 316.444428][ T126] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 316.461534][ T9394] fido_id[9394]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 316.493792][ T126] usb 1-1: can't read configurations, error -71 [ 316.979518][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.985933][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.789868][ T4260] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 317.810635][ T4260] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 318.095025][ T9436] fido_id[9436]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 318.252136][ T9440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.782387][ T126] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 319.017750][ T126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 319.039380][ T126] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 319.057246][ T126] usb 1-1: can't read configurations, error -71 [ 320.933665][ T126] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 321.138393][ T126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 321.152602][ T126] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 321.177673][ T126] usb 1-1: can't read configurations, error -71 [ 323.522426][ T953] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 323.728920][ T953] usb 1-1: unable to get BOS descriptor or descriptor too short [ 323.754757][ T953] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 323.792959][ T953] usb 1-1: can't read configurations, error -71 [ 323.873190][ T9558] fuse: Bad value for 'fd' [ 324.823061][ T9583] device erspan0 entered promiscuous mode [ 325.261429][ T9597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1653'. [ 326.346119][ T9620] fuse: Bad value for 'fd' [ 326.432607][ T953] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 326.635573][ T9607] loop5: detected capacity change from 0 to 7 [ 326.649151][ T9607] Dev loop5: unable to read RDB block 7 [ 326.662217][ T9607] loop5: AHDI p1 p2 p3 [ 326.667913][ T9607] loop5: partition table partially beyond EOD, truncated [ 326.681996][ T9607] loop5: p1 start 1601398130 is beyond EOD, truncated [ 326.690305][ T9607] loop5: p2 start 1702059890 is beyond EOD, truncated [ 326.704378][ T953] usb 2-1: unable to get BOS descriptor or descriptor too short [ 326.721301][ T953] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 326.729912][ T953] usb 2-1: can't read configurations, error -71 [ 328.901354][ T9663] fuse: Bad value for 'fd' [ 329.010011][ T9665] device erspan0 entered promiscuous mode [ 329.232406][ T126] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 329.445730][ T9667] loop5: detected capacity change from 0 to 7 [ 329.459815][ T4265] Dev loop5: unable to read RDB block 7 [ 329.466481][ T4265] loop5: AHDI p1 p2 p3 [ 329.493821][ T4265] loop5: partition table partially beyond EOD, truncated [ 329.529184][ T4265] loop5: p1 start 1601398130 is beyond EOD, truncated [ 329.581783][ T4265] loop5: p2 start 1702059890 is beyond EOD, truncated [ 329.607589][ T9667] Dev loop5: unable to read RDB block 7 [ 329.629615][ T9667] loop5: AHDI p1 p2 p3 [ 329.651965][ T9667] loop5: partition table partially beyond EOD, truncated [ 329.662559][ T9667] loop5: p1 start 1601398130 is beyond EOD, truncated [ 329.690516][ T9667] loop5: p2 start 1702059890 is beyond EOD, truncated [ 329.754104][ T126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 329.769753][ T126] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 329.801287][ T126] usb 4-1: can't read configurations, error -71 [ 331.360920][ T9715] device erspan0 entered promiscuous mode [ 331.558996][ T9722] fuse: Bad value for 'fd' [ 332.192401][ T126] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 332.388538][ T9729] loop5: detected capacity change from 0 to 7 [ 332.396807][ T9729] Dev loop5: unable to read RDB block 7 [ 332.412585][ T9729] loop5: AHDI p1 p2 p3 [ 332.416796][ T9729] loop5: partition table partially beyond EOD, truncated [ 332.444372][ T9729] loop5: p1 start 1601398130 is beyond EOD, truncated [ 332.467362][ T9729] loop5: p2 start 1702059890 is beyond EOD, truncated [ 332.517979][ T126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 332.538548][ T126] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 332.567006][ T126] usb 4-1: can't read configurations, error -71 [ 332.736350][ T9750] device syzkaller0 entered promiscuous mode [ 334.381216][ T9790] device syzkaller0 entered promiscuous mode [ 334.669120][ T9792] loop5: detected capacity change from 0 to 7 [ 334.687647][ T4265] loop5: [ 334.690648][ T4265] loop5: partition table partially beyond EOD, truncated [ 334.736692][ T9792] loop5: [ 334.739759][ T9792] loop5: partition table partially beyond EOD, truncated [ 335.685954][ T9816] sg_write: data in/out 517950/136 bytes for SCSI command 0x0-- guessing data in; [ 335.685954][ T9816] program syz.4.1727 not setting count and/or reply_len properly [ 335.779951][ T9821] device syzkaller0 entered promiscuous mode [ 335.935559][ T9824] loop5: detected capacity change from 0 to 7 [ 335.960470][ T9824] loop5: [ 335.971769][ T9824] loop5: partition table partially beyond EOD, truncated [ 336.851207][ T9854] device syzkaller0 entered promiscuous mode [ 336.951828][ T9856] loop5: detected capacity change from 0 to 7 [ 336.978988][ T4265] loop5: [ 336.981975][ T4265] loop5: partition table partially beyond EOD, truncated [ 337.040426][ T9856] loop5: [ 337.045730][ T9856] loop5: partition table partially beyond EOD, truncated [ 338.930115][ T9893] device syzkaller0 entered promiscuous mode [ 339.082429][ T126] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 339.287638][ T9889] loop5: detected capacity change from 0 to 7 [ 339.374645][ T9889] Dev loop5: unable to read RDB block 7 [ 339.387050][ T9889] loop5: unable to read partition table [ 339.412896][ T9889] loop5: partition table beyond EOD, truncated [ 339.453036][ T9889] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 339.503032][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 339.514881][ T9904] vivid-001: ================= START STATUS ================= [ 339.545704][ T126] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 339.564528][ T9904] vivid-001: Radio HW Seek Mode: Bounded [ 339.571070][ T9904] vivid-001: Radio Programmable HW Seek: false [ 339.582765][ T9904] vivid-001: RDS Rx I/O Mode: Block I/O [ 339.588650][ T9904] vivid-001: Generate RBDS Instead of RDS: false [ 339.596850][ T9904] vivid-001: RDS Reception: true [ 339.602095][ T9904] vivid-001: RDS Program Type: 0 inactive [ 339.608344][ T126] usb 5-1: can't read configurations, error -71 [ 339.628886][ T9904] vivid-001: RDS PS Name: inactive [ 339.637771][ T9904] vivid-001: RDS Radio Text: inactive [ 339.652426][ T9904] vivid-001: RDS Traffic Announcement: false inactive [ 339.659655][ T9904] vivid-001: RDS Traffic Program: false inactive [ 339.669531][ T9904] vivid-001: RDS Music: false inactive [ 339.676439][ T9904] vivid-001: ================== END STATUS ================== [ 340.426721][ T9930] device syzkaller0 entered promiscuous mode [ 341.682499][ T126] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 341.862353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 341.906553][ T9947] loop5: detected capacity change from 0 to 7 [ 341.925971][ T4265] Dev loop5: unable to read RDB block 7 [ 341.931572][ T4265] loop5: unable to read partition table [ 341.957700][ T4265] loop5: partition table beyond EOD, truncated [ 342.002971][ T9947] Dev loop5: unable to read RDB block 7 [ 342.013115][ T9947] loop5: unable to read partition table [ 342.033367][ T9947] loop5: partition table beyond EOD, truncated [ 342.067886][ T9947] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 342.118556][ T126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 342.136894][ T126] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 342.159804][ T9958] device syzkaller0 entered promiscuous mode [ 342.167200][ T126] usb 1-1: can't read configurations, error -71 [ 343.896268][ T9993] device syzkaller0 entered promiscuous mode [ 344.523374][ T4316] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 344.725522][T10004] loop5: detected capacity change from 0 to 7 [ 344.741911][T10004] Dev loop5: unable to read RDB block 7 [ 344.748141][T10004] loop5: unable to read partition table [ 344.762494][T10004] loop5: partition table beyond EOD, truncated [ 344.788113][T10004] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 344.838426][ T4316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 344.904392][ T4316] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 344.934096][ T4316] usb 3-1: can't read configurations, error -71 [ 345.581837][T10039] device syzkaller0 entered promiscuous mode [ 346.812416][ T4316] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 347.007194][T10068] loop5: detected capacity change from 0 to 7 [ 347.042675][T10068] Dev loop5: unable to read RDB block 7 [ 347.048322][T10068] loop5: unable to read partition table [ 347.092741][T10068] loop5: partition table beyond EOD, truncated [ 347.109194][T10068] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 347.133033][ T4316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 347.173290][ T4316] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 347.191318][ T4316] usb 4-1: can't read configurations, error -71 [ 347.965840][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1839'. [ 348.005176][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 352.119094][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1877'. [ 352.412667][ T953] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 352.618145][T10212] loop5: detected capacity change from 0 to 7 [ 352.628559][ T4265] Dev loop5: unable to read RDB block 7 [ 352.637120][ T4265] loop5: unable to read partition table [ 352.670922][ T4265] loop5: partition table beyond EOD, truncated [ 352.698908][T10212] Dev loop5: unable to read RDB block 7 [ 352.711263][T10212] loop5: unable to read partition table [ 352.730020][T10212] loop5: partition table beyond EOD, truncated [ 352.790733][T10212] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 352.839682][ T953] usb 1-1: unable to get BOS descriptor or descriptor too short [ 352.863068][ T953] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 352.881035][ T953] usb 1-1: can't read configurations, error -71 [ 353.877200][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1892'. [ 354.140807][T10244] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1891'. [ 354.176155][T10244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1891'. [ 354.998114][T10278] netlink: 'syz.3.1904': attribute type 10 has an invalid length. [ 355.029216][T10278] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 359.228347][ T953] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 359.416224][T10362] loop5: detected capacity change from 0 to 7 [ 359.439059][T10362] Dev loop5: unable to read RDB block 7 [ 359.458793][T10362] loop5: unable to read partition table [ 359.471756][T10362] loop5: partition table beyond EOD, truncated [ 359.484790][T10362] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 359.499387][ T953] usb 4-1: unable to get BOS descriptor or descriptor too short [ 359.509898][ T953] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 359.518103][ T953] usb 4-1: can't read configurations, error -71 [ 359.533232][T10383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1941'. [ 360.572697][ T4319] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 360.832401][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 360.839089][ T4319] usb 3-1: config index 0 descriptor too short (expected 8192, got 27) [ 360.852999][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.894512][ T4319] usb 3-1: config 0 has no interfaces? [ 360.917172][ T4319] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 360.945619][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.965499][ T4319] usb 3-1: config 0 descriptor?? [ 361.256119][ T4277] usb 3-1: USB disconnect, device number 23 [ 361.915050][T10427] device syzkaller0 entered promiscuous mode [ 361.931831][T10427] tipc: Enabled bearer , priority 0 [ 361.958990][T10427] tipc: Resetting bearer [ 361.988421][T10426] tipc: Resetting bearer [ 362.031384][T10426] tipc: Disabling bearer [ 362.232483][ T4316] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 362.259382][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1959'. [ 362.435964][T10428] loop5: detected capacity change from 0 to 7 [ 362.450389][ T4265] Dev loop5: unable to read RDB block 7 [ 362.457549][ T4265] loop5: unable to read partition table [ 362.474617][ T4265] loop5: partition table beyond EOD, truncated [ 362.507729][T10428] Dev loop5: unable to read RDB block 7 [ 362.515515][T10428] loop5: unable to read partition table [ 362.530663][T10428] loop5: partition table beyond EOD, truncated [ 362.558793][T10428] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 362.601485][ T4316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 362.631540][ T4316] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 362.658096][ T4316] usb 3-1: can't read configurations, error -71 [ 364.104979][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1976'. [ 364.616655][ T953] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 364.637332][ T953] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 364.692373][ T4316] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 364.891981][T10484] loop5: detected capacity change from 0 to 7 [ 364.934326][T10484] Dev loop5: unable to read RDB block 7 [ 364.939986][T10484] loop5: unable to read partition table [ 364.970432][T10484] loop5: partition table beyond EOD, truncated [ 365.001643][T10484] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 365.044244][ T4316] usb 1-1: unable to get BOS descriptor or descriptor too short [ 365.082395][ T4316] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 365.099687][ T4316] usb 1-1: can't read configurations, error -71 [ 366.498299][T10536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1994'. [ 367.282511][ T4316] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 367.475912][T10550] loop5: detected capacity change from 0 to 7 [ 367.500572][ T4265] Dev loop5: unable to read RDB block 7 [ 367.524315][ T4265] loop5: unable to read partition table [ 367.538591][ T4265] loop5: partition table beyond EOD, truncated [ 367.560270][T10550] Dev loop5: unable to read RDB block 7 [ 367.575519][T10550] loop5: unable to read partition table [ 367.592645][T10550] loop5: partition table beyond EOD, truncated [ 367.611543][T10550] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 367.657860][ T4316] usb 5-1: unable to get BOS descriptor or descriptor too short [ 367.677287][ T4316] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 367.716377][ T4316] usb 5-1: can't read configurations, error -71 [ 368.673397][T10603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2018'. [ 369.439836][ T953] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 369.465325][ T953] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.532419][ T4316] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 369.752508][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 369.759553][ T4316] usb 4-1: config index 0 descriptor too short (expected 8192, got 27) [ 369.824068][ T4316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.871755][ T4316] usb 4-1: config 0 has no interfaces? [ 369.904095][ T4316] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 369.966029][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.026467][ T4316] usb 4-1: config 0 descriptor?? [ 370.083824][T10630] tipc: Enabling of bearer rejected, failed to enable media [ 370.282008][ T953] usb 4-1: USB disconnect, device number 26 [ 370.650551][T10642] netlink: 'syz.0.2033': attribute type 13 has an invalid length. [ 370.675491][T10642] gretap0: refused to change device tx_queue_len [ 370.690413][T10642] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 371.146311][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'. [ 371.177371][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2040'. [ 371.201214][T10658] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.210207][T10658] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.219060][T10658] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.227836][T10658] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.245949][T10658] device vxlan0 entered promiscuous mode [ 371.392471][ T4321] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 371.550218][ T953] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 371.573772][ T4321] usb 5-1: config 1 interface 0 has no altsetting 0 [ 371.593852][ T4321] usb 5-1: string descriptor 0 read error: -22 [ 371.600324][ T953] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 371.618451][ T4321] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.40 [ 371.654849][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.795450][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2051'. [ 373.002608][ T4260] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 373.192699][ T4260] usb 4-1: Using ep0 maxpacket: 8 [ 373.201132][ T4260] usb 4-1: config index 0 descriptor too short (expected 8192, got 27) [ 373.220890][ T4260] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.246884][ T4260] usb 4-1: config 0 has no interfaces? [ 373.262270][ T4260] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 373.314056][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.340449][ T4260] usb 4-1: config 0 descriptor?? [ 373.563904][ T4319] usb 4-1: USB disconnect, device number 27 [ 373.834377][ T4319] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 373.856959][ T4319] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 374.234643][ T4321] usbhid 5-1:1.0: can't add hid device: -71 [ 374.240679][ T4321] usbhid: probe of 5-1:1.0 failed with error -71 [ 374.286955][ T4321] usb 5-1: USB disconnect, device number 22 [ 374.947068][T10741] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2069'. [ 375.592427][ T4277] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 375.782485][ T4277] usb 5-1: Using ep0 maxpacket: 8 [ 375.803358][ T4277] usb 5-1: config index 0 descriptor too short (expected 8192, got 27) [ 375.811673][ T4277] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.850546][ T4277] usb 5-1: config 0 has no interfaces? [ 375.877877][ T4277] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 375.898121][ T4277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.917866][ T4277] usb 5-1: config 0 descriptor?? [ 376.052489][ T4319] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 376.148132][ T4277] usb 5-1: USB disconnect, device number 23 [ 376.246520][ T4319] usb 3-1: config 1 interface 0 has no altsetting 0 [ 376.268847][ T4319] usb 3-1: string descriptor 0 read error: -22 [ 376.278659][ T4319] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.40 [ 376.288010][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.423013][T10777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2081'. [ 376.617561][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2082'. [ 376.876201][ T4321] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 376.897359][ T4321] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.415158][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.421529][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.502799][ T4277] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 378.539269][ T4277] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.932887][ T4319] usbhid 3-1:1.0: can't add hid device: -71 [ 378.942431][ T4319] usbhid: probe of 3-1:1.0 failed with error -71 [ 379.007878][ T4319] usb 3-1: USB disconnect, device number 26 [ 379.849618][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2118'. [ 380.468145][ T4319] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 380.488909][ T4319] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 380.510754][T10899] sch_tbf: peakrate 7 is lower than or equals to rate 12998416500665246951 ! [ 380.713755][ T4321] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 380.939899][T10895] loop5: detected capacity change from 0 to 7 [ 380.960198][T10895] Dev loop5: unable to read RDB block 7 [ 380.972398][T10895] loop5: unable to read partition table [ 380.978238][T10895] loop5: partition table beyond EOD, truncated [ 381.062423][T10895] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 381.080461][ T4321] usb 3-1: unable to get BOS descriptor or descriptor too short [ 381.114476][ T4321] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 381.150174][ T4321] usb 3-1: can't read configurations, error -71 [ 382.399827][T10950] device syzkaller0 entered promiscuous mode [ 382.912620][ T4277] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 383.106442][T10957] loop5: detected capacity change from 0 to 7 [ 383.150565][T10957] Dev loop5: unable to read RDB block 7 [ 383.172571][T10957] loop5: unable to read partition table [ 383.195072][T10957] loop5: partition table beyond EOD, truncated [ 383.221650][T10957] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 383.295516][ T4277] usb 5-1: unable to get BOS descriptor or descriptor too short [ 383.342088][ T4277] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 383.373519][ T4277] usb 5-1: can't read configurations, error -71 [ 386.329649][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2178'. [ 386.346784][T11042] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2178'. [ 386.774203][T11002] device syzkaller0 entered promiscuous mode [ 386.942418][ T4260] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 387.152447][ T4260] usb 3-1: Using ep0 maxpacket: 8 [ 387.167615][ T4260] usb 3-1: config index 0 descriptor too short (expected 8192, got 27) [ 387.178895][ T4260] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.206903][ T4260] usb 3-1: config 0 has no interfaces? [ 387.214672][ T4260] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 387.226218][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.241645][ T4260] usb 3-1: config 0 descriptor?? [ 387.464909][ T126] usb 3-1: USB disconnect, device number 29 [ 388.064629][T11075] device syzkaller0 entered promiscuous mode [ 388.076459][T11075] tipc: Enabled bearer , priority 0 [ 388.208411][T11074] tipc: Resetting bearer [ 388.273927][T11074] tipc: Disabling bearer [ 388.538111][T11081] device syzkaller0 entered promiscuous mode [ 388.627245][T11085] device syzkaller0 entered promiscuous mode [ 388.754493][T11091] netlink: 'syz.1.2197': attribute type 4 has an invalid length. [ 388.775258][T11091] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2197'. [ 388.801349][T11091] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 388.836248][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 389.502481][ T4277] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 389.607369][T11111] device syzkaller0 entered promiscuous mode [ 389.637523][T11111] tipc: Enabled bearer , priority 0 [ 389.672664][T11108] tipc: Resetting bearer [ 389.722391][ T4277] usb 1-1: Using ep0 maxpacket: 8 [ 389.728810][ T4277] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 389.778100][ T4277] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.812341][ T4277] usb 1-1: config 0 has no interfaces? [ 389.826258][ T4277] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 389.845579][ T4277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.858244][T11108] tipc: Disabling bearer [ 389.877487][ T4277] usb 1-1: config 0 descriptor?? [ 390.037481][T11115] device syzkaller0 entered promiscuous mode [ 390.104947][ T126] usb 1-1: USB disconnect, device number 37 [ 390.296200][T11119] device syzkaller0 entered promiscuous mode [ 390.333937][T11119] tipc: Enabled bearer , priority 0 [ 390.354874][T11118] tipc: Resetting bearer [ 390.393522][T11118] tipc: Disabling bearer [ 390.806673][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'. [ 390.977809][T11139] device syzkaller0 entered promiscuous mode [ 390.995182][T11139] tipc: Enabled bearer , priority 0 [ 391.008720][T11138] tipc: Resetting bearer [ 391.036579][T11138] tipc: Disabling bearer [ 391.269685][T11145] device syzkaller0 entered promiscuous mode [ 391.820004][T11151] device syzkaller0 entered promiscuous mode [ 391.849343][T11151] tipc: Enabled bearer , priority 0 [ 391.905397][T11150] tipc: Resetting bearer [ 392.019501][T11150] tipc: Disabling bearer [ 392.134783][T11165] device syzkaller0 entered promiscuous mode [ 392.148405][T11165] tipc: Enabled bearer , priority 0 [ 392.174098][T11163] tipc: Resetting bearer [ 392.270801][T11163] tipc: Disabling bearer [ 392.397322][ T14] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 392.622425][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 392.630236][ T14] usb 2-1: config index 0 descriptor too short (expected 8192, got 27) [ 392.650958][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.681842][ T14] usb 2-1: config 0 has no interfaces? [ 392.694404][T11182] device syzkaller0 entered promiscuous mode [ 392.702722][ T14] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 392.725356][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.748963][ T14] usb 2-1: config 0 descriptor?? [ 392.995653][ T4277] usb 2-1: USB disconnect, device number 27 [ 393.458378][T11199] device syzkaller0 entered promiscuous mode [ 393.504947][T11199] tipc: Enabled bearer , priority 0 [ 393.571423][T11198] tipc: Resetting bearer [ 393.665418][T11198] tipc: Disabling bearer [ 393.726989][T11207] device syzkaller0 entered promiscuous mode [ 395.722430][ T4321] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 395.906461][T11247] device syzkaller0 entered promiscuous mode [ 395.937279][ T4321] usb 4-1: Using ep0 maxpacket: 8 [ 395.949565][ T4321] usb 4-1: config index 0 descriptor too short (expected 8192, got 27) [ 395.959304][ T4321] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.969586][ T4321] usb 4-1: config 0 has no interfaces? [ 395.975732][ T4321] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 395.985130][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.999525][ T4321] usb 4-1: config 0 descriptor?? [ 396.213057][ T14] usb 4-1: USB disconnect, device number 28 [ 396.227183][T11257] device syzkaller0 entered promiscuous mode [ 396.269446][T11257] tipc: Enabled bearer , priority 0 [ 396.290253][T11255] tipc: Resetting bearer [ 396.339536][T11255] tipc: Disabling bearer [ 397.059946][T11282] device syzkaller0 entered promiscuous mode [ 397.281031][T11287] device syzkaller0 entered promiscuous mode [ 397.313410][T11287] tipc: Enabled bearer , priority 0 [ 397.326849][T11286] tipc: Resetting bearer [ 397.393391][T11286] tipc: Disabling bearer [ 398.299174][T11311] device syzkaller0 entered promiscuous mode [ 398.422428][ T4321] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 398.610066][T11317] device syzkaller0 entered promiscuous mode [ 398.636524][ T4321] usb 5-1: Using ep0 maxpacket: 8 [ 398.662237][ T4321] usb 5-1: config index 0 descriptor too short (expected 8192, got 27) [ 398.666330][T11317] tipc: Enabled bearer , priority 0 [ 398.677412][ T4321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.702205][T11317] tipc: Resetting bearer [ 398.704916][ T4321] usb 5-1: config 0 has no interfaces? [ 398.713800][T11315] tipc: Resetting bearer [ 398.715747][ T4321] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 398.728947][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.745613][ T4321] usb 5-1: config 0 descriptor?? [ 398.763183][T11315] tipc: Disabling bearer [ 398.971477][ T4277] usb 5-1: USB disconnect, device number 26 [ 399.226241][T11341] device syzkaller0 entered promiscuous mode [ 399.756527][T11355] device syzkaller0 entered promiscuous mode [ 399.838888][T11355] tipc: Enabled bearer , priority 0 [ 399.901964][T11358] tipc: Resetting bearer [ 399.925415][T11354] tipc: Resetting bearer [ 399.981772][T11354] tipc: Disabling bearer [ 400.272602][ T14] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 400.437494][T11372] device syzkaller0 entered promiscuous mode [ 400.492483][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 400.514674][ T14] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 400.533242][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.554599][ T14] usb 1-1: config 0 has no interfaces? [ 400.574767][ T14] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 400.587785][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.605629][ T14] usb 1-1: config 0 descriptor?? [ 400.839098][ T4321] usb 1-1: USB disconnect, device number 38 [ 401.083484][ T4319] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 401.303075][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 401.311838][ T4319] usb 3-1: config index 0 descriptor too short (expected 8192, got 27) [ 401.325949][T11391] device syzkaller0 entered promiscuous mode [ 401.357790][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.364226][T11391] tipc: Enabled bearer , priority 0 [ 401.391084][ T4319] usb 3-1: config 0 has no interfaces? [ 401.400585][T11391] tipc: Resetting bearer [ 401.411816][ T4319] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 401.422463][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.439295][ T4319] usb 3-1: config 0 descriptor?? [ 401.466312][T11390] tipc: Resetting bearer [ 401.491294][T11390] tipc: Disabling bearer [ 401.499914][T11395] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2323'. [ 401.586419][T11402] device syzkaller0 entered promiscuous mode [ 401.658256][ T4319] usb 3-1: USB disconnect, device number 30 [ 402.127635][T11420] TCP: TCP_TX_DELAY enabled [ 402.507695][T11429] device syzkaller0 entered promiscuous mode [ 402.566078][T11429] tipc: Enabled bearer , priority 0 [ 402.617281][T11429] tipc: Resetting bearer [ 402.664790][T11428] tipc: Resetting bearer [ 402.700542][T11428] tipc: Disabling bearer [ 402.777377][T11436] device syzkaller0 entered promiscuous mode [ 403.735327][T11461] device syzkaller0 entered promiscuous mode [ 403.770135][T11460] device syzkaller0 entered promiscuous mode [ 403.852530][T11460] tipc: Enabled bearer , priority 0 [ 403.880496][T11468] netlink: 'syz.1.2355': attribute type 29 has an invalid length. [ 403.884354][T11460] tipc: Resetting bearer [ 403.901094][T11458] tipc: Resetting bearer [ 403.931386][T11458] tipc: Disabling bearer [ 403.947098][T11468] netlink: 'syz.1.2355': attribute type 29 has an invalid length. [ 403.955866][T11470] netlink: 'syz.1.2355': attribute type 29 has an invalid length. [ 403.970412][T11468] netlink: 'syz.1.2355': attribute type 29 has an invalid length. [ 404.556738][T11498] device syzkaller0 entered promiscuous mode [ 404.891288][T11502] device syzkaller0 entered promiscuous mode [ 404.912045][T11502] tipc: Enabled bearer , priority 0 [ 404.932713][T11502] tipc: Resetting bearer [ 404.955965][T11501] tipc: Resetting bearer [ 405.035572][T11501] tipc: Disabling bearer [ 405.802560][T11516] netlink: 772 bytes leftover after parsing attributes in process `syz.1.2374'. [ 406.180924][T11522] device syzkaller0 entered promiscuous mode [ 406.659227][T11540] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2384'. [ 407.221274][T11554] device syzkaller0 entered promiscuous mode [ 407.725897][T11573] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 408.023525][T11582] netlink: 'syz.0.2402': attribute type 13 has an invalid length. [ 408.023583][T11582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2402'. [ 408.232254][T11587] device syzkaller0 entered promiscuous mode [ 409.336540][T11610] device syzkaller0 entered promiscuous mode [ 411.097339][ T4319] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 411.302580][ T4319] usb 1-1: Using ep0 maxpacket: 8 [ 411.316788][ T4319] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 411.333099][ T4319] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.351840][ T4319] usb 1-1: config 0 has no interfaces? [ 411.360009][ T4319] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 411.376540][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.411883][ T4319] usb 1-1: config 0 descriptor?? [ 411.623111][ T4319] usb 1-1: USB disconnect, device number 39 [ 412.044182][T11627] netlink: 'syz.2.2420': attribute type 13 has an invalid length. [ 412.055338][T11627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2420'. [ 412.065803][T11656] netlink: 'syz.3.2425': attribute type 10 has an invalid length. [ 412.415209][T11668] device syzkaller0 entered promiscuous mode [ 412.459880][T11670] netlink: 'syz.4.2432': attribute type 1 has an invalid length. [ 412.489836][T11670] netlink: 'syz.4.2432': attribute type 2 has an invalid length. [ 413.037622][T11688] netlink: 'syz.0.2438': attribute type 13 has an invalid length. [ 413.037645][T11688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2438'. [ 414.655418][ T14] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 414.854209][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 414.860953][ T14] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 414.866939][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2449'. [ 414.885912][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.905295][ T14] usb 1-1: config 0 has no interfaces? [ 414.910854][ T14] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 414.933192][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.950813][ T14] usb 1-1: config 0 descriptor?? [ 415.172980][ T14] usb 1-1: USB disconnect, device number 40 [ 416.078605][T11734] netlink: 'syz.1.2451': attribute type 13 has an invalid length. [ 416.086524][T11734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2451'. [ 416.606538][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2460'. [ 416.722569][ T4321] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 416.836687][T11760] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 416.918908][T11764] device syzkaller0 entered promiscuous mode [ 416.925720][T11748] loop5: detected capacity change from 0 to 7 [ 416.993436][T11748] Dev loop5: unable to read RDB block 7 [ 416.993489][T11748] loop5: unable to read partition table [ 416.993661][T11748] loop5: partition table beyond EOD, truncated [ 417.077306][T11748] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 417.089522][ T4321] usb 4-1: unable to get BOS descriptor or descriptor too short [ 417.090248][ T4321] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 417.090278][ T4321] usb 4-1: can't read configurations, error -71 [ 417.838334][T11790] netlink: 'syz.3.2473': attribute type 13 has an invalid length. [ 417.857762][T11790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2473'. [ 417.882414][ T126] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 418.089683][T11797] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2478'. [ 418.101880][T11797] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2478'. [ 418.112829][ T126] usb 1-1: Using ep0 maxpacket: 8 [ 418.123844][ T126] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 418.150037][T11798] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2478'. [ 418.153830][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.175718][ T126] usb 1-1: config 0 has no interfaces? [ 418.192443][T11797] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2478'. [ 418.205174][ T126] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 418.222354][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.241195][ T126] usb 1-1: config 0 descriptor?? [ 418.462862][ T4319] usb 1-1: USB disconnect, device number 41 [ 418.662397][ T126] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 418.875310][T11808] loop5: detected capacity change from 0 to 7 [ 418.888987][T11808] Dev loop5: unable to read RDB block 7 [ 418.898905][T11808] loop5: unable to read partition table [ 418.912518][T11808] loop5: partition table beyond EOD, truncated [ 418.930643][T11808] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 418.962308][ T126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 418.981731][ T126] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 419.032584][ T126] usb 2-1: can't read configurations, error -71 [ 419.579953][T11833] tipc: Enabled bearer , priority 0 [ 419.638512][T11832] tipc: Disabling bearer [ 420.090775][T11845] netlink: 'syz.2.2497': attribute type 13 has an invalid length. [ 420.129464][T11845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2497'. [ 420.521135][T11853] device syzkaller0 entered promiscuous mode [ 420.555692][T11853] tipc: Enabled bearer , priority 0 [ 420.595946][T11853] tipc: Resetting bearer [ 420.618210][T11852] tipc: Resetting bearer [ 420.683594][T11852] tipc: Disabling bearer [ 420.832444][ T4319] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 420.934680][T11865] tipc: Enabled bearer , priority 0 [ 420.944211][T11864] tipc: Disabling bearer [ 420.967876][T11867] netlink: 'syz.1.2506': attribute type 10 has an invalid length. [ 420.972649][ T14] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 420.994170][T11867] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.003601][T11867] device bridge_slave_1 left promiscuous mode [ 421.009996][T11867] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.030682][T11867] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 421.042494][ T4319] usb 5-1: Using ep0 maxpacket: 8 [ 421.049490][ T4319] usb 5-1: config index 0 descriptor too short (expected 8192, got 27) [ 421.068737][ T4319] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.095620][ T4319] usb 5-1: config 0 has no interfaces? [ 421.105210][ T4319] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 421.114717][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.124847][ T4319] usb 5-1: config 0 descriptor?? [ 421.167227][T11859] loop5: detected capacity change from 0 to 7 [ 421.190715][ T4265] Dev loop5: unable to read RDB block 7 [ 421.197905][ T4265] loop5: unable to read partition table [ 421.210486][ T4265] loop5: partition table beyond EOD, truncated [ 421.224258][T11859] Dev loop5: unable to read RDB block 7 [ 421.237229][T11859] loop5: unable to read partition table [ 421.264929][T11859] loop5: partition table beyond EOD, truncated [ 421.280520][T11859] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 421.305824][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 421.318043][ T14] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 421.337538][ T14] usb 4-1: can't read configurations, error -71 [ 421.351716][ T4319] usb 5-1: USB disconnect, device number 27 [ 421.986893][T11887] device syzkaller0 entered promiscuous mode [ 422.016339][T11887] tipc: Enabled bearer , priority 0 [ 422.047205][T11887] tipc: Resetting bearer [ 422.327320][T11886] tipc: Resetting bearer [ 422.372308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 422.407444][T11886] tipc: Disabling bearer [ 422.510849][T11892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2515'. [ 422.726137][T11898] tipc: Enabled bearer , priority 0 [ 422.769031][T11897] tipc: Disabling bearer [ 423.642393][ T4260] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 423.751180][T11924] device syzkaller0 entered promiscuous mode [ 423.771061][T11924] tipc: Enabled bearer , priority 0 [ 423.782687][ T14] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 423.790153][T11924] tipc: Resetting bearer [ 423.797635][T11923] tipc: Resetting bearer [ 423.851539][T11914] loop5: detected capacity change from 0 to 7 [ 423.873238][T11914] Dev loop5: unable to read RDB block 7 [ 423.879211][T11914] loop5: unable to read partition table [ 423.885863][T11923] tipc: Disabling bearer [ 423.891894][T11914] loop5: partition table beyond EOD, truncated [ 423.901478][T11914] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 423.941436][ T4260] usb 3-1: unable to get BOS descriptor or descriptor too short [ 423.963899][ T4260] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 423.972463][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 423.985501][ T14] usb 2-1: config index 0 descriptor too short (expected 8192, got 27) [ 424.012348][ T4260] usb 3-1: can't read configurations, error -71 [ 424.018733][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.039666][ T14] usb 2-1: config 0 has no interfaces? [ 424.059563][ T14] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 424.069667][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.092436][ T14] usb 2-1: config 0 descriptor?? [ 424.099132][T11929] tipc: Enabled bearer , priority 0 [ 424.128172][T11928] tipc: Disabling bearer [ 424.327639][ T4321] usb 2-1: USB disconnect, device number 30 [ 426.286096][T11947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2536'. [ 426.520529][T11957] device syzkaller0 entered promiscuous mode [ 426.556837][T11957] tipc: Enabled bearer , priority 0 [ 426.620335][T11964] tipc: Resetting bearer [ 426.640453][T11956] tipc: Resetting bearer [ 426.727134][T11956] tipc: Disabling bearer [ 426.782061][T11966] tipc: Enabled bearer , priority 0 [ 426.987968][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2550'. [ 426.997458][ T14] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 427.026079][T11965] tipc: Disabling bearer [ 427.187587][T11968] loop5: detected capacity change from 0 to 7 [ 427.199885][ T4265] Dev loop5: unable to read RDB block 7 [ 427.207166][ T4265] loop5: unable to read partition table [ 427.219767][ T4265] loop5: partition table beyond EOD, truncated [ 427.239195][T11968] Dev loop5: unable to read RDB block 7 [ 427.246633][T11968] loop5: unable to read partition table [ 427.260511][T11968] loop5: partition table beyond EOD, truncated [ 427.281669][T11968] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 427.326456][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 427.358641][ T14] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 427.408184][ T14] usb 2-1: can't read configurations, error -71 [ 430.041457][T12011] device syzkaller0 entered promiscuous mode [ 430.056469][T12021] tipc: Enabled bearer , priority 0 [ 430.068076][T12023] tipc: Resetting bearer [ 430.074912][T12006] tipc: Resetting bearer [ 430.094460][T12006] tipc: Disabling bearer [ 430.101753][T12035] netlink: 'syz.3.2565': attribute type 10 has an invalid length. [ 430.110581][T12042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2568'. [ 430.594596][ T953] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 430.795843][T12045] loop5: detected capacity change from 0 to 7 [ 430.810474][ T4265] Dev loop5: unable to read RDB block 7 [ 430.817829][ T4265] loop5: unable to read partition table [ 430.837780][T12065] netlink: 'syz.2.2577': attribute type 37 has an invalid length. [ 430.850434][ T4265] loop5: partition table beyond EOD, truncated [ 430.880007][T12045] Dev loop5: unable to read RDB block 7 [ 430.897419][T12045] loop5: unable to read partition table [ 430.903512][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2577'. [ 430.914014][T12045] loop5: partition table beyond EOD, truncated [ 430.938889][T12045] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 431.023066][ T953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 431.050955][ T953] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 431.092140][ T953] usb 5-1: can't read configurations, error -71 [ 434.791741][T12089] tipc: Enabling of bearer rejected, failed to enable media [ 434.812847][T12111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2587'. [ 435.587610][T12140] tipc: Enabled bearer , priority 0 [ 437.613574][T12138] tipc: Disabling bearer [ 437.620767][T12149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2601'. [ 437.632405][ T4319] tipc: Node number set to 197435112 [ 438.307862][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2619'. [ 439.854524][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.860891][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.438009][T12210] tipc: Enabling of bearer rejected, failed to enable media [ 441.469660][T12237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2635'. [ 441.903542][ T4319] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 441.937893][T12260] tipc: Enabled bearer , priority 0 [ 441.946517][T12260] tipc: Resetting bearer [ 442.019990][T12258] tipc: Disabling bearer [ 442.100236][T12242] loop5: detected capacity change from 0 to 7 [ 442.140666][T12242] Dev loop5: unable to read RDB block 7 [ 442.199217][T12242] loop5: unable to read partition table [ 442.236643][T12242] loop5: partition table beyond EOD, truncated [ 442.252884][T12242] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 442.334603][ T4319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 442.351186][ T4319] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 442.402138][ T4319] usb 2-1: can't read configurations, error -71 [ 442.634120][T12281] tipc: Enabling of bearer rejected, failed to enable media [ 443.290036][T12294] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2655'. [ 443.374352][T12300] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2655'. [ 443.396193][T12302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2656'. [ 443.472650][T12298] tipc: Enabled bearer , priority 0 [ 443.524103][T12298] tipc: Resetting bearer [ 443.586089][T12297] tipc: Disabling bearer [ 444.042351][ T4260] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 444.212446][ T4319] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 444.226788][T12332] tipc: Enabling of bearer rejected, failed to enable media [ 444.235835][T12312] loop5: detected capacity change from 0 to 7 [ 444.243912][ T4265] Dev loop5: unable to read RDB block 7 [ 444.249542][ T4265] loop5: unable to read partition table [ 444.293035][ T4265] loop5: partition table beyond EOD, truncated [ 444.318788][T12312] Dev loop5: unable to read RDB block 7 [ 444.348241][T12312] loop5: unable to read partition table [ 444.368672][T12312] loop5: partition table beyond EOD, truncated [ 444.392429][T12312] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 444.442363][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 444.454972][ T4260] usb 5-1: unable to get BOS descriptor or descriptor too short [ 444.454976][ T4319] usb 3-1: config index 0 descriptor too short (expected 8192, got 27) [ 444.454998][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.490800][ T4260] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 444.520780][ T4260] usb 5-1: can't read configurations, error -71 [ 444.546367][ T4319] usb 3-1: config 0 has no interfaces? [ 444.566724][ T4319] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 444.582375][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.608539][ T4319] usb 3-1: config 0 descriptor?? [ 444.835254][T12348] tipc: Enabled bearer , priority 0 [ 444.844623][T12348] tipc: Resetting bearer [ 444.860253][T12347] tipc: Disabling bearer [ 444.868480][ T4319] usb 3-1: USB disconnect, device number 33 [ 445.165911][T12361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2678'. [ 445.368896][T12373] tipc: Enabling of bearer rejected, failed to enable media [ 445.744188][T12383] tipc: Enabled bearer , priority 0 [ 445.754041][T12383] tipc: Resetting bearer [ 445.783413][T12382] tipc: Disabling bearer [ 446.246788][ T953] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 446.438486][T12388] loop5: detected capacity change from 0 to 7 [ 446.451283][T12388] Dev loop5: unable to read RDB block 7 [ 446.477379][T12388] loop5: unable to read partition table [ 446.508997][T12388] loop5: partition table beyond EOD, truncated [ 446.538504][T12388] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 446.582023][ T953] usb 3-1: unable to get BOS descriptor or descriptor too short [ 446.611692][ T953] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 446.642166][ T953] usb 3-1: can't read configurations, error -71 [ 446.739222][T12415] tipc: Enabling of bearer rejected, failed to enable media [ 446.862498][ T126] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 446.953586][T12422] tipc: Enabled bearer , priority 0 [ 446.974864][T12422] tipc: Resetting bearer [ 447.013151][T12420] tipc: Disabling bearer [ 447.072418][ T126] usb 1-1: Using ep0 maxpacket: 8 [ 447.080726][ T126] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 447.098869][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.099064][T12427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2699'. [ 447.118615][ T126] usb 1-1: config 0 has no interfaces? [ 447.150315][ T126] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 447.185894][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.225563][ T126] usb 1-1: config 0 descriptor?? [ 447.282009][T12434] netlink: 'syz.2.2703': attribute type 3 has an invalid length. [ 447.296822][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2703'. [ 447.353348][T12434] ip_vti0 speed is unknown, defaulting to 1000 [ 447.376429][T12434] ip_vti0 speed is unknown, defaulting to 1000 [ 447.391140][T12434] ip_vti0 speed is unknown, defaulting to 1000 [ 447.393474][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2705'. [ 447.481770][ T126] usb 1-1: USB disconnect, device number 42 [ 447.639324][T12434] infiniband syz1: set active [ 447.646627][ T4319] ip_vti0 speed is unknown, defaulting to 1000 [ 447.654050][T12434] infiniband syz1: added ip_vti0 [ 447.725974][T12434] RDS/IB: syz1: added [ 447.730603][T12434] smc: adding ib device syz1 with port count 1 [ 447.747639][T12434] smc: ib device syz1 port 1 has pnetid [ 447.769739][ T953] ip_vti0 speed is unknown, defaulting to 1000 [ 447.794436][T12434] ip_vti0 speed is unknown, defaulting to 1000 [ 447.921194][T12458] tipc: Enabling of bearer rejected, failed to enable media [ 448.100726][T12460] tipc: Enabled bearer , priority 0 [ 448.120841][T12460] tipc: Resetting bearer [ 448.163460][T12459] tipc: Disabling bearer [ 448.211418][T12434] ip_vti0 speed is unknown, defaulting to 1000 [ 448.443344][T12434] ip_vti0 speed is unknown, defaulting to 1000 [ 448.708473][T12479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2719'. [ 448.736828][T12434] ip_vti0 speed is unknown, defaulting to 1000 [ 448.823724][T12484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2721'. [ 448.920545][T12434] ip_vti0 speed is unknown, defaulting to 1000 [ 449.263172][T12503] tipc: Enabling of bearer rejected, failed to enable media [ 450.455823][T12542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2743'. [ 450.720189][T12559] tipc: Enabling of bearer rejected, failed to enable media [ 450.771610][T12561] tipc: Enabling of bearer rejected, failed to enable media [ 450.857339][T12563] device syzkaller0 entered promiscuous mode [ 451.617175][T12585] netlink: 'syz.3.2753': attribute type 2 has an invalid length. [ 451.641727][T12585] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2753'. [ 451.873548][T12596] device syzkaller0 entered promiscuous mode [ 451.920988][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2760'. [ 452.085006][T12613] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2763'. [ 452.115346][T12614] tipc: Enabling of bearer rejected, failed to enable media [ 452.551055][T12629] tipc: Enabling of bearer rejected, failed to enable media [ 453.084518][T12652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2775'. [ 453.111671][T12650] device syzkaller0 entered promiscuous mode [ 453.402938][T12669] tipc: Enabling of bearer rejected, failed to enable media [ 453.553371][T12674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2781'. [ 453.865309][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2787'. [ 453.956975][T12693] tipc: Enabling of bearer rejected, failed to enable media [ 454.389329][T12708] device syzkaller0 entered promiscuous mode [ 454.846951][T12726] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2799'. [ 454.852348][ T4321] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 454.872449][T12726] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2799'. [ 454.922752][T12726] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2799'. [ 454.960167][T12726] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2799'. [ 455.022108][T12734] tipc: Enabling of bearer rejected, failed to enable media [ 455.062309][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 455.069248][ T4321] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 455.087300][ T4321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.121192][ T4321] usb 1-1: config 0 has no interfaces? [ 455.132396][ T4321] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 455.187420][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.236411][ T4321] usb 1-1: config 0 descriptor?? [ 455.437408][T12747] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 455.446340][T12747] syzkaller1: linktype set to 804 [ 455.473563][ T953] usb 1-1: USB disconnect, device number 43 [ 455.478117][T12750] device syzkaller0 entered promiscuous mode [ 458.813027][T12837] tipc: Enabling of bearer rejected, failed to enable media [ 458.824281][T12844] netlink: 'syz.3.2820': attribute type 21 has an invalid length. [ 458.842349][T12844] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.872618][T12859] device syzkaller0 entered promiscuous mode [ 459.432513][ T953] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 459.560590][T12902] tipc: Enabling of bearer rejected, failed to enable media [ 459.622499][ T953] usb 2-1: Using ep0 maxpacket: 8 [ 459.630141][ T953] usb 2-1: config index 0 descriptor too short (expected 8192, got 27) [ 459.662441][ T953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.723640][ T953] usb 2-1: config 0 has no interfaces? [ 459.729179][ T953] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 459.759491][ T953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.798571][ T953] usb 2-1: config 0 descriptor?? [ 460.012425][ T953] usb 2-1: USB disconnect, device number 35 [ 460.157753][T12917] netlink: 'syz.0.2842': attribute type 27 has an invalid length. [ 460.181946][T12917] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2842'. [ 460.553337][T12935] tipc: Enabled bearer , priority 0 [ 460.653862][T12934] tipc: Disabling bearer [ 460.703751][T12945] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2854'. [ 461.576708][T12981] tipc: Enabled bearer , priority 0 [ 461.607192][T12980] tipc: Disabling bearer [ 461.619363][ T4319] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 461.806878][ T4319] usb 5-1: Using ep0 maxpacket: 8 [ 461.829165][ T4319] usb 5-1: config index 0 descriptor too short (expected 8192, got 27) [ 461.843267][ T4319] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.882361][ T4319] usb 5-1: config 0 has no interfaces? [ 461.890652][ T4319] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 461.920317][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.944091][ T4319] usb 5-1: config 0 descriptor?? [ 462.017131][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2878'. [ 462.166556][ T126] usb 5-1: USB disconnect, device number 32 [ 462.533237][T13015] tipc: Enabled bearer , priority 0 [ 462.560478][T13014] tipc: Disabling bearer [ 462.866683][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2895'. [ 463.601299][T13049] device syzkaller0 entered promiscuous mode [ 463.634648][T13049] tipc: Enabled bearer , priority 0 [ 463.690665][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 463.700293][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 463.711794][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 463.719834][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.744816][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 463.752548][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.791845][T13048] tipc: Resetting bearer [ 463.957636][T13048] tipc: Disabling bearer [ 464.040020][T13052] ip_vti0 speed is unknown, defaulting to 1000 [ 464.262693][ T4260] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 464.349970][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2909'. [ 464.472875][T13071] device syzkaller0 entered promiscuous mode [ 464.482425][ T4260] usb 5-1: Using ep0 maxpacket: 8 [ 464.489111][ T4260] usb 5-1: config index 0 descriptor too short (expected 8192, got 27) [ 464.500535][ T4260] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.502535][ T4319] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 464.510876][ T4260] usb 5-1: config 0 has no interfaces? [ 464.528674][ T4260] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 464.538259][ T4260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.561781][ T4260] usb 5-1: config 0 descriptor?? [ 464.660330][T13052] chnl_net:caif_netlink_parms(): no params data found [ 464.706151][T13065] loop5: detected capacity change from 0 to 7 [ 464.725518][T13065] Dev loop5: unable to read RDB block 7 [ 464.731174][T13065] loop5: unable to read partition table [ 464.737728][T13065] loop5: partition table beyond EOD, truncated [ 464.744360][T13065] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 464.756704][ T4319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 464.775471][ T4319] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 464.788910][ T4319] usb 4-1: can't read configurations, error -71 [ 464.835203][ T4260] usb 5-1: USB disconnect, device number 33 [ 464.931841][T13052] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.941475][T13052] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.966960][T13052] device bridge_slave_0 entered promiscuous mode [ 464.996153][T13052] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.012817][T13052] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.021147][T13052] device bridge_slave_1 entered promiscuous mode [ 465.047697][T13052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.069860][T13052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.119810][T13052] team0: Port device team_slave_0 added [ 465.137054][T13052] team0: Port device team_slave_1 added [ 465.172046][T13052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.189370][T13052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.257989][T13052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.302170][T13052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.316598][T13052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.358415][T13052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.390551][T13090] device syzkaller0 entered promiscuous mode [ 465.429058][T13090] tipc: Enabled bearer , priority 0 [ 465.445222][T13052] device hsr_slave_0 entered promiscuous mode [ 465.459374][T13052] device hsr_slave_1 entered promiscuous mode [ 465.503117][T13052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.521923][T13052] Cannot create hsr debugfs directory [ 465.547363][T13089] tipc: Resetting bearer [ 465.619512][T13089] tipc: Disabling bearer [ 465.814175][T13102] device syzkaller0 entered promiscuous mode [ 465.862479][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 466.130794][T13052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.235860][T13052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.312452][ T4319] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 466.370924][T13052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.411763][T13124] device syzkaller0 entered promiscuous mode [ 466.430365][T13124] tipc: Enabled bearer , priority 0 [ 466.511740][T13052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.522966][ T4321] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 466.540446][T13112] loop5: detected capacity change from 0 to 7 [ 466.550614][ T4265] Dev loop5: unable to read RDB block 7 [ 466.562663][ T4265] loop5: unable to read partition table [ 466.568622][T13123] tipc: Resetting bearer [ 466.575088][ T4265] loop5: partition table beyond EOD, truncated [ 466.590169][T13112] Dev loop5: unable to read RDB block 7 [ 466.603560][T13112] loop5: unable to read partition table [ 466.622998][T13112] loop5: partition table beyond EOD, truncated [ 466.644118][T13123] tipc: Disabling bearer [ 466.650028][T13112] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 466.687787][ T4319] usb 3-1: unable to get BOS descriptor or descriptor too short [ 466.711186][ T4319] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 466.725348][ T4319] usb 3-1: can't read configurations, error -71 [ 466.736198][ T4321] usb 4-1: Using ep0 maxpacket: 8 [ 466.743812][ T4321] usb 4-1: config index 0 descriptor too short (expected 8192, got 27) [ 466.782705][ T4321] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.798492][ T4321] usb 4-1: config 0 has no interfaces? [ 466.815075][ T4321] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 466.824829][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.838353][ T4321] usb 4-1: config 0 descriptor?? [ 466.870130][T13052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 466.922956][T13052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 466.975987][T13052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 466.992619][T13052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 467.125883][T13052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.178767][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.253251][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.267727][T13052] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.314994][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.343239][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.366475][T12831] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.373642][T12831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.413190][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.432663][T13139] device syzkaller0 entered promiscuous mode [ 467.441089][ T26] usb 4-1: USB disconnect, device number 35 [ 467.478686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.503927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.522724][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.529885][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.539916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.561858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.617847][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.645888][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.663112][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.707897][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.721740][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 467.753192][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 467.772967][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 467.788316][T13052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.832772][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 467.848729][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 467.858775][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.900373][T13151] device syzkaller0 entered promiscuous mode [ 467.936847][T13151] tipc: Enabled bearer , priority 0 [ 467.942576][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 467.960207][T13150] tipc: Resetting bearer [ 468.043780][T13150] tipc: Disabling bearer [ 468.434738][T13170] device syzkaller0 entered promiscuous mode [ 468.525501][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.544447][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 468.556751][T13052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.622729][T12572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 468.632133][T12572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 468.646573][ T4319] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 468.702168][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 468.720686][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 468.740339][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 468.786259][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 468.809495][T13052] device veth0_vlan entered promiscuous mode [ 468.839077][T13052] device veth1_vlan entered promiscuous mode [ 468.861475][T13166] loop5: detected capacity change from 0 to 7 [ 468.901945][T13166] Dev loop5: unable to read RDB block 7 [ 468.912095][T13166] loop5: unable to read partition table [ 468.932601][T13166] loop5: partition table beyond EOD, truncated [ 468.935659][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 468.946981][T13166] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 468.960931][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 468.981092][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 469.005302][ T4319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 469.023828][ T4319] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 469.031435][ T4319] usb 2-1: can't read configurations, error -71 [ 469.051963][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 469.064347][T13052] device veth0_macvtap entered promiscuous mode [ 469.079446][T13052] device veth1_macvtap entered promiscuous mode [ 469.102064][T13186] device syzkaller0 entered promiscuous mode [ 469.124763][T13186] tipc: Enabled bearer , priority 0 [ 469.137568][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.148503][ T953] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 469.150036][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.167529][T13190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2960'. [ 469.169236][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.194027][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.226181][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.236838][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.246765][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.257385][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.267797][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.288512][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.305558][T13052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.316792][T13185] tipc: Resetting bearer [ 469.332498][ T953] usb 5-1: Using ep0 maxpacket: 8 [ 469.347426][ T953] usb 5-1: config index 0 descriptor too short (expected 8192, got 27) [ 469.357187][T13185] tipc: Disabling bearer [ 469.362353][ T953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.374966][ T953] usb 5-1: config 0 has no interfaces? [ 469.385066][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 469.399616][ T953] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 469.403219][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 469.409850][ T953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.426828][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 469.445223][ T953] usb 5-1: config 0 descriptor?? [ 469.462550][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 469.485036][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.518058][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.560842][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.581700][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.625093][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.647322][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.659854][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.668207][ T953] usb 5-1: USB disconnect, device number 34 [ 469.686089][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.697695][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.729930][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.741211][T13052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.759182][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 469.771672][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 469.788822][T13052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.798651][T13052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.808027][T13052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.818167][T13052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.832486][T13202] device syzkaller0 entered promiscuous mode [ 470.012426][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 470.038946][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.084996][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.137478][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 470.156697][T12818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.172820][T12818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.180408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 470.862549][ T4321] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 471.091687][T13223] loop5: detected capacity change from 0 to 7 [ 471.114171][ T4265] Dev loop5: unable to read RDB block 7 [ 471.119798][ T4265] loop5: unable to read partition table [ 471.126813][ T4265] loop5: partition table beyond EOD, truncated [ 471.150686][T13223] Dev loop5: unable to read RDB block 7 [ 471.158643][T13223] loop5: unable to read partition table [ 471.173317][T13223] loop5: partition table beyond EOD, truncated [ 471.213085][T13223] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 471.255488][ T4321] usb 1-1: unable to get BOS descriptor or descriptor too short [ 471.274715][ T4321] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 471.290180][ T4321] usb 1-1: can't read configurations, error -71 [ 471.318823][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 471.327194][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 471.335566][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 471.345620][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 471.357984][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 471.366202][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 471.418044][T13239] ip_vti0 speed is unknown, defaulting to 1000 [ 471.602360][ T26] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 471.792393][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 471.824051][ T26] usb 5-1: config index 0 descriptor too short (expected 8192, got 27) [ 471.868213][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.885164][T13239] chnl_net:caif_netlink_parms(): no params data found [ 471.909639][ T26] usb 5-1: config 0 has no interfaces? [ 471.942228][ T26] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 471.952063][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.977915][ T26] usb 5-1: config 0 descriptor?? [ 472.092598][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 472.196928][ T26] usb 5-1: USB disconnect, device number 35 [ 473.363139][ T126] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 473.466373][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 473.549812][T13268] loop5: detected capacity change from 0 to 7 [ 473.558954][ T4265] Dev loop5: unable to read RDB block 7 [ 473.569246][ T4265] loop5: unable to read partition table [ 473.575453][ T4265] loop5: partition table beyond EOD, truncated [ 473.582939][T13268] Dev loop5: unable to read RDB block 7 [ 473.588562][T13268] loop5: unable to read partition table [ 473.599347][T13268] loop5: partition table beyond EOD, truncated [ 473.617455][T13268] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 473.649197][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 473.675478][ T126] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 473.686537][ T126] usb 5-1: can't read configurations, error -71 [ 474.066460][T13239] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.125601][T13239] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.133921][T13239] device bridge_slave_0 entered promiscuous mode [ 474.144252][T13239] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.151630][T13239] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.159911][T13239] device bridge_slave_1 entered promiscuous mode [ 474.286914][T13239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.316858][T13239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.329033][T13288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2999'. [ 474.375578][T13239] team0: Port device team_slave_0 added [ 474.384706][T13239] team0: Port device team_slave_1 added [ 474.430363][T13239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.451081][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.486121][T13239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.515643][T13239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.532427][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.567708][T13239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.657228][T13239] device hsr_slave_0 entered promiscuous mode [ 474.689148][T13239] device hsr_slave_1 entered promiscuous mode [ 474.709360][T13239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.731423][T13239] Cannot create hsr debugfs directory [ 474.892608][ T4319] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 475.102460][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 475.117553][ T4319] usb 3-1: config index 0 descriptor too short (expected 8192, got 27) [ 475.127238][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.138967][ T4319] usb 3-1: config 0 has no interfaces? [ 475.144794][ T4319] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 475.154632][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.170760][T13306] netlink: 'syz.1.3008': attribute type 2 has an invalid length. [ 475.187233][ T4319] usb 3-1: config 0 descriptor?? [ 475.196907][T13306] netlink: 'syz.1.3008': attribute type 1 has an invalid length. [ 475.408482][ T4260] usb 3-1: USB disconnect, device number 38 [ 475.534233][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 475.693774][T13060] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 475.846286][T13314] ======================================================= [ 475.846286][T13314] WARNING: The mand mount option has been deprecated and [ 475.846286][T13314] and is ignored by this kernel. Remove the mand [ 475.846286][T13314] option from the mount to silence this warning. [ 475.846286][T13314] ======================================================= [ 475.894290][T13310] loop5: detected capacity change from 0 to 7 [ 475.940914][T13310] Dev loop5: unable to read RDB block 7 [ 475.949190][T13310] loop5: unable to read partition table [ 475.982626][T13310] loop5: partition table beyond EOD, truncated [ 476.018188][T13310] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 476.094951][T13060] usb 2-1: unable to get BOS descriptor or descriptor too short [ 476.120452][T13060] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 476.140333][T13060] usb 2-1: can't read configurations, error -71 [ 477.013069][T13323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3017'. [ 477.190720][T13239] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.201878][T13239] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.322851][T12818] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.345970][T12818] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.437559][T13239] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.448124][T13239] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.484906][T12818] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.508928][T12818] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.584643][T13239] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.605719][T13239] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.622321][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 477.678106][T12818] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.688625][T12818] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.734719][T13239] bond0: (slave netdevsim0): Releasing backup interface [ 477.747287][T13239] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.757823][T13239] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.817134][T12818] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.850630][T12818] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.043291][T13346] loop5: detected capacity change from 0 to 7 [ 478.053571][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.061695][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.069524][T13346] loop5: [ 478.073372][T13346] loop5: partition table partially beyond EOD, truncated [ 478.090492][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.103426][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 478.114653][T13239] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 478.121419][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 478.129737][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.182738][ T4316] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 478.227674][T13239] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 478.270426][T13347] ip_vti0 speed is unknown, defaulting to 1000 [ 478.297142][T13239] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 478.320598][T12818] tipc: Left network mode [ 478.325933][T13239] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 478.392408][ T4316] usb 3-1: Using ep0 maxpacket: 8 [ 478.399239][ T4316] usb 3-1: config index 0 descriptor too short (expected 8192, got 27) [ 478.418012][ T4316] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.452379][ T4316] usb 3-1: config 0 has no interfaces? [ 478.457959][ T4316] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 478.477383][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.494838][ T4316] usb 3-1: config 0 descriptor?? [ 478.735238][ T14] usb 3-1: USB disconnect, device number 39 [ 479.695424][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 480.175201][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 480.789233][T13383] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3034'. [ 480.816844][T13239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.584554][T13239] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.607948][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 481.631822][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 481.747801][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 481.770606][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 481.812894][T12831] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.820030][T12831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.880262][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 481.908733][T13347] chnl_net:caif_netlink_parms(): no params data found [ 482.091256][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 482.133604][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.156486][T12812] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.163659][T12812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.262433][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 482.316978][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 482.326058][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 482.335083][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 482.345807][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.355317][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 482.368673][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 482.372460][T13060] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 482.377703][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 482.569464][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 482.600227][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.612430][T13060] usb 1-1: Using ep0 maxpacket: 8 [ 482.620932][T13060] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 482.636374][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 482.646302][T13419] netlink: 'syz.2.3043': attribute type 16 has an invalid length. [ 482.647627][T13060] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.673069][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.680215][T13419] netlink: 'syz.2.3043': attribute type 1 has an invalid length. [ 482.701281][T13060] usb 1-1: config 0 has no interfaces? [ 482.710588][T13419] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3043'. [ 482.712037][T13060] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 482.728931][T13060] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.745380][T13060] usb 1-1: config 0 descriptor?? [ 482.938550][T13239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 483.062800][ T4260] usb 1-1: USB disconnect, device number 46 [ 483.220529][T13347] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.231224][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.263476][T13347] device bridge_slave_0 entered promiscuous mode [ 483.281734][T13433] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3047'. [ 483.304651][T13347] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.335189][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.353521][T13347] device bridge_slave_1 entered promiscuous mode [ 483.500455][T13347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.540381][T13347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.586985][T13442] fuse: Unknown parameter 'grou00000000000000000000' [ 483.609393][T12818] device hsr_slave_0 left promiscuous mode [ 483.618660][T12818] device hsr_slave_1 left promiscuous mode [ 483.632184][T12818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.648818][T12818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.671519][T12818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.679652][T12818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.687862][T12818] device bridge_slave_1 left promiscuous mode [ 483.696915][T12818] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.707196][T12818] device bridge_slave_0 left promiscuous mode [ 483.713894][T12818] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.777421][T12818] device veth1_macvtap left promiscuous mode [ 483.790319][T12818] device veth0_macvtap left promiscuous mode [ 483.799696][T12818] device veth1_vlan left promiscuous mode [ 483.815240][T12818] device veth0_vlan left promiscuous mode [ 484.114796][T13454] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3050'. [ 484.133384][T13454] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3050'. [ 484.347677][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 485.357893][T12818] team0 (unregistering): Port device team_slave_1 removed [ 485.394112][T12818] team0 (unregistering): Port device team_slave_0 removed [ 485.438882][T12818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.477958][T12818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.725287][T12818] bond0 (unregistering): Released all slaves [ 485.828142][T13239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.842221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 485.850230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.886532][T13347] team0: Port device team_slave_0 added [ 485.941671][T13347] team0: Port device team_slave_1 added [ 486.003162][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 486.013094][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 486.083462][T13347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.090446][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.135072][T13347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.149888][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 486.171722][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 486.212363][T13347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.219770][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.290891][T13347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.303905][T13239] device veth0_vlan entered promiscuous mode [ 486.312336][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 486.328820][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 486.339249][T13473] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3058'. [ 486.363139][T13478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3060'. [ 486.412757][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 486.461851][T13239] device veth1_vlan entered promiscuous mode [ 486.510993][T13347] device hsr_slave_0 entered promiscuous mode [ 486.523115][T13347] device hsr_slave_1 entered promiscuous mode [ 486.539444][T13347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.549561][T13347] Cannot create hsr debugfs directory [ 486.687626][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 486.710289][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 486.749244][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 486.772081][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 486.785846][T13239] device veth0_macvtap entered promiscuous mode [ 486.872473][T13060] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 487.062375][T13060] usb 2-1: Using ep0 maxpacket: 8 [ 487.083155][T13060] usb 2-1: config 0 has no interfaces? [ 487.088671][T13060] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 487.105808][T13060] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.138177][T13060] usb 2-1: config 0 descriptor?? [ 487.352214][T13060] usb 2-1: USB disconnect, device number 40 [ 487.362932][T13500] fuse: Unknown parameter 'grou00000000000000000000' [ 488.995551][T13239] device veth1_macvtap entered promiscuous mode [ 489.013787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 489.022867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 489.082544][T13523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3071'. [ 489.101071][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.124718][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.141992][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.162082][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.179265][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.202523][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.219469][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.232122][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.250876][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.270504][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.289972][T13239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.297491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 489.318378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 489.358723][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.375693][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.402305][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.422295][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.432124][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.453497][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.465212][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.476332][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.486704][T13239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.498063][T13239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.509965][T13239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.518898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.536227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.554584][T13239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.565655][T13239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.575909][T13239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.585040][T13239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.658337][ T4321] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 489.854705][T12818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.862652][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 489.862765][T12818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.892799][ T4321] usb 1-1: config 0 has no interfaces? [ 489.893040][T13540] fuse: Unknown parameter 'grou00000000000000000000' [ 489.906791][ T4321] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 489.925652][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.957275][ T4321] usb 1-1: config 0 descriptor?? [ 490.001003][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 490.124395][T12831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.142340][T12831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.153389][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 490.189002][ T4321] usb 1-1: USB disconnect, device number 47 [ 490.355215][T13549] device syzkaller0 entered promiscuous mode [ 490.388966][T13549] tipc: Started in network mode [ 490.398286][T13549] tipc: Node identity 660f03c93a4f, cluster identity 4711 [ 490.410648][T13549] tipc: Enabled bearer , priority 0 [ 490.421271][T13548] tipc: Resetting bearer [ 490.474642][T13548] tipc: Disabling bearer [ 490.633688][T13347] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 490.664081][T13347] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 490.691399][T13347] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 490.744463][T13347] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 490.927055][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3080'. [ 491.033743][T13347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.079445][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.107075][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.156330][T13347] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.208301][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.232838][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.253891][T12831] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.261035][T12831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.283879][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 491.293563][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.303879][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.316290][T12831] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.323462][T12831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.340131][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 491.399178][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 491.433562][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 491.456256][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 491.489213][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 491.501212][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 491.529256][T13347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 491.570354][T13347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.736499][T13583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3083'. [ 492.187219][T13060] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 492.386992][T13060] usb 2-1: Using ep0 maxpacket: 8 [ 492.410384][T13060] usb 2-1: config 0 has no interfaces? [ 492.424535][T13060] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 492.439991][T13060] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.466107][T13060] usb 2-1: config 0 descriptor?? [ 492.675672][T13060] usb 2-1: USB disconnect, device number 41 [ 493.652441][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 493.660618][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 493.669173][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 493.677791][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 493.686580][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 493.700754][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 493.709297][T13597] device syzkaller0 entered promiscuous mode [ 493.722620][T13604] tipc: Enabled bearer , priority 0 [ 493.771445][T13607] tipc: Resetting bearer [ 493.793358][T13591] tipc: Resetting bearer [ 493.872138][T13591] tipc: Disabling bearer [ 494.617644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 494.662546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 494.689698][T13347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.732995][T13658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3099'. [ 496.884294][T13688] tipc: Enabling of bearer rejected, failed to enable media [ 497.479831][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 497.503474][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 497.553877][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 497.567947][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 497.583929][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 497.591971][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 497.610711][T13347] device veth0_vlan entered promiscuous mode [ 497.618642][ T4277] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 497.648858][T13347] device veth1_vlan entered promiscuous mode [ 497.691605][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 497.701038][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 497.709962][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 497.719478][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 497.738963][T13347] device veth0_macvtap entered promiscuous mode [ 497.750686][T13347] device veth1_macvtap entered promiscuous mode [ 497.770374][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.785385][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.795597][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.806746][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.832339][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.843037][ T4277] usb 3-1: Using ep0 maxpacket: 8 [ 497.854105][ T4277] usb 3-1: config index 0 descriptor too short (expected 8192, got 27) [ 497.872341][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.882183][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.893669][ T4277] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.912451][ T4277] usb 3-1: config 0 has no interfaces? [ 497.917953][ T4277] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 497.922295][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.937531][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.948146][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.949316][ T4277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.958407][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.980643][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.982077][ T4277] usb 3-1: config 0 descriptor?? [ 497.997857][T13347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.014508][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 498.030495][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 498.047667][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.061904][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.080425][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.101966][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.115279][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.125795][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.140125][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.151510][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.163121][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.173814][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.183795][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.194391][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.204364][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.231554][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.249118][ T4321] usb 3-1: USB disconnect, device number 40 [ 498.270082][T13347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.281789][T13347] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.290609][T13347] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.301042][T13347] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.310965][T13347] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.329862][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 498.343877][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.439648][T12829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.452563][T12829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.461226][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 498.491139][ T4642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.501112][ T4642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.517177][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 499.472380][ T4319] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 499.672321][ T4319] usb 1-1: Using ep0 maxpacket: 8 [ 499.679021][ T4319] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 499.732344][ T4319] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.770582][ T4319] usb 1-1: config 0 has no interfaces? [ 499.787030][ T4319] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 499.812327][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.842185][ T4319] usb 1-1: config 0 descriptor?? [ 499.900197][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 499.910865][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 499.920755][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 499.929477][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.939272][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 499.946828][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.017787][ T4642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.066844][ T4321] usb 1-1: USB disconnect, device number 48 [ 500.101259][ T4642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.159334][T13775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3117'. [ 500.192018][T13776] ip_vti0 speed is unknown, defaulting to 1000 [ 500.270778][ T4642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.304876][ T4642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.490338][ T4642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.512761][ T4642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.306254][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.312792][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.482384][ T4316] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 501.682737][ T4316] usb 5-1: Using ep0 maxpacket: 8 [ 501.689654][ T4316] usb 5-1: config index 0 descriptor too short (expected 8192, got 27) [ 501.698737][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.732755][ T4316] usb 5-1: config 0 has no interfaces? [ 501.738271][ T4316] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 501.747711][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.763807][ T4316] usb 5-1: config 0 descriptor?? [ 502.000202][ T4260] usb 5-1: USB disconnect, device number 38 [ 502.013951][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 503.189842][ T4642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.200442][ T4642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.233042][T13794] tipc: Enabling of bearer rejected, failed to enable media [ 503.250296][T13827] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3132'. [ 503.560566][ T4642] tipc: Left network mode [ 503.578631][T13837] device syzkaller0 entered promiscuous mode [ 503.798815][T13776] chnl_net:caif_netlink_parms(): no params data found [ 503.820563][T13848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3137'. [ 503.942647][ T126] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 503.952195][T13776] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.960082][T13776] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.968544][T13776] device bridge_slave_0 entered promiscuous mode [ 503.977922][T13776] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.002402][T13776] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.017740][T13776] device bridge_slave_1 entered promiscuous mode [ 504.092628][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 504.132333][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 504.141971][ T126] usb 2-1: config index 0 descriptor too short (expected 8192, got 27) [ 504.184794][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.214981][ T126] usb 2-1: config 0 has no interfaces? [ 504.230737][ T126] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 504.264109][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.309160][ T126] usb 2-1: config 0 descriptor?? [ 504.370938][T13776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.533271][ T4260] usb 2-1: USB disconnect, device number 42 [ 504.553550][T13776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.668152][T13885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3146'. [ 505.188959][T13902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3148'. [ 505.675329][ T4260] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 505.836291][ T4260] usb 2-1: device descriptor read/64, error -71 [ 506.112456][ T4260] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 506.172941][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 506.282475][ T4260] usb 2-1: device descriptor read/64, error -71 [ 506.405743][ T4260] usb usb2-port1: attempt power cycle [ 506.812485][ T4260] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 506.851889][ T4642] infiniband syz1: set down [ 506.857486][ T4260] usb 2-1: device descriptor read/8, error -71 [ 506.877221][ T9] smc: removing ib device syz1 [ 506.889275][T13876] device syzkaller0 entered promiscuous mode [ 506.899665][T13879] tipc: Started in network mode [ 506.905988][T13879] tipc: Node identity fe33ec6da67a, cluster identity 4711 [ 506.915690][T13879] tipc: Enabled bearer , priority 0 [ 506.932597][T13880] tipc: Resetting bearer [ 506.948997][T13875] tipc: Resetting bearer [ 507.003474][T13875] tipc: Disabling bearer [ 507.039226][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3153'. [ 507.056147][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3153'. [ 507.069041][T13916] [ 507.071403][T13916] ====================================================== [ 507.078421][T13916] WARNING: possible circular locking dependency detected [ 507.085455][T13916] syzkaller #0 Not tainted [ 507.089901][T13916] ------------------------------------------------------ [ 507.096916][T13916] syz.0.3154/13916 is trying to acquire lock: [ 507.102978][T13916] ffffffff9703a1b8 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x63/0x230 [ 507.113154][T13916] [ 507.113154][T13916] but task is already holding lock: [ 507.120515][T13916] ffff888076816ab8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 507.130853][T13916] [ 507.130853][T13916] which lock already depends on the new lock. [ 507.130853][T13916] [ 507.141262][T13916] [ 507.141262][T13916] the existing dependency chain (in reverse order) is: [ 507.150269][T13916] [ 507.150269][T13916] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 507.158526][T13916] __mutex_lock+0x12d/0xae0 [ 507.163675][T13916] nf_tables_dumpreset_obj+0x6e/0x90 [ 507.169494][T13916] netlink_dump+0x683/0xcd0 [ 507.174670][T13916] __netlink_dump_start+0x52c/0x6f0 [ 507.180395][T13916] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 507.186554][T13916] nf_tables_getobj_reset+0x1cb/0x610 [ 507.192537][T13916] nfnetlink_rcv_msg+0x898/0x1290 [ 507.198193][T13916] netlink_rcv_skb+0x1ef/0x440 [ 507.203491][T13916] nfnetlink_rcv+0x2b0/0x2470 [ 507.208695][T13916] netlink_unicast+0x7ad/0x920 [ 507.213995][T13916] netlink_sendmsg+0x8ad/0xbd0 [ 507.219294][T13916] ____sys_sendmsg+0x5ed/0x9a0 [ 507.224693][T13916] ___sys_sendmsg+0x2a2/0x360 [ 507.229985][T13916] __se_sys_sendmsg+0x1c3/0x2b0 [ 507.235361][T13916] do_syscall_64+0x4c/0xa0 [ 507.240330][T13916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.246752][T13916] [ 507.246752][T13916] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 507.255017][T13916] __mutex_lock+0x12d/0xae0 [ 507.260054][T13916] __netlink_dump_start+0x11e/0x6f0 [ 507.265789][T13916] ip_set_dump+0x152/0x1e0 [ 507.270733][T13916] nfnetlink_rcv_msg+0xcab/0x1290 [ 507.276287][T13916] netlink_rcv_skb+0x1ef/0x440 [ 507.281577][T13916] nfnetlink_rcv+0x2b0/0x2470 [ 507.286781][T13916] netlink_unicast+0x7ad/0x920 [ 507.292070][T13916] netlink_sendmsg+0x8ad/0xbd0 [ 507.297362][T13916] ____sys_sendmsg+0x5ed/0x9a0 [ 507.302658][T13916] ___sys_sendmsg+0x2a2/0x360 [ 507.307867][T13916] __se_sys_sendmsg+0x1c3/0x2b0 [ 507.313247][T13916] do_syscall_64+0x4c/0xa0 [ 507.318223][T13916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.324658][T13916] [ 507.324658][T13916] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 507.332491][T13916] __lock_acquire+0x2d18/0x7c40 [ 507.337872][T13916] lock_acquire+0x1bb/0x4a0 [ 507.342916][T13916] __mutex_lock+0x12d/0xae0 [ 507.347948][T13916] ip_set_nfnl_get_byindex+0x63/0x230 [ 507.353847][T13916] set_target_v1_checkentry+0x88/0x4f0 [ 507.359831][T13916] xt_check_target+0x49d/0xbf0 [ 507.365119][T13916] nft_target_init+0x678/0x9c0 [ 507.370514][T13916] nf_tables_newrule+0x170a/0x2810 [ 507.376154][T13916] nfnetlink_rcv+0x1119/0x2470 [ 507.381446][T13916] netlink_unicast+0x7ad/0x920 [ 507.386738][T13916] netlink_sendmsg+0x8ad/0xbd0 [ 507.392035][T13916] ____sys_sendmsg+0x5ed/0x9a0 [ 507.397327][T13916] ___sys_sendmsg+0x2a2/0x360 [ 507.402532][T13916] __se_sys_sendmsg+0x1c3/0x2b0 [ 507.407914][T13916] do_syscall_64+0x4c/0xa0 [ 507.412858][T13916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.419284][T13916] [ 507.419284][T13916] other info that might help us debug this: [ 507.419284][T13916] [ 507.429506][T13916] Chain exists of: [ 507.429506][T13916] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 507.429506][T13916] [ 507.443906][T13916] Possible unsafe locking scenario: [ 507.443906][T13916] [ 507.451343][T13916] CPU0 CPU1 [ 507.456689][T13916] ---- ---- [ 507.462033][T13916] lock(&nft_net->commit_mutex); [ 507.467048][T13916] lock(nlk_cb_mutex-NETFILTER); [ 507.474592][T13916] lock(&nft_net->commit_mutex); [ 507.482115][T13916] lock(nfnl_subsys_ipset); [ 507.486683][T13916] [ 507.486683][T13916] *** DEADLOCK *** [ 507.486683][T13916] [ 507.494805][T13916] 1 lock held by syz.0.3154/13916: [ 507.499896][T13916] #0: ffff888076816ab8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 507.510578][T13916] [ 507.510578][T13916] stack backtrace: [ 507.516467][T13916] CPU: 0 PID: 13916 Comm: syz.0.3154 Not tainted syzkaller #0 [ 507.523901][T13916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 507.533943][T13916] Call Trace: [ 507.537267][T13916] [ 507.540234][T13916] dump_stack_lvl+0x188/0x24e [ 507.544931][T13916] ? load_image+0x410/0x410 [ 507.549435][T13916] ? show_regs_print_info+0x12/0x12 [ 507.554629][T13916] ? print_circular_bug+0x12b/0x1a0 [ 507.559816][T13916] check_noncircular+0x296/0x330 [ 507.564746][T13916] ? add_chain_block+0x9b0/0x9b0 [ 507.569677][T13916] ? lockdep_lock+0xf1/0x1f0 [ 507.574257][T13916] ? _find_first_zero_bit+0xd2/0x100 [ 507.579534][T13916] __lock_acquire+0x2d18/0x7c40 [ 507.584378][T13916] ? mark_lock+0x94/0x320 [ 507.588693][T13916] ? verify_lock_unused+0x140/0x140 [ 507.593873][T13916] ? __lock_acquire+0x138a/0x7c40 [ 507.598887][T13916] lock_acquire+0x1bb/0x4a0 [ 507.603392][T13916] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 507.608922][T13916] ? __might_sleep+0xd0/0xd0 [ 507.613502][T13916] ? read_lock_is_recursive+0x10/0x10 [ 507.618885][T13916] ? __lock_acquire+0x7c40/0x7c40 [ 507.623893][T13916] __mutex_lock+0x12d/0xae0 [ 507.628380][T13916] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 507.633912][T13916] ? ip_set_pernet+0x23/0x230 [ 507.638574][T13916] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 507.644102][T13916] ? mutex_lock_nested+0x10/0x10 [ 507.649038][T13916] ? ip_set_pernet+0x23/0x230 [ 507.653696][T13916] ip_set_nfnl_get_byindex+0x63/0x230 [ 507.659049][T13916] set_target_v1_checkentry+0x88/0x4f0 [ 507.664499][T13916] ? set_target_v1+0x3e0/0x3e0 [ 507.669261][T13916] xt_check_target+0x49d/0xbf0 [ 507.674003][T13916] ? unwind_get_return_address+0x49/0x80 [ 507.679616][T13916] ? stack_trace_save+0xf0/0xf0 [ 507.684467][T13916] ? xt_find_jump_offset+0xe0/0xe0 [ 507.689573][T13916] ? __stack_depot_save+0x35/0x480 [ 507.694663][T13916] ? nft_target_init+0x1cc/0x9c0 [ 507.699585][T13916] nft_target_init+0x678/0x9c0 [ 507.704332][T13916] ? nft_target_release_ops+0x70/0x70 [ 507.709692][T13916] ? __kmem_cache_alloc_node+0x19d/0x270 [ 507.715490][T13916] ? nf_tables_newrule+0x14d9/0x2810 [ 507.720785][T13916] ? rcu_is_watching+0x11/0xa0 [ 507.725538][T13916] ? nf_tables_newrule+0x14d9/0x2810 [ 507.730800][T13916] ? __kmalloc+0xe4/0x240 [ 507.735118][T13916] nf_tables_newrule+0x170a/0x2810 [ 507.740225][T13916] ? nf_tables_delchain+0xf00/0xf00 [ 507.745403][T13916] ? __lock_acquire+0x7c40/0x7c40 [ 507.750495][T13916] ? mutex_unlock+0x10/0x10 [ 507.754984][T13916] ? __nla_parse+0x3c/0x50 [ 507.759383][T13916] nfnetlink_rcv+0x1119/0x2470 [ 507.764156][T13916] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 507.769734][T13916] ? ref_tracker_free+0x682/0x830 [ 507.774746][T13916] ? netlink_deliver_tap+0x2e/0x1b0 [ 507.779932][T13916] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 507.785376][T13916] ? netlink_deliver_tap+0x2e/0x1b0 [ 507.790560][T13916] netlink_unicast+0x7ad/0x920 [ 507.795314][T13916] netlink_sendmsg+0x8ad/0xbd0 [ 507.800062][T13916] ? netlink_getsockopt+0x550/0x550 [ 507.805252][T13916] ? apparmor_socket_sendmsg+0x8a/0x330 [ 507.810781][T13916] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 507.816073][T13916] ? security_socket_sendmsg+0x7c/0xa0 [ 507.821525][T13916] ? netlink_getsockopt+0x550/0x550 [ 507.826714][T13916] ____sys_sendmsg+0x5ed/0x9a0 [ 507.831461][T13916] ? __sys_sendmsg_sock+0x30/0x30 [ 507.836465][T13916] ? __import_iovec+0x306/0x510 [ 507.841306][T13916] ? import_iovec+0x6f/0xa0 [ 507.845803][T13916] ___sys_sendmsg+0x2a2/0x360 [ 507.850462][T13916] ? __sys_sendmsg+0x2a0/0x2a0 [ 507.855300][T13916] __se_sys_sendmsg+0x1c3/0x2b0 [ 507.860130][T13916] ? __x64_sys_sendmsg+0x80/0x80 [ 507.865055][T13916] ? lockdep_hardirqs_on+0x94/0x140 [ 507.870319][T13916] do_syscall_64+0x4c/0xa0 [ 507.874719][T13916] ? clear_bhb_loop+0x60/0xb0 [ 507.879399][T13916] ? clear_bhb_loop+0x60/0xb0 [ 507.884055][T13916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.889941][T13916] RIP: 0033:0x7f950879de59 [ 507.894389][T13916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.914019][T13916] RSP: 002b:00007f9509725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.922490][T13916] RAX: ffffffffffffffda RBX: 00007f9508a25fa0 RCX: 00007f950879de59 [ 507.930441][T13916] RDX: 0000000000000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 507.938390][T13916] RBP: 00007f9508833e6f R08: 0000000000000000 R09: 0000000000000000 [ 507.946349][T13916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.954304][T13916] R13: 00007f9508a26038 R14: 00007f9508a25fa0 R15: 00007fffdebb5628 [ 507.962268][T13916] [ 507.969346][T13916] SET target dimension over the limit! [ 507.972380][ T126] ip_vti0 speed is unknown, defaulting to 1000 [ 507.981743][T13776] team0: Port device team_slave_0 added [ 508.038199][ T4260] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 508.049983][T13776] team0: Port device team_slave_1 added [ 508.076403][T13776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.085193][T13776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.115708][ T4260] usb 2-1: device descriptor read/8, error -71 [ 508.117396][T13776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.135059][T13776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.142040][T13776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.169422][T13776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.220851][T13776] device hsr_slave_0 entered promiscuous mode [ 508.230701][T13776] device hsr_slave_1 entered promiscuous mode [ 508.236962][ T4260] usb usb2-port1: unable to enumerate USB device [ 508.248206][T13776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.255979][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 508.257221][T13776] Cannot create hsr debugfs directory [ 508.589981][ T4642] device hsr_slave_0 left promiscuous mode [ 508.600043][ T4642] device hsr_slave_1 left promiscuous mode [ 508.606589][ T4642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.616638][ T4642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.624473][ T4642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.631896][ T4642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.643416][ T4642] device bridge_slave_1 left promiscuous mode [ 508.649613][ T4642] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.658298][ T4642] device bridge_slave_0 left promiscuous mode [ 508.666651][ T4642] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.677415][ T4642] device veth1_macvtap left promiscuous mode [ 508.685648][ T4642] device veth0_macvtap left promiscuous mode [ 508.691897][ T4642] device veth1_vlan left promiscuous mode [ 508.697831][ T4642] device veth0_vlan left promiscuous mode [ 508.866673][ T4642] team0 (unregistering): Port device team_slave_1 removed [ 508.877112][ T4642] team0 (unregistering): Port device team_slave_0 removed [ 508.898911][ T4642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.923569][ T4642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.995581][ T4642] team0 (unregistering): Port device batadv0 removed [ 509.022690][ T4642] bond0 (unregistering): Released all slaves [ 509.105758][T13776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 509.122432][T13776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 509.147982][T13776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 509.157130][T13776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.218062][T13776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.260477][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 509.268716][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 509.281450][T13776] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.291982][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 509.304237][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 509.313430][T12831] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.320547][T12831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.346577][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 509.369098][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 509.378414][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.387030][T12831] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.394135][T12831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.403099][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 509.411780][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 509.432714][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 509.441439][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 509.450493][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 509.465628][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 509.474866][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 509.485811][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 509.496143][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 509.505500][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 509.515185][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 509.529353][T13776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 509.731441][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.740480][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.754391][T13776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.770566][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 509.780134][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 509.798733][T13776] device veth0_vlan entered promiscuous mode [ 509.807668][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 509.816664][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 509.824987][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.833104][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.846755][T13776] device veth1_vlan entered promiscuous mode [ 509.860190][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 509.868478][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 509.876967][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 509.885416][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 509.896199][T13776] device veth0_macvtap entered promiscuous mode [ 509.905371][T13776] device veth1_macvtap entered promiscuous mode [ 509.919107][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.929560][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.940439][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.950984][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.960881][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.971312][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.981159][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.992100][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.001960][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.012624][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.022605][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.033193][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.043916][T13776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.051894][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 510.060299][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 510.068196][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 510.076728][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 510.086725][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.097951][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.107939][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.118644][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.128480][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.139142][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.149181][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.160088][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.170042][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.180559][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.190388][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.201220][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.211879][T13776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.220228][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 510.230822][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 510.240991][T13776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.249811][T13776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.259380][T13776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.268250][T13776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.290479][T13776] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 510.307987][T12812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.308808][T13776] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 510.324994][T12812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.336960][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 510.351067][T12812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.359466][T12812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.368126][T12812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready