last executing test programs: 8m23.220954383s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0xff}, 0x0) setrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f00000009c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000000)='./proc/swaps\x00', 0x0, 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000bc0)='3', 0x4e) write(r3, &(0x7f0000000c00)="89", 0x3f80) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./sys\x00', &(0x7f0000000cc0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r5, &(0x7f0000000d40)=""/10, 0x5b) io_setup(0x4, &(0x7f0000000d80)) 8m19.725067448s ago: executing program 2 (id=8): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x3631, &(0x7f0000000040)={0x0, 0x30b8, 0x1, 0x2, 0x158}, 0x0, &(0x7f0000000280), &(0x7f0000000140)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002000500010003000000", 0x38) write(r2, &(0x7f0000000180)="240000002a00010002000000000000000000000001000000010001000000010000000000", 0x24) write(r2, &(0x7f0000000300), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) shutdown(r1, 0x1) dup(0xffffffffffffffff) unshare(0x8040480) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f00000002c0)=0x18, 0x4) 8m18.149619509s ago: executing program 2 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002240)='./debug\x00', 0xf2) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) 8m17.522525368s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b80)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001ab80)=0x80000000000003) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f000001ac00)='./dev\x00', &(0x7f000001ac40)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000001ac80)='./dev/kmsg\x00', 0x81, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) 8m7.919503921s ago: executing program 2 (id=18): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096010006010003000077a317e1d2a9fa3dcd9acf00002a90a07538b3"], 0x0}, 0x0) 8m4.64416226s ago: executing program 2 (id=23): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7m48.092611556s ago: executing program 32 (id=23): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6m41.421682189s ago: executing program 4 (id=129): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) 6m39.195877996s ago: executing program 4 (id=130): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$unix(0x1, 0x2, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x143102) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x1}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) read(r3, 0x0, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x100) mkdir(&(0x7f0000000900)='./file0\x00', 0x184) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000940)='./bus\x00', 0x0) 6m37.092194631s ago: executing program 4 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000020000004584000e0400000002"], 0x0, 0x2a, 0x0, 0x1, 0x9, 0x10000}, 0x28) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='AqAAAAAAAAAAAAAAABAAA/AAAAAAAAAACAAAAA==\x00', 0x0) 6m34.982587348s ago: executing program 4 (id=136): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000240), r3) getpgrp(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x9000000d}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21d62, 0x5}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}]}, 0x30}}, 0x20084084) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = dup2(r6, r6) bind$bt_hci(r7, &(0x7f00000005c0)={0x1f, 0x1, 0x3}, 0x6) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) io_submit(0x0, 0x4, &(0x7f0000000900)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x7ff, r0, &(0x7f0000000580)="ebdba1bebfbe29b148ad", 0xa, 0x3, 0x0, 0x3, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x8001, r3, &(0x7f0000000640)="eaced474107360e53c053d9025b771a052d0e4cb6f", 0x15, 0x6, 0x0, 0x2, r8}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x10, r1, &(0x7f0000000700)="6d580ae4266ad076e0c80d7da56771e83b3c65f98203aac06a94958f1f6ea68ae32a6a4499a7fb596874da29685874733e40d693e0fe3c38ba14bf8416fa477e43edc0b217856e0aa2811efa4ec73dab8da939e67b84386ecb15ebf02f6ebdf5fa07d538c759b73d5dfd91f5560fa9962f9827f72b30aba45c5f12b2feb4a12e8678a5cbae4d661608967a07a17ca125918e9cf4c35d4d9fe9ae969f283deb4879d69ea510e1687670523b1784", 0xad, 0x8, 0x0, 0x1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x7, 0x8, r3, &(0x7f0000000800), 0x0, 0x81, 0x0, 0x2}]) sendmsg$nl_generic(r4, 0x0, 0xc004) 6m29.090563687s ago: executing program 4 (id=143): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x498fe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x0, 0x32}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)=0x5) 6m24.799386947s ago: executing program 4 (id=146): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000880)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xf}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) write$cgroup_int(r2, &(0x7f0000000340), 0xffffff6a) sendfile(0xffffffffffffffff, r2, 0x0, 0xffffffff000) recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x3fffffffffffce3, 0x700000000000000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000003c0)={0x6, 'ip6gretap0\x00', {0x1ff}, 0x7}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) 6m8.050215051s ago: executing program 33 (id=146): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000880)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xf}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) write$cgroup_int(r2, &(0x7f0000000340), 0xffffff6a) sendfile(0xffffffffffffffff, r2, 0x0, 0xffffffff000) recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x3fffffffffffce3, 0x700000000000000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000003c0)={0x6, 'ip6gretap0\x00', {0x1ff}, 0x7}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) 5m21.684167388s ago: executing program 1 (id=222): setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x5, 0x0, &(0x7f0000000300)="a03c3f9801", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) write(0xffffffffffffffff, &(0x7f00000001c0)='1\n\x00', 0x3) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/target/usb_gadget\x00', 0x1ff) 5m18.228615524s ago: executing program 1 (id=225): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 5m17.121449766s ago: executing program 1 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000020000004584000e040000000200000000"], 0x0, 0x2a, 0x0, 0x1, 0x9, 0x10000}, 0x28) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='AqAAAAAAAAAAAAAAABAAA/AAAAAAAAAACAAAAA==\x00', 0x0) 5m14.465090954s ago: executing program 1 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 5m13.719095339s ago: executing program 1 (id=230): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r4, &(0x7f0000000a80)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019a80)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000019b00)='./tracefs\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000019bc0)='./tracefs/dynamic_events\x00', 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x26}]}, 0x1c}, 0x1, 0x0, 0x0, 0x162d6aca46e409ef}, 0x2000c000) sendfile(r0, r0, 0x0, 0x20000005) landlock_restrict_self(0xffffffffffffffff, 0xc) 5m10.908354186s ago: executing program 1 (id=231): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001b80)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f000001ab80)=0x80000000000003) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f000001ac00)='./dev\x00', &(0x7f000001ac40)='devtmpfs\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4m54.437679795s ago: executing program 34 (id=231): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001b80)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f000001ab80)=0x80000000000003) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f000001ac00)='./dev\x00', &(0x7f000001ac40)='devtmpfs\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 15.845288726s ago: executing program 5 (id=546): r0 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x31}, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000000280)=""/102392, 0x18ff8) sendmsg$nl_generic(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5d27963e}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffe2}}, './file0\x00'}) ioctl$USBDEVFS_RELEASEINTERFACE(r7, 0x80045510, &(0x7f0000000040)) write$nsim_port_qreset(r0, &(0x7f00000001c0)={0x32, 0x20, 0x33}, 0x3) 14.39019449s ago: executing program 5 (id=548): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) set_mempolicy(0x4005, &(0x7f0000000400)=0x7e, 0x6) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x80010, 0xffffffffffffffff, 0x1000) r3 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, 0x0, 0x0, r3) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000000) socket(0x2b, 0x80801, 0x1) fsopen(&(0x7f0000000600)='9p\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 12.568266032s ago: executing program 5 (id=550): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x86, &(0x7f0000009bc0)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000009c40)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000009c80)='./dev\x00', &(0x7f0000009cc0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000009d00)='./dev/ttyUSB0\x00', 0x2, 0x0) write(r0, &(0x7f0000009d40)="5c64e9d542f372633819fe534e7430bbf282dfd6b128acf2d609", 0x1a) 11.24253543s ago: executing program 3 (id=552): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000019740)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x100040d3}, 0x22000010) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r6, &(0x7f0000000340)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000019340)=0x4000007) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000019480)={0x15, 0x1c, &(0x7f0000019540)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000019640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x44, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 9.190236765s ago: executing program 3 (id=554): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f00000024c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002500)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000002540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000025c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002640), 0x651, 0x0) recvmmsg(r3, &(0x7f0000002680), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000026c0)='./proc\x00', 0x1ff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000002700)='^', 0x34000, 0x0, &(0x7f0000002740)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda8d) openat$sysfs(0xffffffffffffff9c, &(0x7f00000027c0)='/sys/power/hibernate_compression_threads', 0x10a001, 0x97) accept$inet(r5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002800)='./file0\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x809}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 8.972331598s ago: executing program 5 (id=555): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.386322414s ago: executing program 5 (id=557): r0 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x31}, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000000280)=""/102392, 0x18ff8) sendmsg$nl_generic(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5d27963e}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffe2}}, './file0\x00'}) ioctl$USBDEVFS_RELEASEINTERFACE(r7, 0x80045510, &(0x7f0000000040)) write$nsim_port_qreset(r0, &(0x7f00000001c0)={0x32, 0x20, 0x33}, 0x3) 8.14751258s ago: executing program 0 (id=558): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000b80)={0x20, 0x7, 0x1, '>'}, 0x0, 0x0, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.614024716s ago: executing program 5 (id=559): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000169000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00005db000/0x3000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x3, 0x0) read$msr(r2, &(0x7f0000000500)=""/102379, 0x18feb) mkdirat(0xffffffffffffff9c, &(0x7f0000019500)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000019540)='./my_configfs\x00', &(0x7f0000019580)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000195c0)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019600)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000019680)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0xbf) mkdirat(0xffffffffffffff9c, &(0x7f00000196c0)='streaming/header/h\x00', 0x157) symlink(&(0x7f0000019740)='streaming/header/h\x00', &(0x7f0000019780)='streaming/header/h/u\x00') symlink(&(0x7f00000197c0)='streaming/header/h\x00', &(0x7f0000019800)='streaming/class/fs/h\x00') symlink(0x0, &(0x7f0000019840)='streaming/class/hs/h\x00') 4.567729724s ago: executing program 0 (id=560): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$unix(0x1, 0x2, 0x0) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x143102) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x1, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000700)=r2, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000880)={r3}, 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) read(r4, 0x0, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x100) mkdir(&(0x7f0000000900)='./file0\x00', 0x184) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000940)='./bus\x00', 0x0) 4.479082578s ago: executing program 3 (id=561): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)={0x2, 0x0, [{0x2, 0x28, &(0x7f00000003c0)=""/40}, {0xd100828e98ba2273, 0x0, 0x0}]}) 3.425403267s ago: executing program 0 (id=562): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x22001, 0x0) 3.250485897s ago: executing program 3 (id=563): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040a306d00c4b000000000109022400010000a00209041005020300840009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.153920175s ago: executing program 0 (id=564): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/vlan/vlan1\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000580)=""/74, 0x49) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000000600)=ANY=[]) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000002c0)) 1.376832642s ago: executing program 3 (id=565): setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x4a, &(0x7f0000000300)="a03c3f980100000005a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) write(0xffffffffffffffff, &(0x7f00000001c0)='1\n\x00', 0x3) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/target/usb_gadget\x00', 0x1ff) 130.706625ms ago: executing program 0 (id=566): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 105.146167ms ago: executing program 3 (id=567): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xf, 0x80000, 0xffe) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000000c0)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000140)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0xfffffffc}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 0s ago: executing program 0 (id=568): r0 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x31}, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000000280)=""/102392, 0x18ff8) sendmsg$nl_generic(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5d27963e}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffe2}}, './file0\x00'}) ioctl$USBDEVFS_RELEASEINTERFACE(r7, 0x80045510, &(0x7f0000000040)) write$nsim_port_qreset(r0, &(0x7f00000001c0)={0x32, 0x20, 0x33}, 0x3) kernel console output (not intermixed with test programs): vice found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 280.671540][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.672913][ T5762] usb 4-1: Product: syz [ 280.673000][ T5762] usb 4-1: Manufacturer: syz [ 280.673439][ T5762] usb 4-1: SerialNumber: syz [ 281.890607][ T5762] usb 4-1: config 0 descriptor?? [ 282.121117][ T6741] rxe_eth0 speed is unknown, defaulting to 1000 [ 282.167232][ T5762] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 282.634631][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.910471][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.274553][ T5762] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 283.607196][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.477207][ T6878] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 284.477207][ T6878] The task syz.5.215 (6878) triggered the difference, watch for misbehavior. [ 284.624899][ T9] usb 4-1: USB disconnect, device number 2 [ 285.708715][ T6886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.721326][ T6886] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 286.150337][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.202745][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.202883][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.203031][ T6610] bridge_slave_0: entered allmulticast mode [ 286.213323][ T6610] bridge_slave_0: entered promiscuous mode [ 287.698030][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.698124][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.698271][ T6610] bridge_slave_1: entered allmulticast mode [ 287.703448][ T6610] bridge_slave_1: entered promiscuous mode [ 287.796554][ T5638] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 288.083283][ T6610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.124094][ T6610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.550860][ T6610] team0: Port device team_slave_0 added [ 288.682780][ T6610] team0: Port device team_slave_1 added [ 290.913594][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.913621][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.913665][ T6610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.981014][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.981039][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.981084][ T6610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.186448][ T50] bridge_slave_1: left allmulticast mode [ 292.186485][ T50] bridge_slave_1: left promiscuous mode [ 292.186754][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.238325][ T50] bridge_slave_0: left allmulticast mode [ 292.238364][ T50] bridge_slave_0: left promiscuous mode [ 292.238604][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.344631][ T50] bridge_slave_1: left allmulticast mode [ 292.344670][ T50] bridge_slave_1: left promiscuous mode [ 292.344895][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.389757][ T50] bridge_slave_0: left allmulticast mode [ 292.389793][ T50] bridge_slave_0: left promiscuous mode [ 292.396494][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.277716][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.312102][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.330864][ T50] bond0 (unregistering): Released all slaves [ 299.720377][ T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 299.961357][ T6958] syz.1.230 (6958) used greatest stack depth: 17320 bytes left [ 300.105784][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.173148][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.211104][ T50] bond0 (unregistering): Released all slaves [ 300.300417][ T6610] hsr_slave_0: entered promiscuous mode [ 300.303918][ T6610] hsr_slave_1: entered promiscuous mode [ 300.327260][ T6610] debugfs: 'hsr0' already exists in 'hsr' [ 300.327290][ T6610] Cannot create hsr debugfs directory [ 303.450708][ T6987] ceph: No mds server is up or the cluster is laggy [ 303.461052][ T10] libceph: connect (1)[c::]:6789 error -101 [ 303.511619][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 303.812680][ T10] libceph: connect (1)[c::]:6789 error -101 [ 303.812892][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 304.613387][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.625938][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.627306][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.647744][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.648471][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.773023][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.773221][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.773408][ T6741] bridge_slave_0: entered allmulticast mode [ 304.789180][ T6741] bridge_slave_0: entered promiscuous mode [ 304.804339][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.808271][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.808441][ T6741] bridge_slave_1: entered allmulticast mode [ 304.859268][ T6741] bridge_slave_1: entered promiscuous mode [ 306.061817][ T6741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.106017][ T6741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.480716][ T6741] team0: Port device team_slave_0 added [ 306.541471][ T6741] team0: Port device team_slave_1 added [ 306.680404][ T5638] Bluetooth: hci1: command tx timeout [ 306.885692][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.239'. [ 308.708923][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.708949][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.708994][ T6741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.759728][ T5638] Bluetooth: hci1: command tx timeout [ 308.774805][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.774830][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.774874][ T6741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.549879][ T50] hsr_slave_0: left promiscuous mode [ 310.561987][ T50] hsr_slave_1: left promiscuous mode [ 310.562984][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.574885][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.648268][ T50] hsr_slave_0: left promiscuous mode [ 310.661265][ T50] hsr_slave_1: left promiscuous mode [ 310.662291][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.662319][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.689166][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.689197][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.839281][ T5638] Bluetooth: hci1: command tx timeout [ 310.862710][ T5830] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 311.047017][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 311.061564][ T5830] usb 6-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 311.185215][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.194409][ T5830] usb 6-1: Product: syz [ 311.194485][ T5830] usb 6-1: Manufacturer: syz [ 311.200727][ T5830] usb 6-1: SerialNumber: syz [ 311.512071][ T5830] usb 6-1: config 0 descriptor?? [ 311.569614][ T50] veth1_macvtap: left promiscuous mode [ 311.569758][ T50] veth0_macvtap: left promiscuous mode [ 311.570055][ T50] veth1_vlan: left promiscuous mode [ 311.570256][ T50] veth0_vlan: left promiscuous mode [ 311.933894][ T5830] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 312.951105][ T5638] Bluetooth: hci1: command tx timeout [ 314.033046][ T5830] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 315.979744][ T50] team0 (unregistering): Port device team_slave_1 removed [ 316.041679][ T50] team0 (unregistering): Port device team_slave_0 removed [ 316.049456][ T2234] usb 6-1: USB disconnect, device number 4 [ 316.376640][ T986] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 316.541621][ T986] usb 1-1: Using ep0 maxpacket: 16 [ 316.577346][ T986] usb 1-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 316.657445][ T986] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.658108][ T986] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.659703][ T986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.704708][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.704816][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.079818][ T986] usb 1-1: config 0 descriptor?? [ 317.403536][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.414785][ T5637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.416846][ T5637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.424062][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.432273][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.045118][ T50] team0 (unregistering): Port device team_slave_1 removed [ 318.093453][ T50] team0 (unregistering): Port device team_slave_0 removed [ 318.632187][ T6741] hsr_slave_0: entered promiscuous mode [ 318.653887][ T6741] hsr_slave_1: entered promiscuous mode [ 318.665838][ T5292] 8021q: adding VLAN 0 to HW filter on device eth5 [ 320.175278][ T5637] Bluetooth: hci6: command tx timeout [ 320.891826][ T10] usb 1-1: USB disconnect, device number 4 [ 322.275257][ T5637] Bluetooth: hci6: command tx timeout [ 322.702503][ T6997] rxe_eth0 speed is unknown, defaulting to 1000 [ 324.275732][ T5637] Bluetooth: hci6: command tx timeout [ 324.603691][ T7074] rxe_eth0 speed is unknown, defaulting to 1000 [ 325.621725][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.625265][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.633058][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.634932][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.635738][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.713647][ T6299] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.885826][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 325.934305][ T5638] Bluetooth: to_multiplier 8192 > 3200 [ 326.279095][ T6299] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.365878][ T5638] Bluetooth: hci6: command tx timeout [ 326.729562][ T6299] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.905894][ T5638] Bluetooth: hci3: command tx timeout [ 327.965737][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 328.178462][ T6299] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.766480][ T2234] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 328.915826][ T2234] usb 6-1: Using ep0 maxpacket: 16 [ 328.916569][ T2234] usb 6-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 328.924504][ T2234] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.924542][ T2234] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.924594][ T2234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.978197][ T2234] usb 6-1: config 0 descriptor?? [ 329.956732][ T5638] Bluetooth: hci3: command tx timeout [ 329.997128][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 331.438727][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.440067][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.440249][ T6997] bridge_slave_0: entered allmulticast mode [ 331.469624][ T6997] bridge_slave_0: entered promiscuous mode [ 331.491700][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.491823][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.491976][ T6997] bridge_slave_1: entered allmulticast mode [ 331.522080][ T6997] bridge_slave_1: entered promiscuous mode [ 331.631663][ T6997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.732615][ T6997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.746537][ T10] usb 6-1: USB disconnect, device number 5 [ 331.838613][ T7145] rxe_eth0 speed is unknown, defaulting to 1000 [ 331.970378][ T6997] team0: Port device team_slave_0 added [ 332.049816][ T5638] Bluetooth: hci3: command tx timeout [ 332.808360][ T6997] team0: Port device team_slave_1 added [ 335.365785][ T5638] Bluetooth: hci3: command tx timeout [ 337.593655][ T5292] 8021q: adding VLAN 0 to HW filter on device eth6 [ 337.818351][ T6299] bridge_slave_1: left allmulticast mode [ 337.818390][ T6299] bridge_slave_1: left promiscuous mode [ 337.818641][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.822663][ T6299] bridge_slave_0: left allmulticast mode [ 337.822691][ T6299] bridge_slave_0: left promiscuous mode [ 337.824493][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.495130][ T6299] bridge_slave_1: left allmulticast mode [ 338.495170][ T6299] bridge_slave_1: left promiscuous mode [ 338.495404][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.525184][ T6299] bridge_slave_0: left allmulticast mode [ 338.525223][ T6299] bridge_slave_0: left promiscuous mode [ 338.548444][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.940921][ T6299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.968517][ T6299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.978915][ T6299] bond0 (unregistering): Released all slaves [ 340.454146][ T6299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.478464][ T6299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.492262][ T6299] bond0 (unregistering): Released all slaves [ 340.912913][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.913023][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.913082][ T6997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.047271][ T5762] libceph: connect (1)[c::]:6789 error -101 [ 341.048358][ T5762] libceph: mon0 (1)[c::]:6789 connect error [ 341.062708][ T7252] ceph: No mds server is up or the cluster is laggy [ 341.795588][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.795953][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.796159][ T6997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.154107][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 343.862004][ T7269] Process accounting resumed [ 344.570959][ T6997] hsr_slave_0: entered promiscuous mode [ 344.576469][ T6997] hsr_slave_1: entered promiscuous mode [ 344.581499][ T6997] debugfs: 'hsr0' already exists in 'hsr' [ 344.581527][ T6997] Cannot create hsr debugfs directory [ 344.753316][ T7074] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.753508][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.753660][ T7074] bridge_slave_0: entered allmulticast mode [ 344.777342][ T7074] bridge_slave_0: entered promiscuous mode [ 344.890620][ T7074] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.890916][ T7074] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.891078][ T7074] bridge_slave_1: entered allmulticast mode [ 344.921212][ T7074] bridge_slave_1: entered promiscuous mode [ 345.969024][ T7074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.063387][ T7074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.178802][ T7074] team0: Port device team_slave_0 added [ 348.304967][ T7074] team0: Port device team_slave_1 added [ 348.855571][ T7074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.855597][ T7074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.883107][ T7074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.920153][ T7074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.920187][ T7074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.920234][ T7074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.035087][ T7074] hsr_slave_0: entered promiscuous mode [ 350.043883][ T7074] hsr_slave_1: entered promiscuous mode [ 350.052020][ T7074] debugfs: 'hsr0' already exists in 'hsr' [ 350.052049][ T7074] Cannot create hsr debugfs directory [ 351.861470][ T6299] hsr_slave_0: left promiscuous mode [ 351.862377][ T6299] hsr_slave_1: left promiscuous mode [ 351.863343][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.863370][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.864355][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.864383][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.909297][ T6299] hsr_slave_0: left promiscuous mode [ 351.917622][ T6299] hsr_slave_1: left promiscuous mode [ 351.920329][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.926780][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.983962][ T6299] veth1_macvtap: left promiscuous mode [ 351.984039][ T6299] veth0_macvtap: left promiscuous mode [ 351.984169][ T6299] veth1_vlan: left promiscuous mode [ 351.984268][ T6299] veth0_vlan: left promiscuous mode [ 352.975127][ T2234] libceph: connect (1)[c::]:6789 error -101 [ 352.976187][ T2234] libceph: mon0 (1)[c::]:6789 connect error [ 352.977981][ T7332] ceph: No mds server is up or the cluster is laggy [ 354.959035][ T6299] team0 (unregistering): Port device team_slave_1 removed [ 355.003805][ T6299] team0 (unregistering): Port device team_slave_0 removed [ 355.207850][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 356.962334][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 357.011161][ T6299] team0 (unregistering): Port device team_slave_1 removed [ 357.475486][ T6299] team0 (unregistering): Port device team_slave_0 removed [ 358.299127][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.299266][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.299432][ T7145] bridge_slave_0: entered allmulticast mode [ 358.302390][ T7145] bridge_slave_0: entered promiscuous mode [ 358.343151][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.344757][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.344928][ T7145] bridge_slave_1: entered allmulticast mode [ 358.373537][ T7145] bridge_slave_1: entered promiscuous mode [ 361.929367][ T7145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.946030][ T7145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.185481][ T7145] team0: Port device team_slave_0 added [ 362.207423][ T7145] team0: Port device team_slave_1 added [ 362.389272][ T6997] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 362.473072][ T6997] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.478696][ T6997] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 362.501438][ T6997] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.525998][ T6997] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 362.631081][ T6997] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.633129][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.633151][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.633194][ T7145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.655783][ T6997] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 362.711452][ T6997] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.746555][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.746580][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.746626][ T7145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.387510][ T7145] hsr_slave_0: entered promiscuous mode [ 363.394078][ T7145] hsr_slave_1: entered promiscuous mode [ 363.399888][ T7145] debugfs: 'hsr0' already exists in 'hsr' [ 363.399916][ T7145] Cannot create hsr debugfs directory [ 364.050388][ T7074] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 364.424156][ T7074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.559440][ T7074] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 364.587578][ T7074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.744841][ T7074] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 364.769666][ T7074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.782568][ T7074] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 364.806532][ T7074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.894480][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 366.113793][ T5292] 8021q: adding VLAN 0 to HW filter on device eth7 [ 366.429923][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.435024][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.435879][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.437916][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.438721][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.717553][ T6299] bridge_slave_1: left allmulticast mode [ 366.717592][ T6299] bridge_slave_1: left promiscuous mode [ 366.717858][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.455648][ T6299] bridge_slave_0: left allmulticast mode [ 368.455686][ T6299] bridge_slave_0: left promiscuous mode [ 368.455899][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.530613][ T5637] Bluetooth: hci5: command tx timeout [ 368.778041][ T7446] ceph: No mds server is up or the cluster is laggy [ 368.798142][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 368.799283][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 371.371872][ T5637] Bluetooth: hci5: command tx timeout [ 371.530411][ T6299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.564312][ T6299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.578965][ T6299] bond0 (unregistering): Released all slaves [ 372.318871][ T7074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.596296][ T7074] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.649588][ T5292] 8021q: adding VLAN 0 to HW filter on device eth8 [ 372.654439][ T3755] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.654563][ T3755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.034368][ T5637] Bluetooth: hci5: command tx timeout [ 374.203801][ T204] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.203928][ T204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.264537][ T6299] hsr_slave_0: left promiscuous mode [ 374.265400][ T6299] hsr_slave_1: left promiscuous mode [ 374.277926][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.280320][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.938556][ T6299] team0 (unregistering): Port device team_slave_1 removed [ 374.991972][ T6299] team0 (unregistering): Port device team_slave_0 removed [ 375.184560][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 375.933547][ T7429] rxe_eth0 speed is unknown, defaulting to 1000 [ 376.036905][ T5637] Bluetooth: hci5: command tx timeout [ 376.635189][ T7145] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 376.668675][ T7145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.673185][ T7145] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 376.701968][ T7145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.716425][ T7145] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 376.766436][ T7145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.141160][ T7145] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 377.196491][ T7145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.636482][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.867648][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.883488][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.893453][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.904075][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.128720][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.128827][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.077308][ T5638] Bluetooth: hci1: command tx timeout [ 382.716505][ T5637] Bluetooth: hci1: command tx timeout [ 382.836614][ T5292] 8021q: adding VLAN 0 to HW filter on device eth9 [ 383.198578][ T7550] ceph: No mds server is up or the cluster is laggy [ 383.215174][ T5762] libceph: connect (1)[c::]:6789 error -101 [ 383.215349][ T5762] libceph: mon0 (1)[c::]:6789 connect error [ 384.215831][ T6299] bridge_slave_1: left allmulticast mode [ 384.215868][ T6299] bridge_slave_1: left promiscuous mode [ 384.216106][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.260397][ T6299] bridge_slave_0: left allmulticast mode [ 384.260435][ T6299] bridge_slave_0: left promiscuous mode [ 384.265304][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.755997][ T5638] Bluetooth: hci1: command tx timeout [ 384.948637][ T6299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.004332][ T6299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.051709][ T6299] bond0 (unregistering): Released all slaves [ 385.425350][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.434303][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.442832][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.459060][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.463639][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.982950][ T7593] random: crng reseeded on system resumption [ 386.875871][ T5637] Bluetooth: hci1: command tx timeout [ 387.373418][ T7515] rxe_eth0 speed is unknown, defaulting to 1000 [ 387.388919][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.389044][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.389215][ T7429] bridge_slave_0: entered allmulticast mode [ 387.441319][ T7429] bridge_slave_0: entered promiscuous mode [ 387.460343][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.466367][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.466530][ T7429] bridge_slave_1: entered allmulticast mode [ 387.544299][ T7429] bridge_slave_1: entered promiscuous mode [ 387.557374][ T5637] Bluetooth: hci3: command tx timeout [ 389.394088][ T5292] 8021q: adding VLAN 0 to HW filter on device eth10 [ 389.419648][ T7429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.469259][ T7429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.636805][ T5637] Bluetooth: hci3: command tx timeout [ 390.025182][ T7613] ceph: No mds server is up or the cluster is laggy [ 390.033743][ T5762] libceph: connect (1)[c::]:6789 error -101 [ 390.053718][ T5762] libceph: mon0 (1)[c::]:6789 connect error [ 390.868008][ T6299] hsr_slave_0: left promiscuous mode [ 390.914802][ T6299] hsr_slave_1: left promiscuous mode [ 390.937036][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.953461][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.725775][ T5637] Bluetooth: hci3: command tx timeout [ 391.950047][ T6299] team0 (unregistering): Port device team_slave_1 removed [ 392.033200][ T6299] team0 (unregistering): Port device team_slave_0 removed [ 392.136611][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 392.163815][ T5637] Bluetooth: to_multiplier 8192 > 3200 [ 392.928569][ T7429] team0: Port device team_slave_0 added [ 393.060086][ T7429] team0: Port device team_slave_1 added [ 393.262798][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.262824][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.262868][ T7429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.263998][ T7574] rxe_eth0 speed is unknown, defaulting to 1000 [ 393.386374][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.386401][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.386447][ T7429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.434609][ T29] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 393.620159][ T29] usb 1-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 393.635972][ T29] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.636007][ T29] usb 1-1: config 0 has no interface number 0 [ 393.658684][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.658725][ T29] usb 1-1: Product: syz [ 393.658750][ T29] usb 1-1: Manufacturer: syz [ 393.658775][ T29] usb 1-1: SerialNumber: syz [ 393.703005][ T29] usb 1-1: config 0 descriptor?? [ 393.725451][ T29] usb 1-1: selecting invalid altsetting 1 [ 393.747157][ T29] dvb_ttusb_budget: ttusb_init_controller: error [ 393.747261][ T29] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 393.795702][ T5637] Bluetooth: hci3: command tx timeout [ 395.492164][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 395.609406][ T7429] hsr_slave_0: entered promiscuous mode [ 395.612629][ T7429] hsr_slave_1: entered promiscuous mode [ 395.830431][ T29] DVB: Unable to find symbol stv0299_attach() [ 395.926984][ T29] DVB: Unable to find symbol tda8083_attach() [ 395.927004][ T29] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 395.960447][ T29] usb 1-1: USB disconnect, device number 5 [ 397.603871][ T7652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.887049][ T5292] 8021q: adding VLAN 0 to HW filter on device eth11 [ 399.635911][ T5638] Bluetooth: hci6: command 0x1003 tx timeout [ 399.636001][ T5637] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 399.796684][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.796810][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.796977][ T7515] bridge_slave_0: entered allmulticast mode [ 399.804606][ T7515] bridge_slave_0: entered promiscuous mode [ 399.820680][ T7515] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.823986][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.828643][ T7515] bridge_slave_1: entered allmulticast mode [ 399.869781][ T7515] bridge_slave_1: entered promiscuous mode [ 401.551048][ T7515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.586787][ T7515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.303539][ T7515] team0: Port device team_slave_0 added [ 402.325908][ T7515] team0: Port device team_slave_1 added [ 402.898918][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.898944][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.898989][ T7515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.081908][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.081935][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.081980][ T7515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.743269][ T7515] hsr_slave_0: entered promiscuous mode [ 403.753507][ T7515] hsr_slave_1: entered promiscuous mode [ 403.762797][ T7515] debugfs: 'hsr0' already exists in 'hsr' [ 403.762826][ T7515] Cannot create hsr debugfs directory [ 403.784523][ T5292] 8021q: adding VLAN 0 to HW filter on device eth12 [ 404.100331][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 404.127292][ T5637] Bluetooth: to_multiplier 8192 > 3200 [ 406.179662][ T7429] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 406.193355][ T7429] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.206092][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 406.253170][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.256735][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.256867][ T7574] bridge_slave_0: entered allmulticast mode [ 406.262177][ T7574] bridge_slave_0: entered promiscuous mode [ 406.344609][ T7429] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 406.369642][ T7429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.372223][ T7574] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.372345][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.372514][ T7574] bridge_slave_1: entered allmulticast mode [ 406.379018][ T7574] bridge_slave_1: entered promiscuous mode [ 406.478127][ T7429] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 406.490902][ T7429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.494064][ T7429] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 406.506276][ T7429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.607149][ T7574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.863039][ T7574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.011674][ T7574] team0: Port device team_slave_0 added [ 408.074755][ T7574] team0: Port device team_slave_1 added [ 408.170799][ T7742] random: crng reseeded on system resumption [ 409.317186][ T6299] bridge_slave_1: left allmulticast mode [ 409.317224][ T6299] bridge_slave_1: left promiscuous mode [ 409.317469][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.355111][ T6299] bridge_slave_0: left allmulticast mode [ 409.355147][ T6299] bridge_slave_0: left promiscuous mode [ 409.362000][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.433517][ T6299] bridge_slave_1: left allmulticast mode [ 409.433555][ T6299] bridge_slave_1: left promiscuous mode [ 409.433799][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.498043][ T6299] bridge_slave_0: left allmulticast mode [ 409.498096][ T6299] bridge_slave_0: left promiscuous mode [ 409.503351][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.500592][ T7761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.515215][ T7761] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 410.771981][ T276] Bluetooth: hci6: Frame reassembly failed (-84) [ 411.287405][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 411.412219][ T6299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.427673][ T6299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.430701][ T6299] bond0 (unregistering): Released all slaves [ 411.451848][ T24] usb 6-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 411.453416][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.453464][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.453518][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.813913][ T6299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.830196][ T6299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.834062][ T6299] bond0 (unregistering): Released all slaves [ 411.868388][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.868414][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.868459][ T7574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.939494][ T5292] 8021q: adding VLAN 0 to HW filter on device eth13 [ 411.940721][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.940750][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.940795][ T7574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.008060][ T24] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 412.008104][ T24] hid-sensor-hub 0003:8086:0000.0003: unknown main item tag 0x0 [ 412.063490][ T24] hid-sensor-hub 0003:8086:0000.0003: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.5-1/input0 [ 412.156144][ T5762] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 412.270951][ T24] usb 6-1: USB disconnect, device number 6 [ 412.308909][ T5762] usb 1-1: New USB device found: idVendor=04d8, idProduct=c002, bcdDevice=0.00 [ 412.310283][ T5762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.310331][ T5762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.310386][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.367807][ T7768] fido_id[7768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 412.604259][ T5638] Bluetooth: hci6: command 0x1003 tx timeout [ 412.606177][ T5637] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 412.815065][ T7574] hsr_slave_0: entered promiscuous mode [ 412.825525][ T7574] hsr_slave_1: entered promiscuous mode [ 412.839714][ T7574] debugfs: 'hsr0' already exists in 'hsr' [ 412.839750][ T7574] Cannot create hsr debugfs directory [ 412.966881][ T5762] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0004/input/input7 [ 413.267149][ T5762] rc_core: IR keymap rc-rc6-mce not found [ 413.267173][ T5762] Registered IR keymap rc-empty [ 413.317798][ T5762] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0004/rc/rc0 [ 413.358691][ T5762] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0004/rc/rc0/input8 [ 413.819056][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 413.840028][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 413.844907][ T7778] ceph: No mds server is up or the cluster is laggy [ 414.254458][ T5762] hid-picolcd 0003:04D8:C002.0004: No report with id 0x94 found [ 414.254552][ T5762] hid-picolcd 0003:04D8:C002.0004: failed to configure display [ 414.517887][ T29] libceph: connect (1)[c::]:6789 error -101 [ 414.518104][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 415.163520][ T5762] usb 1-1: USB disconnect, device number 6 [ 416.066044][ T7803] ip_tables: iptables: counters copy to user failed while replacing table [ 416.946310][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 417.184188][ T7798] lo: entered allmulticast mode [ 417.269802][ T7795] lo: left allmulticast mode [ 417.421400][ T6299] hsr_slave_0: left promiscuous mode [ 417.431935][ T6299] hsr_slave_1: left promiscuous mode [ 417.432954][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.449086][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.473443][ T6299] hsr_slave_0: left promiscuous mode [ 417.475439][ T6299] hsr_slave_1: left promiscuous mode [ 417.476413][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.501348][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.521068][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 417.521832][ T24] usb 1-1: New USB device found: idVendor=13d8, idProduct=0001, bcdDevice=e.22 [ 417.525492][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.525529][ T24] usb 1-1: Product: syz [ 417.525554][ T24] usb 1-1: Manufacturer: syz [ 417.525580][ T24] usb 1-1: SerialNumber: syz [ 417.541136][ T24] usb 1-1: config 0 descriptor?? [ 417.620315][ T24] usb 1-1: selecting invalid altsetting 3 [ 417.620350][ T24] comedi comedi5: could not set alternate setting 3 in high speed [ 417.620375][ T24] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 417.644841][ T24] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 417.733076][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.353'. [ 417.744974][ T5637] Bluetooth: to_multiplier 8192 > 3200 [ 417.959722][ T5762] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 418.152556][ T5762] usb 4-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 418.154517][ T5762] usb 4-1: config 0 has no interfaces? [ 418.154561][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.165320][ T5762] usb 4-1: config 0 descriptor?? [ 418.553992][ T6299] team0 (unregistering): Port device team_slave_1 removed [ 418.588939][ T6299] team0 (unregistering): Port device team_slave_0 removed [ 418.786626][ T24] usb 4-1: USB disconnect, device number 3 [ 419.012076][ T5762] usb 1-1: USB disconnect, device number 7 [ 419.224212][ T6299] team0 (unregistering): Port device team_slave_1 removed [ 419.269843][ T6299] team0 (unregistering): Port device team_slave_0 removed [ 419.886728][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 421.406717][ T7831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.419062][ T7831] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 422.019945][ T5292] 8021q: adding VLAN 0 to HW filter on device eth14 [ 422.027025][ T7833] fuse: fd is not a fuse device [ 422.528208][ T7839] 9pnet_fd: p9_fd_create_unix (7839): problem connecting socket: ./file0: -111 [ 422.537859][ T7839] netlink: 'syz.0.358': attribute type 4 has an invalid length. [ 422.538894][ T7839] netlink: 'syz.0.358': attribute type 5 has an invalid length. [ 422.538945][ T7839] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 422.539012][ T7839] netlink: 'syz.0.358': attribute type 4 has an invalid length. [ 422.539059][ T7839] netlink: 'syz.0.358': attribute type 5 has an invalid length. [ 422.539106][ T7839] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 422.539311][ T7839] iwpm_register_pid_cb: Could not find a matching request (seq = 830110067) [ 423.147682][ T7429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.395447][ T7515] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 423.421584][ T7515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.434261][ T7429] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.445997][ T7515] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 423.469464][ T7515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.482975][ T7515] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 423.495245][ T7515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.590134][ T3764] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.590263][ T3764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.616755][ T7515] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 423.621521][ T7515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.647035][ T5638] Bluetooth: hci6: command 0x1003 tx timeout [ 423.648768][ T5637] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 423.660611][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.660737][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.927278][ T7515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.242117][ T7515] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.280456][ T7574] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 425.301678][ T7574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.307685][ T7574] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 425.338440][ T7574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.382309][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.382436][ T6299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.390008][ T7574] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 425.646425][ T7574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.158971][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.159139][ T6299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.189631][ T7574] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 426.370561][ T7574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.775320][ T7515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.775358][ T7515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.266701][ T5638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 429.288342][ T5638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 429.291199][ T5638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 429.308518][ T5638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 429.318039][ T5638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 429.405444][ T7895] Process accounting resumed [ 429.702171][ T7574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.810367][ T7574] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.854123][ T204] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.854250][ T204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.931039][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 430.004841][ T5637] Bluetooth: to_multiplier 8192 > 3200 [ 430.815460][ T7921] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 431.372135][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.372267][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.516377][ T5637] Bluetooth: hci6: command tx timeout [ 432.200348][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 434.234150][ T5637] Bluetooth: hci6: command tx timeout [ 434.558744][ T7894] rxe_eth0 speed is unknown, defaulting to 1000 [ 435.037734][ T1040] bridge_slave_1: left allmulticast mode [ 435.037770][ T1040] bridge_slave_1: left promiscuous mode [ 435.038017][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.194064][ T1040] bridge_slave_0: left allmulticast mode [ 435.197434][ T1040] bridge_slave_0: left promiscuous mode [ 435.197691][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.447347][ T5638] Bluetooth: hci6: command tx timeout [ 436.539986][ T7975] Process accounting resumed [ 437.136675][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.155089][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.168160][ T1040] bond0 (unregistering): Released all slaves [ 437.436583][ T7515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.924151][ T1040] hsr_slave_0: left promiscuous mode [ 437.925055][ T1040] hsr_slave_1: left promiscuous mode [ 437.927847][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.928620][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.491904][ T1040] team0 (unregistering): Port device team_slave_1 removed [ 438.544079][ T1040] team0 (unregistering): Port device team_slave_0 removed [ 438.614079][ T5638] Bluetooth: hci6: command tx timeout [ 439.060737][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 439.071494][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 439.079031][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 439.092076][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 439.093378][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 439.132186][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 439.172550][ T5637] Bluetooth: to_multiplier 8192 > 3200 [ 440.784956][ T5292] 8021q: adding VLAN 0 to HW filter on device eth15 [ 441.066089][ T8037] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 441.182246][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.182322][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.112060][ T5638] Bluetooth: hci5: command tx timeout [ 443.112932][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 443.308637][ T7574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.597709][ T986] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 443.643644][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.643776][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.643960][ T7894] bridge_slave_0: entered allmulticast mode [ 443.676327][ T7894] bridge_slave_0: entered promiscuous mode [ 443.695718][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.695847][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.696007][ T7894] bridge_slave_1: entered allmulticast mode [ 443.728129][ T7894] bridge_slave_1: entered promiscuous mode [ 443.767514][ T986] usb 6-1: Using ep0 maxpacket: 16 [ 443.768443][ T986] usb 6-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 443.769812][ T986] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.769877][ T986] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 443.769940][ T986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.845843][ T986] usb 6-1: config 0 descriptor?? [ 444.801465][ T986] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 445.033071][ T7894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.043124][ T7894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.196042][ T7894] team0: Port device team_slave_0 added [ 445.245659][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 445.283832][ T7894] team0: Port device team_slave_1 added [ 445.286370][ T5637] Bluetooth: hci5: command tx timeout [ 445.341884][ T8012] rxe_eth0 speed is unknown, defaulting to 1000 [ 445.403703][ T24] usb 1-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 445.409568][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.409634][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.416267][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.416289][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.416331][ T7894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.425246][ T24] usb 1-1: config 0 descriptor?? [ 445.452490][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 445.629541][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.629569][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.629649][ T7894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.921000][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 445.922062][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 445.922953][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 445.924164][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 445.929035][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 445.930094][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 445.932756][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 446.014189][ T7894] hsr_slave_0: entered promiscuous mode [ 446.018880][ T7894] hsr_slave_1: entered promiscuous mode [ 446.152916][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 446.166129][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 446.170545][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 446.171540][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 446.176211][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 448.295215][ T5637] Bluetooth: hci5: command tx timeout [ 448.485739][ T986] usb 6-1: USB disconnect, device number 7 [ 448.708511][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 448.709249][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 448.713095][ T24] pwc: Registered as video103. [ 448.772717][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 448.810642][ T24] usb 1-1: USB disconnect, device number 8 [ 451.212561][ T5637] Bluetooth: hci5: command tx timeout [ 451.248574][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.395'. [ 451.258822][ T5637] Bluetooth: to_multiplier 8192 > 3200 [ 451.602277][ T1040] bridge_slave_1: left allmulticast mode [ 451.602317][ T1040] bridge_slave_1: left promiscuous mode [ 451.602574][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.693511][ T1040] bridge_slave_0: left allmulticast mode [ 451.693550][ T1040] bridge_slave_0: left promiscuous mode [ 451.714303][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.179811][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 453.182001][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 453.193420][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 453.209677][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 453.211015][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 453.373630][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.399268][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.410097][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 453.427001][ T1040] bond0 (unregistering): Released all slaves [ 455.915174][ T5637] Bluetooth: hci1: command tx timeout [ 456.177533][ T1040] hsr_slave_0: left promiscuous mode [ 456.187510][ T1040] hsr_slave_1: left promiscuous mode [ 456.188529][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.197713][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.318573][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.399'. [ 459.620287][ T5637] Bluetooth: hci1: command tx timeout [ 460.122319][ T1040] team0 (unregistering): Port device team_slave_1 removed [ 460.168103][ T1040] team0 (unregistering): Port device team_slave_0 removed [ 461.869118][ T5638] Bluetooth: hci1: command tx timeout [ 463.473718][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.473833][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.473991][ T8012] bridge_slave_0: entered allmulticast mode [ 463.477053][ T8012] bridge_slave_0: entered promiscuous mode [ 463.486265][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.488075][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.488233][ T8012] bridge_slave_1: entered allmulticast mode [ 463.490255][ T8012] bridge_slave_1: entered promiscuous mode [ 463.619272][ T1578] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 463.667277][ T8093] rxe_eth0 speed is unknown, defaulting to 1000 [ 463.773235][ T8012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.781137][ T1578] usb 4-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 463.789037][ T1578] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.789102][ T1578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.857160][ T8167] random: crng reseeded on system resumption [ 464.017609][ T5637] Bluetooth: hci1: command tx timeout [ 464.719343][ T8012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.820245][ T1578] usb 4-1: config 0 descriptor?? [ 464.904797][ T1578] pwc: Askey VC010 type 2 USB webcam detected. [ 464.952446][ T8012] team0: Port device team_slave_0 added [ 465.209033][ T8173] netlink: 'syz.0.406': attribute type 1 has an invalid length. [ 465.212617][ T8012] team0: Port device team_slave_1 added [ 465.295574][ T1578] pwc: recv_control_msg error -32 req 02 val 2b00 [ 465.306868][ T1578] pwc: recv_control_msg error -32 req 02 val 2700 [ 465.313356][ T1578] pwc: recv_control_msg error -32 req 02 val 2c00 [ 465.319632][ T1578] pwc: recv_control_msg error -32 req 04 val 1000 [ 465.334250][ T1578] pwc: recv_control_msg error -32 req 04 val 1300 [ 465.346375][ T1578] pwc: recv_control_msg error -32 req 04 val 1400 [ 465.360178][ T1578] pwc: recv_control_msg error -32 req 02 val 2000 [ 465.588686][ T1578] pwc: recv_control_msg error -32 req 04 val 1500 [ 465.593305][ T1578] pwc: recv_control_msg error -32 req 02 val 2500 [ 465.593926][ T1578] pwc: recv_control_msg error -32 req 02 val 2400 [ 465.599404][ T1578] pwc: recv_control_msg error -32 req 02 val 2600 [ 465.601292][ T1578] pwc: recv_control_msg error -32 req 02 val 2900 [ 465.840306][ T1578] pwc: recv_control_msg error -71 req 04 val 1100 [ 465.842429][ T1578] pwc: recv_control_msg error -71 req 04 val 1200 [ 465.855852][ T1578] pwc: Registered as video103. [ 465.869387][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.869410][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.869453][ T8012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.872169][ T1578] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 465.885159][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.885183][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.885243][ T8012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.008277][ T1578] usb 4-1: USB disconnect, device number 4 [ 466.895471][ T8012] hsr_slave_0: entered promiscuous mode [ 466.908063][ T8012] hsr_slave_1: entered promiscuous mode [ 466.919733][ T8012] debugfs: 'hsr0' already exists in 'hsr' [ 466.919765][ T8012] Cannot create hsr debugfs directory [ 466.938386][ T7894] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 466.955491][ T7894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.388147][ T10] libceph: connect (1)[c::]:6789 error -101 [ 467.426674][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 468.053349][ T8193] ceph: No mds server is up or the cluster is laggy [ 468.062446][ T10] libceph: connect (1)[c::]:6789 error -101 [ 468.062632][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 468.111397][ T7894] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 468.167868][ T7894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.172852][ T7894] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 468.216462][ T7894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.154924][ T7894] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 470.176586][ T7894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.760137][ T8219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.773159][ T8219] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 473.676066][ T5918] bridge_slave_1: left allmulticast mode [ 473.676104][ T5918] bridge_slave_1: left promiscuous mode [ 473.676362][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.703316][ T5918] bridge_slave_0: left allmulticast mode [ 473.703352][ T5918] bridge_slave_0: left promiscuous mode [ 473.704654][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.314187][ T5918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.338078][ T5918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.350738][ T5918] bond0 (unregistering): Released all slaves [ 476.289770][ T5637] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 477.405297][ T5918] hsr_slave_0: left promiscuous mode [ 477.416892][ T5918] hsr_slave_1: left promiscuous mode [ 477.418277][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.422638][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.262938][ T5918] team0 (unregistering): Port device team_slave_1 removed [ 480.321691][ T5918] team0 (unregistering): Port device team_slave_0 removed [ 480.964405][ T30] audit: type=1326 audit(1793366329.705:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8245 comm="syz.5.416" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e3439f559 code=0x0 [ 481.940455][ T8256] random: crng reseeded on system resumption [ 482.397203][ T5292] 8021q: adding VLAN 0 to HW filter on device eth14 [ 483.016079][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.016372][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.016558][ T8093] bridge_slave_0: entered allmulticast mode [ 483.021053][ T8093] bridge_slave_0: entered promiscuous mode [ 483.074083][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.074440][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.074611][ T8093] bridge_slave_1: entered allmulticast mode [ 483.101917][ T8093] bridge_slave_1: entered promiscuous mode [ 483.328750][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.367055][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.428734][ T7765] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 483.611501][ T7765] usb 4-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 483.613797][ T7765] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.613865][ T7765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.652251][ T7765] usb 4-1: config 0 descriptor?? [ 483.664620][ T8093] team0: Port device team_slave_0 added [ 483.679133][ T7765] pwc: Askey VC010 type 2 USB webcam detected. [ 483.706126][ T8093] team0: Port device team_slave_1 added [ 483.883698][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.883725][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.883778][ T8093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.918618][ T7894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.058818][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.058844][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.058891][ T8093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.157759][ T7765] pwc: recv_control_msg error -32 req 02 val 2b00 [ 484.158639][ T7765] pwc: recv_control_msg error -32 req 02 val 2700 [ 484.159244][ T7765] pwc: recv_control_msg error -32 req 02 val 2c00 [ 484.160078][ T7765] pwc: recv_control_msg error -32 req 04 val 1000 [ 484.160837][ T7765] pwc: recv_control_msg error -32 req 04 val 1300 [ 484.162336][ T7765] pwc: recv_control_msg error -32 req 04 val 1400 [ 484.164644][ T7765] pwc: recv_control_msg error -32 req 02 val 2000 [ 484.380384][ T7765] pwc: recv_control_msg error -32 req 04 val 1500 [ 484.386003][ T7765] pwc: recv_control_msg error -32 req 02 val 2500 [ 484.387071][ T7765] pwc: recv_control_msg error -32 req 02 val 2400 [ 484.388136][ T7765] pwc: recv_control_msg error -32 req 02 val 2600 [ 484.390513][ T7765] pwc: recv_control_msg error -32 req 02 val 2900 [ 484.404042][ T8093] hsr_slave_0: entered promiscuous mode [ 484.406515][ T8093] hsr_slave_1: entered promiscuous mode [ 484.408153][ T8093] debugfs: 'hsr0' already exists in 'hsr' [ 484.408181][ T8093] Cannot create hsr debugfs directory [ 484.495097][ T8281] netlink: 'syz.0.417': attribute type 1 has an invalid length. [ 484.569230][ T7894] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.633987][ T7765] pwc: recv_control_msg error -71 req 04 val 1100 [ 484.636096][ T7765] pwc: recv_control_msg error -71 req 04 val 1200 [ 484.655053][ T7765] pwc: Registered as video103. [ 484.664079][ T7765] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 484.694454][ T7765] usb 4-1: USB disconnect, device number 5 [ 484.720650][ T8012] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 484.784556][ T8012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.841912][ T3744] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.842043][ T3744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.863484][ T8012] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 484.897994][ T8012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.904649][ T8012] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 484.928947][ T8012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.015951][ T8012] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 485.035615][ T8012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.087762][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.087916][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.684547][ T8301] syz.5.421 uses obsolete (PF_INET,SOCK_PACKET) [ 486.434194][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 486.595631][ T29] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 486.598846][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.598896][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.598936][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 486.598999][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.630021][ T29] usb 4-1: config 0 descriptor?? [ 486.713489][ T8012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.884614][ T8012] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.919409][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 486.919540][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 487.013352][ T29] usb 4-1: USB disconnect, device number 6 [ 487.126267][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.126401][ T5973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.185988][ T8093] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 487.203262][ T8093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.205408][ T8093] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 487.227070][ T8093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.228222][ T8093] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 487.263635][ T8093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.298663][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.298788][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.299685][ T8093] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 487.348016][ T8093] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 491.792878][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.872138][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.919573][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.919702][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.985306][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.985441][ T6299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.522533][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 494.135288][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 494.157016][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 494.159542][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 494.161732][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 494.190879][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 496.192612][ T8383] Process accounting resumed [ 496.347231][ T5637] Bluetooth: hci3: command tx timeout [ 497.281494][ T8012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.579016][ T3764] bridge_slave_1: left allmulticast mode [ 497.579055][ T3764] bridge_slave_1: left promiscuous mode [ 497.579383][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.632367][ T3764] bridge_slave_0: left allmulticast mode [ 497.635408][ T3764] bridge_slave_0: left promiscuous mode [ 497.644607][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.731780][ T8404] overlayfs: overlapping lowerdir path [ 498.223929][ T8404] sd 0:0:1:0: PR command failed: 1026 [ 498.224287][ T8404] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 498.225501][ T8404] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 498.586814][ T5637] Bluetooth: hci3: command tx timeout [ 500.851764][ T5637] Bluetooth: hci3: command tx timeout [ 504.002754][ T5638] Bluetooth: hci3: command tx timeout [ 504.051707][ T3764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.097988][ T3764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.121984][ T3764] bond0 (unregistering): Released all slaves [ 504.234100][ T8355] rxe_eth0 speed is unknown, defaulting to 1000 [ 505.357900][ T8093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.615312][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 506.629384][ T5637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 506.634396][ T5637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 506.653044][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 506.653805][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 506.864805][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.864884][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.915452][ T5637] Bluetooth: hci6: command tx timeout [ 509.788113][ T3764] hsr_slave_0: left promiscuous mode [ 509.795869][ T3764] hsr_slave_1: left promiscuous mode [ 509.796936][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.821174][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.832694][ T3764] team0 (unregistering): Port device team_slave_1 removed [ 511.006059][ T3764] team0 (unregistering): Port device team_slave_0 removed [ 511.138766][ T5637] Bluetooth: hci6: command tx timeout [ 511.591588][ T8093] veth0_vlan: entered promiscuous mode [ 511.722795][ T8499] random: crng reseeded on system resumption [ 511.776861][ T8093] veth1_vlan: entered promiscuous mode [ 512.030452][ T8093] veth0_macvtap: entered promiscuous mode [ 512.088663][ T8093] veth1_macvtap: entered promiscuous mode [ 512.131996][ T8451] rxe_eth0 speed is unknown, defaulting to 1000 [ 512.754338][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.447'. [ 512.754388][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.447'. [ 512.908505][ T8514] gretap0: entered promiscuous mode [ 512.954734][ T8514] gretap0: left promiscuous mode [ 513.362876][ T5637] Bluetooth: hci6: command tx timeout [ 513.735191][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.735336][ T8355] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.735510][ T8355] bridge_slave_0: entered allmulticast mode [ 513.739816][ T8355] bridge_slave_0: entered promiscuous mode [ 513.777035][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.777920][ T8355] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.778076][ T8355] bridge_slave_1: entered allmulticast mode [ 513.786090][ T8355] bridge_slave_1: entered promiscuous mode [ 513.955662][ T8355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.101209][ T8536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.107025][ T8536] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 515.238203][ T8355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.492439][ T8355] team0: Port device team_slave_0 added [ 515.555633][ T8355] team0: Port device team_slave_1 added [ 515.556708][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 515.558952][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 515.559709][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 515.561233][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 515.562027][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 515.598914][ T5638] Bluetooth: hci6: command tx timeout [ 515.705483][ T3764] bridge_slave_1: left allmulticast mode [ 515.705521][ T3764] bridge_slave_1: left promiscuous mode [ 515.705757][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.719370][ T3764] bridge_slave_0: left allmulticast mode [ 515.719401][ T3764] bridge_slave_0: left promiscuous mode [ 515.719648][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.790279][ T3764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.822452][ T3764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.841362][ T3764] bond0 (unregistering): Released all slaves [ 516.969786][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.969812][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.969860][ T8355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.023781][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.023806][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.023853][ T8355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.296568][ T5638] Bluetooth: hci1: command 0x1003 tx timeout [ 517.298012][ T5637] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 517.638003][ T8355] hsr_slave_0: entered promiscuous mode [ 517.655548][ T8355] hsr_slave_1: entered promiscuous mode [ 517.810148][ T5637] Bluetooth: hci5: command tx timeout [ 518.637631][ T3764] hsr_slave_0: left promiscuous mode [ 518.649009][ T3764] hsr_slave_1: left promiscuous mode [ 518.651916][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.671455][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.866344][ T3764] team0 (unregistering): Port device team_slave_1 removed [ 519.905896][ T3764] team0 (unregistering): Port device team_slave_0 removed [ 520.033445][ T5638] Bluetooth: hci5: command tx timeout [ 520.803666][ T7765] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 521.045376][ T7765] usb 6-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 521.096441][ T7765] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 521.096544][ T7765] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 521.174792][ T7765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.174904][ T7765] usb 6-1: Product: syz [ 521.174974][ T7765] usb 6-1: Manufacturer: syz [ 521.175022][ T7765] usb 6-1: SerialNumber: syz [ 521.328797][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 521.329693][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 521.687236][ T7765] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 521.706187][ T8634] ceph: No mds server is up or the cluster is laggy [ 521.711963][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 521.712164][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 521.868926][ T7765] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 521.868926][ T7765] Please send a copy of this message to and [ 522.010185][ T8549] rxe_eth0 speed is unknown, defaulting to 1000 [ 522.022472][ T8451] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.023780][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.024000][ T8451] bridge_slave_0: entered allmulticast mode [ 522.050987][ T8451] bridge_slave_0: entered promiscuous mode [ 522.065305][ T8451] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.065497][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.065743][ T8451] bridge_slave_1: entered allmulticast mode [ 522.068496][ T8451] bridge_slave_1: entered promiscuous mode [ 522.258233][ T5638] Bluetooth: hci5: command tx timeout [ 522.333976][ T8451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.520842][ T8451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.732881][ T8451] team0: Port device team_slave_0 added [ 522.754258][ T8451] team0: Port device team_slave_1 added [ 522.940601][ T7765] scsi host1: usb-storage 6-1:1.0 [ 524.422088][ T8647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.467148][ T7765] usb 6-1: USB disconnect, device number 8 [ 524.480686][ T5638] Bluetooth: hci5: command tx timeout [ 524.662727][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.662753][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.662798][ T8451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.729582][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.729609][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.729657][ T8451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.335577][ T8451] hsr_slave_0: entered promiscuous mode [ 532.342545][ T8451] hsr_slave_1: entered promiscuous mode [ 532.343356][ T8451] debugfs: 'hsr0' already exists in 'hsr' [ 532.343384][ T8451] Cannot create hsr debugfs directory [ 533.502052][ T8355] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 533.526557][ T8355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.724989][ T8355] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 533.742498][ T8355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.764002][ T7765] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 533.886873][ T8355] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 533.913510][ T8355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.920803][ T7765] usb 4-1: Using ep0 maxpacket: 16 [ 533.923229][ T7765] usb 4-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 533.926852][ T7765] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.937605][ T7765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.937644][ T7765] usb 4-1: Product: syz [ 533.937669][ T7765] usb 4-1: Manufacturer: syz [ 533.937694][ T7765] usb 4-1: SerialNumber: syz [ 533.955132][ T7765] usb 4-1: config 0 descriptor?? [ 533.971875][ T7765] hub 4-1:0.0: bad descriptor, ignoring hub [ 533.971912][ T7765] hub 4-1:0.0: probe with driver hub failed with error -5 [ 534.005224][ T7765] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 534.055985][ T8355] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 534.069881][ T8355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.355458][ T3764] bridge_slave_1: left allmulticast mode [ 534.355495][ T3764] bridge_slave_1: left promiscuous mode [ 534.355746][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.376307][ T7765] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 534.428536][ T3764] bridge_slave_0: left allmulticast mode [ 534.428635][ T3764] bridge_slave_0: left promiscuous mode [ 534.428910][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.431094][ T7765] usb 4-1: USB disconnect, device number 7 [ 534.527470][ T8357] udevd[8357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.284170][ T8682] block nbd0: not configured, cannot reconfigure [ 536.150239][ T3764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.198694][ T3764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.350098][ T3764] bond0 (unregistering): Released all slaves [ 537.550170][ T8696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 537.554190][ T8696] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 537.578949][ T5783] libceph: connect (1)[c::]:6789 error -101 [ 537.579175][ T5783] libceph: mon0 (1)[c::]:6789 connect error [ 537.608553][ T5783] libceph: connect (1)[c::]:6789 error -101 [ 537.608865][ T5783] libceph: mon0 (1)[c::]:6789 connect error [ 537.689807][ T8697] ceph: No mds server is up or the cluster is laggy [ 539.694835][ T5783] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 539.704420][ T5637] Bluetooth: hci1: command 0x1003 tx timeout [ 539.704774][ T5638] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 539.802915][ T8721] batman_adv: batadv0: Adding interface: dummy0 [ 539.802941][ T8721] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.802992][ T8721] batman_adv: batadv0: Interface activated: dummy0 [ 539.875109][ T5783] usb 1-1: Using ep0 maxpacket: 16 [ 539.875870][ T5783] usb 1-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 539.877194][ T5783] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.880279][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.880323][ T5783] usb 1-1: Product: syz [ 539.880349][ T5783] usb 1-1: Manufacturer: syz [ 539.880374][ T5783] usb 1-1: SerialNumber: syz [ 539.948468][ T5783] usb 1-1: config 0 descriptor?? [ 539.969415][ T5783] hub 1-1:0.0: bad descriptor, ignoring hub [ 539.969454][ T5783] hub 1-1:0.0: probe with driver hub failed with error -5 [ 539.990051][ T5783] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 540.005103][ T8549] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.005224][ T8549] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.005387][ T8549] bridge_slave_0: entered allmulticast mode [ 540.010254][ T8549] bridge_slave_0: entered promiscuous mode [ 540.084505][ T5783] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 540.103581][ T8722] batadv0: mtu less than device minimum [ 540.105292][ T8722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 540.106847][ T8722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 540.108442][ T8722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 540.110041][ T8722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 540.111715][ T8722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 540.113325][ T8722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 540.114899][ T8722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 540.116460][ T8722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 540.118036][ T8722] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 540.216767][ T8357] udevd[8357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.257287][ T8549] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.259027][ T8549] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.259205][ T8549] bridge_slave_1: entered allmulticast mode [ 540.275529][ T8549] bridge_slave_1: entered promiscuous mode [ 540.421726][ T3764] hsr_slave_0: left promiscuous mode [ 540.433710][ T3764] hsr_slave_1: left promiscuous mode [ 540.434730][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.447697][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.453529][ T29] usb 1-1: USB disconnect, device number 9 [ 540.525711][ T3764] veth1_macvtap: left promiscuous mode [ 540.525764][ T3764] veth0_macvtap: left promiscuous mode [ 540.525947][ T3764] veth1_vlan: left promiscuous mode [ 540.526038][ T3764] veth0_vlan: left promiscuous mode [ 540.842946][ T8724] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 540.843136][ T8724] block device autoloading is deprecated and will be removed. [ 541.590713][ T29] libceph: connect (1)[c::]:6789 error -101 [ 541.590914][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 541.593759][ T8730] ceph: No mds server is up or the cluster is laggy [ 542.324832][ T8736] overlayfs: overlapping lowerdir path [ 543.228002][ T3764] team0 (unregistering): Port device team_slave_1 removed [ 543.299191][ T3764] team0 (unregistering): Port device team_slave_0 removed [ 544.902843][ T8549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.936064][ T8549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.729114][ T8549] team0: Port device team_slave_0 added [ 545.772907][ T8549] team0: Port device team_slave_1 added [ 546.112442][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.112469][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.112517][ T8549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.348538][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.348565][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.348612][ T8549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.385333][ T8759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 547.389362][ T8759] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 547.849122][ T8549] hsr_slave_0: entered promiscuous mode [ 547.891861][ T8549] hsr_slave_1: entered promiscuous mode [ 547.933144][ T8549] debugfs: 'hsr0' already exists in 'hsr' [ 547.933479][ T8549] Cannot create hsr debugfs directory [ 548.496694][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 548.669841][ T8355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.673519][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 548.686125][ T24] usb 1-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 548.700214][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.725531][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.725575][ T24] usb 1-1: Product: syz [ 548.725600][ T24] usb 1-1: Manufacturer: syz [ 548.725627][ T24] usb 1-1: SerialNumber: syz [ 548.761108][ T24] usb 1-1: config 0 descriptor?? [ 548.776661][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 548.776700][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 548.806575][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.809420][ T8451] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 549.736508][ T5637] Bluetooth: hci1: command 0x1003 tx timeout [ 549.737102][ T5638] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 549.808536][ T8451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.247796][ T8771] Process accounting resumed [ 550.332130][ T8451] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 550.396824][ T8451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.453981][ T8451] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 550.500487][ T8451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.506206][ T8451] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 550.544639][ T24] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 550.573527][ T8451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 550.593964][ T24] usb 1-1: USB disconnect, device number 10 [ 550.624669][ T8357] udevd[8357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.745461][ T8355] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.975933][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.976062][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.128307][ T3744] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.128488][ T3744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.530793][ T5790] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 551.689569][ T5790] usb 1-1: New USB device found: idVendor=1199, idProduct=b000, bcdDevice=0.00 [ 551.694471][ T5790] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 551.694515][ T5790] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 551.694571][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.095824][ T8451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.192038][ T1578] usb 1-1: USB disconnect, device number 11 [ 552.303946][ T8451] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.390451][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.390583][ T6588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.442057][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.442187][ T5917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.955006][ T8549] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 552.985701][ T8549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 553.004504][ T8549] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 553.030834][ T8549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.034341][ T8549] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 553.060084][ T8549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.065469][ T8549] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 553.096905][ T8549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 555.638790][ T8816] ceph: No mds server is up or the cluster is laggy [ 555.646603][ T7765] libceph: connect (1)[c::]:6789 error -101 [ 555.646807][ T7765] libceph: mon0 (1)[c::]:6789 connect error [ 556.299491][ T8549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.487890][ T8549] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.554976][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.555104][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.592295][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.592423][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.749389][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.507'. [ 558.604395][ T8844] random: crng reseeded on system resumption [ 558.953020][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 558.955978][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 558.956738][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 559.011466][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 559.015896][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 559.728712][ T8451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.259336][ T5638] Bluetooth: hci1: command tx timeout [ 562.337871][ T8872] Process accounting resumed [ 562.943468][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 563.481286][ T5638] Bluetooth: hci1: command tx timeout [ 563.484911][ T24] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 563.486289][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.486338][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.486379][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 563.486444][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.557078][ T24] usb 6-1: config 0 descriptor?? [ 563.557677][ T5917] bridge_slave_1: left allmulticast mode [ 563.557710][ T5917] bridge_slave_1: left promiscuous mode [ 563.558020][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.727774][ T5917] bridge_slave_0: left allmulticast mode [ 563.727839][ T5917] bridge_slave_0: left promiscuous mode [ 563.751645][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.169412][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 564.500733][ T5790] usb 6-1: USB disconnect, device number 9 [ 565.677821][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.705252][ T5637] Bluetooth: hci1: command tx timeout [ 565.739067][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.772541][ T5917] bond0 (unregistering): Released all slaves [ 566.042286][ T986] libceph: connect (1)[c::]:6789 error -101 [ 566.043399][ T986] libceph: mon0 (1)[c::]:6789 connect error [ 566.061012][ T5292] 8021q: adding VLAN 0 to HW filter on device eth13 [ 566.242527][ T8549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.352320][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 566.353282][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 566.833958][ T8847] rxe_eth0 speed is unknown, defaulting to 1000 [ 566.980334][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 566.981190][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 567.029326][ T29] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 567.217914][ T29] usb 4-1: New USB device found: idVendor=06a3, idProduct=0cd0, bcdDevice=0.4b [ 567.244889][ T29] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 567.244932][ T29] usb 4-1: config 0 has no interface number 0 [ 567.244988][ T29] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.245035][ T29] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.245075][ T29] usb 4-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 567.245124][ T29] usb 4-1: config 0 interface 16 has no altsetting 0 [ 567.245174][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.368824][ T8451] veth0_vlan: entered promiscuous mode [ 567.370283][ T8921] ceph: No mds server is up or the cluster is laggy [ 567.390044][ T29] usb 4-1: config 0 descriptor?? [ 567.488461][ T8451] veth1_vlan: entered promiscuous mode [ 567.510514][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 567.724944][ T8451] veth0_macvtap: entered promiscuous mode [ 567.772977][ T8451] veth1_macvtap: entered promiscuous mode [ 567.930172][ T5638] Bluetooth: hci1: command tx timeout [ 567.931953][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.996781][ T29] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 567.996842][ T29] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 567.996877][ T29] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 567.996911][ T29] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 567.996944][ T29] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 567.996977][ T29] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 567.997011][ T29] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 567.997044][ T29] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 567.997077][ T29] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 567.997110][ T29] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 567.997162][ T29] saitek 0003:06A3:0CD0.0006: unbalanced collection at end of report description [ 568.000892][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.016936][ T29] saitek 0003:06A3:0CD0.0006: parse failed [ 568.017065][ T29] saitek 0003:06A3:0CD0.0006: probe with driver saitek failed with error -22 [ 568.100652][ T39] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.103408][ T5918] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.103771][ T5918] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.103851][ T5918] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.159109][ T986] usb 4-1: USB disconnect, device number 8 [ 571.395869][ T8948] fuse: fd is not a fuse device [ 571.912570][ T8952] 9pnet_fd: p9_fd_create_unix (8952): problem connecting socket: ./file0: -111 [ 571.918089][ T8952] netlink: 'syz.0.523': attribute type 4 has an invalid length. [ 571.918169][ T8952] netlink: 'syz.0.523': attribute type 5 has an invalid length. [ 571.918221][ T8952] netlink: 'syz.0.523': attribute type 1 has an invalid length. [ 571.918269][ T8952] netlink: 'syz.0.523': attribute type 4 has an invalid length. [ 571.918321][ T8952] netlink: 'syz.0.523': attribute type 5 has an invalid length. [ 571.918373][ T8952] netlink: 'syz.0.523': attribute type 1 has an invalid length. [ 571.918421][ T8952] iwpm_register_pid_cb: Could not find a matching request (seq = 830110067) [ 572.549240][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.549318][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.442828][ T5917] hsr_slave_0: left promiscuous mode [ 575.984180][ T5917] hsr_slave_1: left promiscuous mode [ 575.985242][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.037477][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.449703][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 576.454024][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 576.457595][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 576.465719][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 576.480109][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 578.443314][ T8082] libceph: connect (1)[c::]:6789 error -101 [ 578.443490][ T8082] libceph: mon0 (1)[c::]:6789 connect error [ 578.451755][ T5917] team0 (unregistering): Port device team_slave_1 removed [ 578.716217][ T5638] Bluetooth: hci3: command tx timeout [ 578.721229][ T8082] libceph: connect (1)[c::]:6789 error -101 [ 578.723404][ T8082] libceph: mon0 (1)[c::]:6789 connect error [ 578.934978][ T8996] ceph: No mds server is up or the cluster is laggy [ 578.939772][ T5917] team0 (unregistering): Port device team_slave_0 removed [ 579.028089][ T9001] fuse: fd is not a fuse device [ 579.503818][ T9004] 9pnet_fd: p9_fd_create_unix (9004): problem connecting socket: ./file0: -111 [ 579.509684][ T9004] netlink: 'syz.5.533': attribute type 4 has an invalid length. [ 579.509765][ T9004] netlink: 'syz.5.533': attribute type 5 has an invalid length. [ 579.509840][ T9004] netlink: 'syz.5.533': attribute type 1 has an invalid length. [ 579.509918][ T9004] netlink: 'syz.5.533': attribute type 4 has an invalid length. [ 579.510002][ T9004] netlink: 'syz.5.533': attribute type 5 has an invalid length. [ 579.510054][ T9004] netlink: 'syz.5.533': attribute type 1 has an invalid length. [ 579.510102][ T9004] iwpm_register_pid_cb: Could not find a matching request (seq = 830110067) [ 580.927061][ T5638] Bluetooth: hci3: command tx timeout [ 581.019567][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 581.020380][ T5637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 581.021180][ T5637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 581.038902][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 581.055932][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 581.121717][ T5292] 8021q: adding VLAN 0 to HW filter on device eth15 [ 581.123070][ T8989] lo: entered allmulticast mode [ 581.335317][ T8989] lo: left allmulticast mode [ 581.772809][ T8082] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 581.940253][ T8082] usb 4-1: New USB device found: idVendor=06a3, idProduct=0cd0, bcdDevice=0.4b [ 581.958548][ T8082] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 581.958592][ T8082] usb 4-1: config 0 has no interface number 0 [ 581.958645][ T8082] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.958690][ T8082] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.958728][ T8082] usb 4-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.958776][ T8082] usb 4-1: config 0 interface 16 has no altsetting 0 [ 581.958823][ T8082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.064140][ T8082] usb 4-1: config 0 descriptor?? [ 583.599862][ T5637] Bluetooth: hci6: command tx timeout [ 583.600792][ T5638] Bluetooth: hci3: command tx timeout [ 584.247026][ T8082] usbhid 4-1:0.16: can't add hid device: -71 [ 584.247155][ T8082] usbhid 4-1:0.16: probe with driver usbhid failed with error -71 [ 584.277163][ T8082] usb 4-1: USB disconnect, device number 9 [ 584.511667][ T5917] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.678726][ T5638] Bluetooth: hci3: command tx timeout [ 586.678773][ T5638] Bluetooth: hci6: command tx timeout [ 586.709359][ T5917] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.026763][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.044961][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.045151][ T8847] bridge_slave_0: entered allmulticast mode [ 587.068953][ T8847] bridge_slave_0: entered promiscuous mode [ 587.108577][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.108699][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.108867][ T8847] bridge_slave_1: entered allmulticast mode [ 587.131016][ T8847] bridge_slave_1: entered promiscuous mode [ 587.348606][ T5917] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.567222][ T8847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.567302][ T8976] rxe_eth0 speed is unknown, defaulting to 1000 [ 587.606891][ T8847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.831132][ T5917] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.934611][ T5292] 8021q: adding VLAN 0 to HW filter on device eth16 [ 588.891576][ T5637] Bluetooth: hci6: command tx timeout [ 589.477734][ T8847] team0: Port device team_slave_0 added [ 589.506180][ T8847] team0: Port device team_slave_1 added [ 589.852977][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.853004][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.853050][ T8847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.867423][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.867447][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.867492][ T8847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.223522][ T8847] hsr_slave_0: entered promiscuous mode [ 590.229338][ T8847] hsr_slave_1: entered promiscuous mode [ 590.709588][ T9008] rxe_eth0 speed is unknown, defaulting to 1000 [ 591.104578][ T5637] Bluetooth: hci6: command tx timeout [ 591.774226][ T5917] bridge_slave_1: left allmulticast mode [ 591.774262][ T5917] bridge_slave_1: left promiscuous mode [ 591.774518][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.884952][ T2234] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 591.893868][ T5917] bridge_slave_0: left allmulticast mode [ 591.893897][ T5917] bridge_slave_0: left promiscuous mode [ 591.894095][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.023988][ T2234] usb 4-1: device descriptor read/64, error -71 [ 592.291619][ T2234] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 592.432546][ T2234] usb 4-1: device descriptor read/64, error -71 [ 592.554925][ T2234] usb usb4-port1: attempt power cycle [ 592.820558][ T9096] fuse: fd is not a fuse device [ 593.084352][ T2234] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 593.117815][ T2234] usb 4-1: device descriptor read/8, error -71 [ 593.307837][ T9098] netlink: 'syz.5.543': attribute type 4 has an invalid length. [ 593.307921][ T9098] netlink: 'syz.5.543': attribute type 5 has an invalid length. [ 593.307973][ T9098] netlink: 'syz.5.543': attribute type 1 has an invalid length. [ 593.308021][ T9098] netlink: 'syz.5.543': attribute type 4 has an invalid length. [ 593.308104][ T9098] netlink: 'syz.5.543': attribute type 5 has an invalid length. [ 593.308156][ T9098] netlink: 'syz.5.543': attribute type 1 has an invalid length. [ 593.308228][ T9098] iwpm_register_pid_cb: Could not find a matching request (seq = 830110067) [ 593.542386][ T2234] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 593.582942][ T2234] usb 4-1: device descriptor read/8, error -71 [ 593.807995][ T2234] usb usb4-port1: unable to enumerate USB device [ 594.071525][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.154002][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.165434][ T5917] bond0 (unregistering): Released all slaves [ 594.335817][ T9089] lo: entered allmulticast mode [ 594.492822][ T9089] lo: left allmulticast mode [ 596.767731][ T8513] syz.0.442 (8513) used greatest stack depth: 17240 bytes left [ 597.399176][ T5917] hsr_slave_0: left promiscuous mode [ 597.407558][ T5917] hsr_slave_1: left promiscuous mode [ 597.409456][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.409485][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.429087][ T986] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 597.442116][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.442148][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.463400][ T5917] veth1_macvtap: left promiscuous mode [ 597.463450][ T5917] veth0_macvtap: left promiscuous mode [ 597.463635][ T5917] veth1_vlan: left promiscuous mode [ 597.463726][ T5917] veth0_vlan: left promiscuous mode [ 597.605658][ T986] usb 4-1: New USB device found: idVendor=06a3, idProduct=0cd0, bcdDevice=0.4b [ 597.608090][ T986] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 597.608131][ T986] usb 4-1: config 0 has no interface number 0 [ 597.608185][ T986] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.608232][ T986] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.609907][ T986] usb 4-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.609958][ T986] usb 4-1: config 0 interface 16 has no altsetting 0 [ 597.610008][ T986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.614794][ T986] usb 4-1: config 0 descriptor?? [ 598.150083][ T986] usbhid 4-1:0.16: can't add hid device: -71 [ 598.150213][ T986] usbhid 4-1:0.16: probe with driver usbhid failed with error -71 [ 598.179441][ T986] usb 4-1: USB disconnect, device number 14 [ 598.197166][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 598.254649][ T5917] team0 (unregistering): Port device team_slave_1 removed [ 598.313265][ T5917] team0 (unregistering): Port device team_slave_0 removed [ 598.353809][ T24] usb 6-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 598.356084][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.356145][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 598.356189][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 598.356232][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 598.356275][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 598.356318][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 598.356361][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 598.356404][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 598.356447][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 598.356490][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 598.356528][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 598.356570][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 598.360396][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.360434][ T24] usb 6-1: Product: syz [ 598.360459][ T24] usb 6-1: Manufacturer: syz [ 598.360486][ T24] usb 6-1: SerialNumber: syz [ 598.525108][ T9138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 598.525299][ T9138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 598.525477][ T9138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 598.525651][ T9138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 598.525819][ T9138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 598.525996][ T9138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 598.526488][ T9138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 598.526723][ T9138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 598.594512][ T24] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 598.604842][ T24] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 598.619740][ T24] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 598.630737][ T24] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 598.637507][ T24] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 598.637624][ T24] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 598.637754][ T24] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 598.679533][ T24] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 599.110562][ T24] usb 6-1: USB disconnect, device number 10 [ 599.174571][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 599.202630][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 599.205918][ T24] keyspan 6-1:1.0: device disconnected [ 602.068850][ T9167] lo: entered allmulticast mode [ 602.069223][ T9167] lo: left allmulticast mode [ 602.070253][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.070379][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.070558][ T8976] bridge_slave_0: entered allmulticast mode [ 602.084008][ T8976] bridge_slave_0: entered promiscuous mode [ 602.090287][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.097271][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.097445][ T8976] bridge_slave_1: entered allmulticast mode [ 602.106249][ T8976] bridge_slave_1: entered promiscuous mode [ 602.352951][ T8976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.363959][ T8976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.479483][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 604.012220][ T24] usb 1-1: device descriptor read/64, error -71 [ 604.266126][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 604.282125][ T8976] team0: Port device team_slave_0 added [ 604.403807][ T24] usb 1-1: device descriptor read/64, error -71 [ 604.458732][ T8976] team0: Port device team_slave_1 added [ 604.522775][ T24] usb usb1-port1: attempt power cycle [ 604.686207][ T9188] fuse: fd is not a fuse device [ 604.774740][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.774766][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.774815][ T8976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.786502][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.786524][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.786571][ T8976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.816233][ T9008] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.816358][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.816523][ T9008] bridge_slave_0: entered allmulticast mode [ 604.826631][ T9008] bridge_slave_0: entered promiscuous mode [ 604.988797][ T9008] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.988916][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.989087][ T9008] bridge_slave_1: entered allmulticast mode [ 604.991717][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 604.993427][ T9008] bridge_slave_1: entered promiscuous mode [ 605.015737][ T24] usb 1-1: device descriptor read/8, error -71 [ 605.221573][ T9191] netlink: 'syz.3.554': attribute type 4 has an invalid length. [ 605.221658][ T9191] netlink: 'syz.3.554': attribute type 5 has an invalid length. [ 605.221739][ T9191] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 605.221788][ T9191] netlink: 'syz.3.554': attribute type 4 has an invalid length. [ 605.221899][ T9191] netlink: 'syz.3.554': attribute type 5 has an invalid length. [ 605.221956][ T9191] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 605.222004][ T9191] iwpm_register_pid_cb: Could not find a matching request (seq = 830110067) [ 605.462248][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 605.801095][ T24] usb 1-1: device descriptor read/8, error -71 [ 605.915858][ T24] usb usb1-port1: unable to enumerate USB device [ 607.183316][ T9206] random: crng reseeded on system resumption [ 607.304485][ T9008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.423261][ T9008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.536036][ T8082] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 607.540179][ T8847] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 607.565254][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 607.574179][ T8847] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 607.619763][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 607.640211][ T8976] hsr_slave_0: entered promiscuous mode [ 607.645959][ T8976] hsr_slave_1: entered promiscuous mode [ 607.646801][ T8976] debugfs: 'hsr0' already exists in 'hsr' [ 607.646828][ T8976] Cannot create hsr debugfs directory [ 607.696242][ T8847] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 607.699434][ T8082] usb 4-1: New USB device found: idVendor=06a3, idProduct=0cd0, bcdDevice=0.4b [ 607.700942][ T8082] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 607.700981][ T8082] usb 4-1: config 0 has no interface number 0 [ 607.701034][ T8082] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.701080][ T8082] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.701120][ T8082] usb 4-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 607.701167][ T8082] usb 4-1: config 0 interface 16 has no altsetting 0 [ 607.701214][ T8082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.706605][ T8082] usb 4-1: config 0 descriptor?? [ 607.709796][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 607.730451][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 607.845013][ T9008] team0: Port device team_slave_0 added [ 607.845381][ T8847] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 607.871910][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 607.873437][ T9] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 607.878095][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 607.881528][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 607.881596][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.891588][ T9] usb 1-1: config 0 descriptor?? [ 607.967377][ T9008] team0: Port device team_slave_1 added [ 608.196826][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 608.280478][ T8082] usbhid 4-1:0.16: can't add hid device: -71 [ 608.280611][ T8082] usbhid 4-1:0.16: probe with driver usbhid failed with error -71 [ 608.300277][ T8082] usb 4-1: USB disconnect, device number 15 [ 608.349019][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.349046][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.349094][ T9008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.463955][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.463976][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.464012][ T9008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.850819][ T3764] bridge_slave_1: left allmulticast mode [ 608.852127][ T3764] bridge_slave_1: left promiscuous mode [ 608.852505][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.863608][ T3764] bridge_slave_0: left allmulticast mode [ 608.863640][ T3764] bridge_slave_0: left promiscuous mode [ 608.863936][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.940112][ T2234] usb 1-1: USB disconnect, device number 16 [ 611.419029][ T9234] [ 611.421390][ T9234] ====================================================== [ 611.428492][ T9234] WARNING: possible circular locking dependency detected [ 611.435514][ T9234] syzkaller #0 Not tainted [ 611.439932][ T9234] ------------------------------------------------------ [ 611.446948][ T9234] syz.5.559/9234 is trying to acquire lock: [ 611.452845][ T9234] ffffffff91630168 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 611.464154][ T9234] [ 611.464154][ T9234] but task is already holding lock: [ 611.471519][ T9234] ffff8880473a7a40 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 611.482025][ T9234] [ 611.482025][ T9234] which lock already depends on the new lock. [ 611.482025][ T9234] [ 611.492429][ T9234] [ 611.492429][ T9234] the existing dependency chain (in reverse order) is: [ 611.501448][ T9234] [ 611.501448][ T9234] -> #3 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 611.510185][ T9234] lock_acquire+0x1d1/0x380 [ 611.515245][ T9234] down_write+0x86/0x1f0 [ 611.520042][ T9234] configfs_depend_item_unlocked+0xf3/0x6a0 [ 611.526500][ T9234] usbg_make_tpg+0x251/0x610 [ 611.531656][ T9234] target_fabric_make_tpg+0xab/0x8c0 [ 611.537500][ T9234] configfs_mkdir+0x525/0xd40 [ 611.542745][ T9234] vfs_mkdir+0x367/0x850 [ 611.547542][ T9234] filename_mkdirat+0x48b/0x5e0 [ 611.552931][ T9234] __x64_sys_mkdirat+0x89/0xc0 [ 611.558233][ T9234] do_syscall_64+0x123/0x790 [ 611.563379][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.569822][ T9234] [ 611.569822][ T9234] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 611.577785][ T9234] lock_acquire+0x1d1/0x380 [ 611.582852][ T9234] __mutex_lock+0x19f/0x1c10 [ 611.588002][ T9234] tcm_alloc_inst+0x5f/0x1e0 [ 611.593243][ T9234] try_get_usb_function_instance+0x136/0x1f0 [ 611.599775][ T9234] usb_get_function_instance+0x16/0x70 [ 611.605784][ T9234] function_make+0x18c/0x3f0 [ 611.610944][ T9234] configfs_mkdir+0x525/0xd40 [ 611.616186][ T9234] vfs_mkdir+0x367/0x850 [ 611.620979][ T9234] filename_mkdirat+0x48b/0x5e0 [ 611.626378][ T9234] __x64_sys_mkdirat+0x89/0xc0 [ 611.631683][ T9234] do_syscall_64+0x123/0x790 [ 611.636826][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.643276][ T9234] [ 611.643276][ T9234] -> #1 (func_lock){+.+.}-{4:4}: [ 611.650444][ T9234] lock_acquire+0x1d1/0x380 [ 611.655504][ T9234] __mutex_lock+0x19f/0x1c10 [ 611.660642][ T9234] try_get_usb_function_instance+0x26/0x1f0 [ 611.667092][ T9234] usb_get_function_instance+0x16/0x70 [ 611.673097][ T9234] function_make+0x18c/0x3f0 [ 611.678256][ T9234] configfs_mkdir+0x525/0xd40 [ 611.683497][ T9234] vfs_mkdir+0x367/0x850 [ 611.688279][ T9234] filename_mkdirat+0x48b/0x5e0 [ 611.693663][ T9234] __x64_sys_mkdirat+0x89/0xc0 [ 611.698956][ T9234] do_syscall_64+0x123/0x790 [ 611.704094][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.710526][ T9234] [ 611.710526][ T9234] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 611.718816][ T9234] check_prev_add+0xeb/0xe60 [ 611.723970][ T9234] __lock_acquire+0x1528/0x1f40 [ 611.729385][ T9234] lock_acquire+0x1d1/0x380 [ 611.734445][ T9234] __mutex_lock+0x19f/0x1c10 [ 611.739589][ T9234] uvcg_streaming_header_allow_link+0x7c/0x650 [ 611.746307][ T9234] configfs_symlink+0x695/0x1340 [ 611.751782][ T9234] vfs_symlink+0x17b/0x4e0 [ 611.756754][ T9234] filename_symlinkat+0x2a6/0x560 [ 611.762317][ T9234] __x64_sys_symlink+0x79/0xb0 [ 611.767620][ T9234] do_syscall_64+0x123/0x790 [ 611.772759][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.779193][ T9234] [ 611.779193][ T9234] other info that might help us debug this: [ 611.779193][ T9234] [ 611.789422][ T9234] Chain exists of: [ 611.789422][ T9234] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#24 [ 611.789422][ T9234] [ 611.804430][ T9234] Possible unsafe locking scenario: [ 611.804430][ T9234] [ 611.811882][ T9234] CPU0 CPU1 [ 611.817245][ T9234] ---- ---- [ 611.822609][ T9234] lock(&sb->s_type->i_mutex_key#24); [ 611.828187][ T9234] lock(tpg_instances_lock); [ 611.835402][ T9234] lock(&sb->s_type->i_mutex_key#24); [ 611.843420][ T9234] lock(gadget_subsys.su_mutex); [ 611.848467][ T9234] [ 611.848467][ T9234] *** DEADLOCK *** [ 611.848467][ T9234] [ 611.856643][ T9234] locks held by syz.5.559/9234: 2, last CPU#1: [ 611.862827][ T9234] #0: ffff88801ff28460 (sb_writers#12){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 611.872424][ T9234] #1: ffff8880473a7a40 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 611.883384][ T9234] [ 611.883384][ T9234] stack backtrace: [ 611.889274][ T9234] CPU: 1 UID: 0 PID: 9234 Comm: syz.5.559 Not tainted syzkaller #0 PREEMPT(full) [ 611.898497][ T9234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 611.908571][ T9234] Call Trace: [ 611.911989][ T9234] [ 611.914936][ T9234] dump_stack_lvl+0x100/0x190 [ 611.919662][ T9234] print_circular_bug.cold+0x178/0x1be [ 611.925204][ T9234] check_noncircular+0x146/0x160 [ 611.930436][ T9234] ? lock_acquire+0x1d1/0x380 [ 611.935163][ T9234] check_prev_add+0xeb/0xe60 [ 611.939790][ T9234] ? lockdep_hardirqs_on+0x7d/0x110 [ 611.945025][ T9234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.950692][ T9234] __lock_acquire+0x1528/0x1f40 [ 611.955581][ T9234] ? kasan_save_free_info+0x3b/0x70 [ 611.960799][ T9234] ? __kasan_slab_free+0x5f/0x80 [ 611.965780][ T9234] lock_acquire+0x1d1/0x380 [ 611.970311][ T9234] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 611.976688][ T9234] ? __pfx___might_resched+0x10/0x10 [ 611.982002][ T9234] __mutex_lock+0x19f/0x1c10 [ 611.986624][ T9234] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 611.992996][ T9234] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 611.999373][ T9234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.005038][ T9234] ? __pfx___mutex_lock+0x10/0x10 [ 612.010102][ T9234] ? __pfx___might_resched+0x10/0x10 [ 612.015414][ T9234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.021081][ T9234] ? make_vfsgid+0xf1/0x140 [ 612.025629][ T9234] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 612.031999][ T9234] uvcg_streaming_header_allow_link+0x7c/0x650 [ 612.038370][ T9234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.044032][ T9234] ? inode_permission+0x377/0x630 [ 612.049089][ T9234] ? mntput_no_expire+0xe8/0x220 [ 612.054075][ T9234] configfs_symlink+0x695/0x1340 [ 612.059038][ T9234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.064707][ T9234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.070374][ T9234] ? security_inode_permission+0xc4/0x280 [ 612.076132][ T9234] ? __pfx_configfs_symlink+0x10/0x10 [ 612.081542][ T9234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.087193][ T9234] vfs_symlink+0x17b/0x4e0 [ 612.091628][ T9234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.097278][ T9234] filename_symlinkat+0x2a6/0x560 [ 612.102315][ T9234] ? __pfx_filename_symlinkat+0x10/0x10 [ 612.107871][ T9234] ? strncpy_from_user+0x19d/0x2d0 [ 612.112995][ T9234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.118647][ T9234] ? do_getname+0x191/0x390 [ 612.123166][ T9234] __x64_sys_symlink+0x79/0xb0 [ 612.127975][ T9234] do_syscall_64+0x123/0x790 [ 612.132589][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.138493][ T9234] RIP: 0033:0x7f7e3439f559 [ 612.142909][ T9234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.162527][ T9234] RSP: 002b:00007f7e351a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 612.170953][ T9234] RAX: ffffffffffffffda RBX: 00007f7e34625fa0 RCX: 00007f7e3439f559 [ 612.178925][ T9234] RDX: 0000000000000000 RSI: 0000200000019780 RDI: 0000200000019740 [ 612.186897][ T9234] RBP: 00007f7e34436b20 R08: 0000000000000000 R09: 0000000000000000 [ 612.194868][ T9234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.202839][ T9234] R13: 00007f7e34626038 R14: 00007f7e34625fa0 R15: 00007ffd730b9d68 [ 612.210831][ T9234] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 613.865201][ T3764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.937284][ T3764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.964921][ T3764] bond0 (unregistering): Released all slaves [ 614.014983][ T9008] hsr_slave_0: entered promiscuous mode [ 614.027574][ T9008] hsr_slave_1: entered promiscuous mode [ 614.029841][ T9008] debugfs: 'hsr0' already exists in 'hsr' [ 614.029867][ T9008] Cannot create hsr debugfs directory [ 614.072968][ T9241] lo: entered allmulticast mode [ 614.073118][ T9241] lo: left allmulticast mode [ 614.739023][ T3764] hsr_slave_0: left promiscuous mode [ 614.759813][ T3764] hsr_slave_1: left promiscuous mode [ 614.760427][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.780491][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.144051][ T3764] team0 (unregistering): Port device team_slave_1 removed [ 615.160895][ T3764] team0 (unregistering): Port device team_slave_0 removed [ 615.731224][ T5292] 8021q: adding VLAN 0 to HW filter on device eth13 [ 616.218219][ T3764] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.263652][ T3764] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.284345][ T5292] 8021q: adding VLAN 0 to HW filter on device eth16 [ 616.322909][ T3764] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.390023][ T3764] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.526498][ T3764] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.600437][ T3764] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.664702][ T3764] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.729618][ T3764] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.840754][ T3764] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.899258][ T3764] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.942388][ T3764] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.956442][ T5292] 8021q: adding VLAN 0 to HW filter on device eth17 [ 617.022035][ T3764] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.153508][ T3764] bridge_slave_1: left allmulticast mode [ 617.153542][ T3764] bridge_slave_1: left promiscuous mode [ 617.153720][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.155994][ T3764] bridge_slave_0: left allmulticast mode [ 617.156020][ T3764] bridge_slave_0: left promiscuous mode [ 617.156170][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.189098][ T3764] bridge_slave_1: left allmulticast mode [ 617.189132][ T3764] bridge_slave_1: left promiscuous mode [ 617.189305][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.203568][ T3764] bridge_slave_0: left allmulticast mode [ 617.203602][ T3764] bridge_slave_0: left promiscuous mode [ 617.203749][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.233457][ T3764] bridge_slave_1: left allmulticast mode [ 617.233491][ T3764] bridge_slave_1: left promiscuous mode [ 617.233654][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.235134][ T3764] bridge_slave_0: left allmulticast mode [ 617.235160][ T3764] bridge_slave_0: left promiscuous mode [ 617.235299][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.272625][ T3764] bridge_slave_1: left allmulticast mode [ 617.272674][ T3764] bridge_slave_1: left promiscuous mode [ 617.272833][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.274497][ T3764] bridge_slave_0: left allmulticast mode [ 617.274523][ T3764] bridge_slave_0: left promiscuous mode [ 617.274660][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.301496][ T3764] bridge_slave_1: left allmulticast mode [ 617.301529][ T3764] bridge_slave_1: left promiscuous mode [ 617.301688][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.314637][ T3764] bridge_slave_0: left allmulticast mode [ 617.314669][ T3764] bridge_slave_0: left promiscuous mode [ 617.314813][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.484375][ T3764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.499190][ T3764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.509235][ T3764] bond0 (unregistering): Released all slaves [ 617.568650][ T3764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.570639][ T3764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.571936][ T3764] bond0 (unregistering): Released all slaves [ 617.652798][ T3764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.654696][ T3764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.656009][ T3764] bond0 (unregistering): Released all slaves [ 617.698666][ T3764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.700538][ T3764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.701712][ T3764] bond0 (unregistering): Released all slaves [ 617.774732][ T3764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.776763][ T3764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.786220][ T3764] bond0 (unregistering): Released all slaves [ 618.040422][ T5292] 8021q: adding VLAN 0 to HW filter on device eth18 [ 618.502204][ T5292] 8021q: adding VLAN 0 to HW filter on device eth14 [ 618.776433][ T3764] hsr_slave_0: left promiscuous mode [ 618.777121][ T3764] hsr_slave_1: left promiscuous mode [ 618.777877][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.778408][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.782017][ T3764] hsr_slave_0: left promiscuous mode [ 618.808673][ T3764] hsr_slave_1: left promiscuous mode [ 618.818233][ T3764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.818258][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.823905][ T3764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.823930][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.851468][ T3764] hsr_slave_0: left promiscuous mode [ 618.852054][ T3764] hsr_slave_1: left promiscuous mode [ 618.852693][ T3764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.852719][ T3764] net_ratelimit: 10 callbacks suppressed [ 618.852738][ T3764] batadv0: mtu less than device minimum [ 618.853553][ T3764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.854390][ T3764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.855189][ T3764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.856006][ T3764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.856811][ T3764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.857662][ T3764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.858455][ T3764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.859267][ T3764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.860059][ T3764] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.884117][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.887185][ T3764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.908706][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.909697][ T3764] batman_adv: batadv0: Interface deactivated: dummy0 [ 618.909721][ T3764] batman_adv: batadv0: Removing interface: dummy0 [ 618.930498][ T3764] hsr_slave_0: left promiscuous mode [ 618.940946][ T3764] hsr_slave_1: left promiscuous mode [ 618.941569][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.951735][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.999160][ T3764] hsr_slave_0: left promiscuous mode [ 619.004428][ T3764] hsr_slave_1: left promiscuous mode [ 619.004992][ T3764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.005017][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.011542][ T3764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.011566][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.051609][ T3764] veth1_macvtap: left promiscuous mode [ 619.051650][ T3764] veth0_macvtap: left promiscuous mode [ 619.051736][ T3764] veth1_vlan: left promiscuous mode [ 619.051811][ T3764] veth0_vlan: left promiscuous mode [ 619.075048][ T3764] veth1_macvtap: left promiscuous mode [ 619.075090][ T3764] veth0_macvtap: left promiscuous mode [ 619.075174][ T3764] veth1_vlan: left promiscuous mode [ 619.075235][ T3764] veth0_vlan: left promiscuous mode [ 619.098544][ T3764] veth1_macvtap: left promiscuous mode [ 619.098600][ T3764] veth0_macvtap: left promiscuous mode [ 619.098685][ T3764] veth1_vlan: left promiscuous mode [ 619.098746][ T3764] veth0_vlan: left promiscuous mode [ 619.423459][ T3764] team0 (unregistering): Port device team_slave_1 removed [ 619.441470][ T3764] team0 (unregistering): Port device team_slave_0 removed [ 619.576875][ T3764] team0 (unregistering): Port device team_slave_1 removed [ 619.581828][ T3764] team0 (unregistering): Port device team_slave_0 removed [ 619.728248][ T3764] team0 (unregistering): Port device team_slave_1 removed [ 619.732690][ T3764] team0 (unregistering): Port device team_slave_0 removed [ 619.810066][ T3764] team0 (unregistering): Port device team_slave_1 removed [ 619.815836][ T3764] team0 (unregistering): Port device team_slave_0 removed [ 619.950327][ T3764] team0 (unregistering): Port device team_slave_1 removed [ 619.954750][ T3764] team0 (unregistering): Port device team_slave_0 removed [ 620.836589][ T5292] 8021q: adding VLAN 0 to HW filter on device eth19 [ 620.958000][ T3764] bridge_slave_1: left allmulticast mode [ 620.958036][ T3764] bridge_slave_1: left promiscuous mode [ 620.958208][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.959615][ T3764] bridge_slave_0: left allmulticast mode [ 620.959642][ T3764] bridge_slave_0: left promiscuous mode [ 620.959795][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.024117][ T3764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.025809][ T3764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.026885][ T3764] bond0 (unregistering): Released all slaves [ 621.192476][ T3764] hsr_slave_0: left promiscuous mode [ 621.192995][ T3764] hsr_slave_1: left promiscuous mode [ 621.193578][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.194065][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.285060][ T3764] team0 (unregistering): Port device team_slave_1 removed [ 621.290775][ T3764] team0 (unregistering): Port device team_slave_0 removed [ 621.370577][ T5292] 8021q: adding VLAN 0 to HW filter on device eth20