last executing test programs: 7m2.804926303s ago: executing program 3 (id=385): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000800)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x30, 0x0, @in={0x2, 0x4e21, @loopback}, @ib={0x1b, 0xfffe, 0x0, {"00000000000000000000000000000001"}, 0x80000003, 0x3, 0x4}}}, 0x118) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) read$sequencer(r0, &(0x7f0000000500)=""/189, 0xbd) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, 0x0, 0x40040c0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7m0.486811419s ago: executing program 3 (id=391): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6m56.288997105s ago: executing program 3 (id=397): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4e7b46dc8e25ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc0700d6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x20000010) 6m56.080821221s ago: executing program 3 (id=400): socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfae8}, 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c17", 0xb6}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x148}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x5, 0x27, 0x2006, 0xf1, 0x20008, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x4, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x9f, 0x6, 0x4, 0xee, 0x4, 0x8000]}) 6m54.537563702s ago: executing program 3 (id=409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r4 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000003740)) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000180)={r6, 0x9}, 0xc) sendmmsg$inet_sctp(r4, &(0x7f0000003b40)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x8040}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000003780)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndinfo={0x20, 0x84, 0x2, {0x1ff, 0x0, 0x8, 0x8, r6}}], 0x40, 0x48041}, {&(0x7f0000003800)=@in6={0xa, 0x4e22, 0x1, @local, 0xb7}, 0x1c, &(0x7f0000003ac0)=[{&(0x7f0000003840)="78c3ae84077b6f174a19a65d10e4197f51489013d3e297ff5604989ece20c9cc23ec2e0f04f66d6c7cd524588911a508e97f992a609b8445538ec6", 0x3b}], 0x1, &(0x7f0000003b00)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x20}], 0x3, 0x20000004) syz_usb_connect(0x5, 0xe4, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f1020"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x67ac26d4c1643887, 0x29) ioctl$SNDCTL_SEQ_GETINCOUNT(r7, 0x80045105, 0x0) 6m50.266111742s ago: executing program 3 (id=417): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xbb, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x200400c4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xca) 6m48.659939286s ago: executing program 1 (id=422): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6m47.0391533s ago: executing program 1 (id=427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r4 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000003740)) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000180)={r6, 0x9}, 0xc) sendmmsg$inet_sctp(r4, &(0x7f0000003b40)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x8040}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000003780)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndinfo={0x20, 0x84, 0x2, {0x1ff, 0x0, 0x8, 0x8, r6}}], 0x40, 0x48041}, {&(0x7f0000003800)=@in6={0xa, 0x4e22, 0x1, @local, 0xb7}, 0x1c, &(0x7f0000003ac0)=[{&(0x7f0000003840)="78c3ae84077b6f174a19a65d10e4197f51489013d3e297ff5604989ece20c9cc23ec2e0f04f66d6c7cd524588911a508e97f992a609b8445538ec6", 0x3b}], 0x1, &(0x7f0000003b00)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x20}], 0x3, 0x20000004) syz_usb_connect(0x5, 0xe4, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f1020"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x67ac26d4c1643887, 0x29) ioctl$SNDCTL_SEQ_GETINCOUNT(r7, 0x80045105, 0x0) 6m43.647422178s ago: executing program 1 (id=431): socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004) r0 = socket$kcm(0x10, 0x100000000002, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = userfaultfd(0x80001) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}], 0x1}, 0x0) 6m37.340167231s ago: executing program 1 (id=444): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x81, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r5}, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x2c, r11, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x5, 0x19, "d8"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) 6m36.119015518s ago: executing program 1 (id=450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x50, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x631}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x90) 6m36.036000756s ago: executing program 4 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000700)="a6", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee01) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r5, 0xffffffffffffffff, 0x19}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x3, 0x4, 0x4, 0x9, 0x1c000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @value=r1}, 0x50) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r6, &(0x7f0000000d40), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 6m35.921688064s ago: executing program 1 (id=452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x880) 6m34.880258146s ago: executing program 32 (id=417): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xbb, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x200400c4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xca) 6m34.809992494s ago: executing program 4 (id=454): socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004) r0 = socket$kcm(0x10, 0x100000000002, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = userfaultfd(0x80001) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}], 0x1}, 0x0) 6m33.566689933s ago: executing program 4 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) r4 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000003740)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_usb_connect(0x5, 0xe4, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f1020"], 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x67ac26d4c1643887, 0x29) 6m30.524519387s ago: executing program 4 (id=464): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r0) 6m27.20509793s ago: executing program 4 (id=478): socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004) r0 = socket$kcm(0x10, 0x100000000002, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = userfaultfd(0x80001) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {0x0}], 0x2}, 0x0) 6m26.117307235s ago: executing program 4 (id=480): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 6m20.856815027s ago: executing program 33 (id=452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x880) 6m10.358131892s ago: executing program 34 (id=480): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3.644231028s ago: executing program 0 (id=1511): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4041080) 3.437101442s ago: executing program 0 (id=1514): socket(0x40000000015, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x100000000004, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 3.049586332s ago: executing program 6 (id=1519): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018000000080000000000000011530000670001000000000018000000000000"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 2.948349191s ago: executing program 6 (id=1520): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x1, {0x1, 0x7, 0xa0, 0x40, 0x6, 0x7, 0x2, 0x200, 0x4, "29fa0edc"}}, 0x15) 2.048970731s ago: executing program 2 (id=1521): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.991282649s ago: executing program 2 (id=1522): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x4, 0x1c, 0x67, 0x0, 0x7, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x5}}}}}, 0x0) 1.691488479s ago: executing program 6 (id=1525): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) 1.563750395s ago: executing program 6 (id=1527): syz_emit_vhci(0x0, 0x0) 1.476965284s ago: executing program 2 (id=1528): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2502000000080001000000ff0022"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 1.457473597s ago: executing program 0 (id=1530): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000240)=[r2, 0x0, r1], 0x3, 0x80800}) 1.385036508s ago: executing program 6 (id=1531): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) 1.308354796s ago: executing program 2 (id=1533): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.284207514s ago: executing program 0 (id=1534): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x2, 0x8, 0x8, 0x0, "c3"}]}, 0x20}, 0x1, 0x7}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3ff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80ae", 0x72}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acb", 0x1b}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.192653599s ago: executing program 5 (id=1535): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x1, {0x1, 0x7, 0xa0, 0x40, 0x6, 0x7, 0x2, 0x200, 0x4, "29fa0edc"}}, 0x15) 1.180596653s ago: executing program 2 (id=1536): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe"], 0xfe33) 997.961336ms ago: executing program 5 (id=1538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018000000080000000000000011530000670001000000000018000000000000000000000000000020"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 980.035744ms ago: executing program 2 (id=1539): r0 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0xe, 0x2, {0x2, 0x7f60cdb29a88046a}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf9, 0x0, 0xb, 0x1, "c757d398", "e27ec072"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xdc, 0x60, 0x9, 0x3, 0x8, 0x3, 0x9}}}, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0x16, 0xb3, "05b93d265bb7c170980f690ea9e7b939b64a4e53ac4ef093f4a0e17a00e7cca6a7bddccc69fa3c9e1e7296884e22232ea6cc5f0468e003777072f044f7a9e211f807225748866c08787bc3429214bd9aa7e7165c2030f7c860322969e71930c64d2c3efa9a7162347b983a8f4d87e6538e1c1dcd43d2e6d43d0d55f45d5bd73c5829a6053bb409b028e11326615d8cfde808d8ebabfe6266f0f573657c7ab722ef278ac812b27ddca7e64707b432a658253379"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x60, 0x8}}, 0x0, 0x0, &(0x7f0000000500)={0x40, 0xb, 0x2, "fd3e"}, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "84b8"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x800}, 0x0, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x81}, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1) syz_open_dev$I2C(0x0, 0x1, 0x402) 900.768441ms ago: executing program 5 (id=1540): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05033900d3fc142e0006478886dd", 0x50, 0x4, &(0x7f0000000000)={0x11, 0x86dd, 0x0, 0x1, 0x10, 0x6, @multicast}, 0x14) 899.652213ms ago: executing program 7 (id=1541): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x24, r0, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) 716.574606ms ago: executing program 7 (id=1542): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000700)=[{0x0}], 0x1}}], 0x2, 0x0) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) fanotify_mark(r5, 0x21, 0x101a, r5, 0x0) fanotify_mark(r5, 0x22, 0x4000103b, r5, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=@delchain={0x1ec, 0x65, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7, 0x18}, {0xb, 0x17c9cedaef6c3850}, {0x7, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xc508}, @filter_kind_options=@f_route={{0xa}, {0x18c, 0x2, [@TCA_ROUTE4_ACT={0x188, 0x6, [@m_pedit={0xdc, 0x3, 0x0, 0x0, {{0xa}, {0x4}, {0xaf, 0x6, "727c56aad309ab0c94c1cf3641e4a0734b446004386990284919d785d8beecd3e5045b25815a92bc812b3199f698ee3be8fe61009b3fd3f74a1a0c8b8158db4eeba18395b0a6011710550d526557a87a67ee0e6bc5f6c19336131c79813e2a496c65f3bdb6d9ffe861ec804ff92a7465c1eed75471e96fd0faa9b85e0ebfe9958afce1698998d3c1690cb5f6dbe54601f200afc49008905a36c5159d76951ed5c4f8e62bce3419c25cf84c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xa8, 0x12, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x70, 0x6, "3de09faa56a0b4383a3b8ad396040cc9c03e2eb06c2ed8c032de0b446544536e439e8878285c1e769aefd97fc8ab2b40c95d77dbadb9bef057fda8467278224a1b4cb625c46692695876ca2864d0d483b63ebdc21d7517faa987d0bb8ca0babfdec03c842a2b30f98b1d0a7a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x40, 0x2, 0x1000, 0xa, 0x5, 0x79, 0x3, 0x80008, 0x0, 0xffffffff, 0x1, 0x808, 0x1, 0x5, 0x9, 0x8, 0xa, 0x3, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x7fff, 0x0, 0xfff7fff8]}) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(0xffffffffffffffff, 0x1) 683.307089ms ago: executing program 5 (id=1543): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x4000000}) 605.632407ms ago: executing program 5 (id=1544): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000240)=[r2, 0x0, r1], 0x3, 0x80800}) 565.4418ms ago: executing program 7 (id=1545): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004100)={0x1ad4, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, @nested={0x1aa0, 0x2, 0x0, 0x1, [@generic="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", @typed={0xc, 0x137, 0x0, 0x0, @u64=0x6}, @nested={0xa88, 0x6d, 0x0, 0x1, [@typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@loopback}, @nested={0x834, 0xbf, 0x0, 0x1, [@nested={0x4, 0x45}, @generic="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", @nested={0x4, 0x6b}, @nested={0x4, 0x135}, @typed={0x14, 0x144, 0x0, 0x0, @ipv6=@remote}, @typed={0xc, 0x55, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xba}]}, @nested={0x8, 0x99, 0x0, 0x1, [@nested={0x4, 0xd0}]}, @nested={0x23f, 0x52, 0x0, 0x1, [@typed={0x8, 0x169, 0x0, 0x0, @ipv4=@local}, @generic="6f44d006dc4e11b61fa9bc094d60d0d8cdaaafa585451000920b5cc44111fc85c3331da6fa1e74f19db6d9ad121dbe583be6a0d3fc9488a9a3ffcf4f63d532c72d2235d3f8f2e16641a3a93c661293fcbcd337a3fb0d116ac7b60ac1a877e8bf91bfe885424c3474fc259934fe693f755a6428a6f340160ddeb41130199ef01eaee9d21671098d8e89839cd3a7061df637d4303c8a04c3ad937ecdd22675f989fe4b913469b9e46c97a7dad04667bacf033da9c7700f66977e2d", @generic="84f06ac5fb9efb46ff8136b5a067646bc248819f3a392698c52f8eb35c1b3de9b27d4b34abd63499db3429fda2bd85232451522f796d9a243b323593956e895e6031a0c3ac74ed6559d50ff57f2ba4a1c51af7b52eecec1a42db378800628723f00c5b1ebf9620e46d4660f151ddfc36cae1d105fd664551b24b32c86e03937acacace9684eabd181a28dc5177a7f398b8b4042cb9301f2b32f4c9156c8d", @generic="e7b5dcb1cc19095f7e202bcc46d579a7f3435892098d98231649b8d38c5597e4ddb5b9fc40d051a336367499f87033b1da7c16a6656c483c384194f28460218b4e64028dd7291b5272749751b349c6dbebd6a9bdfefd3d849156339bd97ca73be35cee12aa02546d81f4a38dde51ee278ad4192d96cbc5fc233f8d0b3ba0b16f70b791e07f8ea3a7ae08d3292f17ebef3c39ef7081b7a2f88ce2a2c0ddcd8700d423bff95c178e9a7b7dc77e28c36486a995225b52e74cba2a0e8ef8edb3cf8bd5f286c61dc351393780bf880f663754359ae8b13d3131e651cf1c"]}]}, @typed={0x8, 0x33, 0x0, 0x0, @uid}]}]}, 0x1ad4}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 486.963886ms ago: executing program 7 (id=1546): pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 445.87541ms ago: executing program 5 (id=1547): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="401901"], 0x6) 432.545326ms ago: executing program 6 (id=1548): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x1, {0x1, 0x7, 0xa0, 0x40, 0x6, 0x7, 0x2, 0x200, 0x4, "29fa0edc"}}, 0x15) 372.59922ms ago: executing program 7 (id=1549): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 251.672888ms ago: executing program 7 (id=1550): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000083c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xaad01, 0xc0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) 42.351435ms ago: executing program 0 (id=1551): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018000000080000000000000011530000670001000000000018000000000000000000000000000020"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 0s ago: executing program 0 (id=1552): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4040010) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x133000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x52, 0x6804311d36975393, 0x70bd2d, 0x25dfdbff, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) kernel console output (not intermixed with test programs): hardware appears to be jammed and I can't clear it. [ 414.677306][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 414.960429][ T60] Bluetooth: hci3: command tx timeout [ 416.247102][ T1452] team0 (unregistering): Port device team_slave_1 removed [ 417.219246][ T60] Bluetooth: hci3: command tx timeout [ 417.233045][ T1452] team0 (unregistering): Port device team_slave_0 removed [ 417.495642][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 419.280493][ T5603] Bluetooth: hci3: command tx timeout [ 419.508732][ T9194] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 420.018940][ T5258] 8021q: adding VLAN 0 to HW filter on device eth12 [ 420.103378][ T1265] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 420.270404][ T1265] usb 1-1: Using ep0 maxpacket: 8 [ 420.305314][ T1265] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 420.305344][ T1265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.393933][ T1265] pvrusb2: Hardware description: Terratec Grabster AV400 [ 420.393995][ T1265] pvrusb2: ********** [ 420.394038][ T1265] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 420.394077][ T1265] pvrusb2: Important functionality might not be entirely working. [ 420.394085][ T1265] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 420.394096][ T1265] pvrusb2: ********** [ 420.539156][ T2381] pvrusb2: Invalid write control endpoint [ 420.701848][ T2381] pvrusb2: Invalid write control endpoint [ 420.701857][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 420.701863][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 420.701867][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 420.701872][ T2381] pvrusb2: Device being rendered inoperable [ 420.701924][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 420.701959][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 420.703535][ T2381] pvrusb2: Attached sub-driver cx25840 [ 420.703543][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 420.703548][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 420.843816][ T9197] libceph: resolve '0' (ret=-3): failed [ 420.860643][ T9197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.906'. [ 420.914666][ T5710] usb 1-1: USB disconnect, device number 28 [ 421.361457][ T5603] Bluetooth: hci3: command tx timeout [ 423.204921][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 424.898986][ T9131] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.899236][ T9131] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.899477][ T9131] bridge_slave_0: entered allmulticast mode [ 424.937530][ T9131] bridge_slave_0: entered promiscuous mode [ 424.951247][ T9131] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.952630][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.952865][ T9131] bridge_slave_1: entered allmulticast mode [ 424.964935][ T9131] bridge_slave_1: entered promiscuous mode [ 425.529592][ T1265] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 425.592159][ T9131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.597418][ T9131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.699607][ T1265] usb 3-1: Using ep0 maxpacket: 8 [ 425.703580][ T1265] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 425.703609][ T1265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.756741][ T1265] pvrusb2: Hardware description: Terratec Grabster AV400 [ 425.756759][ T1265] pvrusb2: ********** [ 425.756766][ T1265] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 425.756779][ T1265] pvrusb2: Important functionality might not be entirely working. [ 425.756788][ T1265] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 425.756800][ T1265] pvrusb2: ********** [ 425.982115][ T2381] pvrusb2: Invalid write control endpoint [ 426.134490][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 426.189163][ T9256] libceph: resolve '0' (ret=-3): failed [ 426.192780][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 426.196633][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 426.201409][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 426.203110][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 426.236550][ T9256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.915'. [ 426.258797][ T1265] usb 3-1: USB disconnect, device number 28 [ 426.369794][ T2381] pvrusb2: Invalid write control endpoint [ 426.369808][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 426.369818][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 426.369825][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 426.369834][ T2381] pvrusb2: Device being rendered inoperable [ 426.369908][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 426.369963][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 426.370965][ T2381] pvrusb2: Attached sub-driver cx25840 [ 426.370976][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 426.370986][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 427.527080][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 427.663364][ T9131] team0: Port device team_slave_0 added [ 427.685790][ T9131] team0: Port device team_slave_1 added [ 428.879311][ T5603] Bluetooth: hci5: command tx timeout [ 429.094923][ T9304] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 430.631611][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.631622][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.631638][ T9131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.695210][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.695226][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.695253][ T9131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.882745][ T5725] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 430.959978][ T5603] Bluetooth: hci5: command tx timeout [ 431.033988][ T5725] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 431.034007][ T5725] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.034017][ T5725] usb 3-1: config 0 has no interface number 0 [ 431.034042][ T5725] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 431.034065][ T5725] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 431.034077][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.114515][ T5725] usb 3-1: config 0 descriptor?? [ 431.342332][ T5725] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 431.378291][ T5725] usb 3-1: USB disconnect, device number 29 [ 431.386109][ T1570] usb 3-1: Failed to submit usb control message: -71 [ 431.386143][ T1570] usb 3-1: unable to send the bmi data to the device: -71 [ 431.386160][ T1570] usb 3-1: unable to get target info from device [ 431.386173][ T1570] usb 3-1: could not get target info (-71) [ 431.386189][ T1570] usb 3-1: could not probe fw (-71) [ 432.501402][ T9131] hsr_slave_0: entered promiscuous mode [ 432.504701][ T9131] hsr_slave_1: entered promiscuous mode [ 432.506388][ T9131] debugfs: 'hsr0' already exists in 'hsr' [ 432.506411][ T9131] Cannot create hsr debugfs directory [ 432.519600][ T5710] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 432.701569][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 432.711576][ T5710] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 432.711605][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.795329][ T5710] pvrusb2: Hardware description: Terratec Grabster AV400 [ 432.795347][ T5710] pvrusb2: ********** [ 432.795354][ T5710] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 432.795366][ T5710] pvrusb2: Important functionality might not be entirely working. [ 432.795375][ T5710] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 432.795386][ T5710] pvrusb2: ********** [ 432.929121][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 432.973315][ T2381] pvrusb2: Invalid write control endpoint [ 433.039716][ T5603] Bluetooth: hci5: command tx timeout [ 433.207532][ T2381] pvrusb2: Invalid write control endpoint [ 433.207546][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 433.207556][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 433.207563][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 433.207573][ T2381] pvrusb2: Device being rendered inoperable [ 433.207607][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 433.207653][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 433.209317][ T9343] libceph: resolve '0' (ret=-3): failed [ 433.227460][ T2381] pvrusb2: Attached sub-driver cx25840 [ 433.227473][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 433.227483][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 433.242296][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.926'. [ 433.280380][ T5710] usb 1-1: USB disconnect, device number 29 [ 435.119986][ T5603] Bluetooth: hci5: command tx timeout [ 435.242502][ T9376] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 436.938894][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.973134][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.983447][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.064312][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.135579][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 438.348177][ T1452] bridge_slave_1: left allmulticast mode [ 438.348289][ T1452] bridge_slave_1: left promiscuous mode [ 438.396225][ T1452] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.590585][ T1452] bridge_slave_0: left allmulticast mode [ 438.590611][ T1452] bridge_slave_0: left promiscuous mode [ 438.590785][ T1452] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.891334][ T9418] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 438.955473][ T5725] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 439.903994][ T5725] usb 3-1: Using ep0 maxpacket: 8 [ 439.911647][ T5725] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 439.911677][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.930582][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.930668][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.951446][ T5725] pvrusb2: Hardware description: Terratec Grabster AV400 [ 439.951462][ T5725] pvrusb2: ********** [ 439.951469][ T5725] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 439.951481][ T5725] pvrusb2: Important functionality might not be entirely working. [ 439.951490][ T5725] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 439.951502][ T5725] pvrusb2: ********** [ 440.009644][ T5603] Bluetooth: hci1: command tx timeout [ 440.158024][ T2381] pvrusb2: Invalid write control endpoint [ 440.300336][ T2381] pvrusb2: Invalid write control endpoint [ 440.300346][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 440.300351][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 440.300355][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 440.300360][ T2381] pvrusb2: Device being rendered inoperable [ 440.301708][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 440.301745][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 440.314761][ T2381] pvrusb2: Attached sub-driver cx25840 [ 440.314775][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 440.314785][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 440.358341][ T9414] libceph: resolve '0' (ret=-3): failed [ 440.359281][ T9414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.935'. [ 440.370750][ T5725] usb 3-1: USB disconnect, device number 30 [ 441.350876][ T1452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.372594][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 441.430540][ T1452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.472493][ T1452] bond0 (unregistering): Released all slaves [ 442.079668][ T5603] Bluetooth: hci1: command tx timeout [ 442.554569][ T9443] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 444.187613][ T5603] Bluetooth: hci1: command tx timeout [ 445.681195][ T1452] hsr_slave_0: left promiscuous mode [ 445.730681][ T1452] hsr_slave_1: left promiscuous mode [ 445.731687][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.770665][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.950079][ T5725] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 445.950877][ T5710] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 446.099657][ T5725] usb 1-1: Using ep0 maxpacket: 32 [ 446.101536][ T5725] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 446.101560][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.104885][ T5725] usb 1-1: config 0 descriptor?? [ 446.109830][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 446.117834][ T5710] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 446.117861][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.146283][ T5710] pvrusb2: Hardware description: Terratec Grabster AV400 [ 446.146300][ T5710] pvrusb2: ********** [ 446.146306][ T5710] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 446.146318][ T5710] pvrusb2: Important functionality might not be entirely working. [ 446.146326][ T5710] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 446.147887][ T5710] pvrusb2: ********** [ 446.220786][ T5725] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 446.249627][ T5603] Bluetooth: hci1: command tx timeout [ 446.371499][ T2381] pvrusb2: Invalid write control endpoint [ 446.475125][ T2381] pvrusb2: Invalid write control endpoint [ 446.475138][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 446.475145][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 446.475150][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 446.475157][ T2381] pvrusb2: Device being rendered inoperable [ 446.476674][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 446.476724][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 446.479246][ T2381] pvrusb2: Attached sub-driver cx25840 [ 446.479256][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 446.479265][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 446.570511][ T1452] team0 (unregistering): Port device team_slave_1 removed [ 446.602813][ T9473] libceph: resolve '0' (ret=-3): failed [ 446.603760][ T9473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.949'. [ 446.608844][ T5710] usb 3-1: USB disconnect, device number 31 [ 446.680716][ T1452] team0 (unregistering): Port device team_slave_0 removed [ 446.983855][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 448.102718][ T5725] gspca_vc032x: reg_r err -32 [ 448.102782][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.102794][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.102848][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.102858][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.102902][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.102910][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.102919][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.102971][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.102979][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.103023][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.103032][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.103079][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.103088][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.103097][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.103150][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.103159][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.103168][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.103208][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.103217][ T5725] gspca_vc032x: Unknown sensor... [ 448.103416][ T5725] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 448.655263][ T9498] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 450.146052][ T5585] usb 1-1: USB disconnect, device number 30 [ 450.289725][ T5725] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 450.666433][ T5725] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 450.666462][ T5725] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.666482][ T5725] usb 3-1: config 0 has no interface number 0 [ 450.666525][ T5725] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 450.666568][ T5725] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 450.666590][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.671427][ T5725] usb 3-1: config 0 descriptor?? [ 451.392626][ T9269] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.394272][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.394545][ T9269] bridge_slave_0: entered allmulticast mode [ 451.397773][ T9269] bridge_slave_0: entered promiscuous mode [ 451.451440][ T9269] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.451705][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.451968][ T9269] bridge_slave_1: entered allmulticast mode [ 451.491219][ T9269] bridge_slave_1: entered promiscuous mode [ 451.554759][ T5725] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 451.607288][ T5725] usb 3-1: USB disconnect, device number 32 [ 451.692433][ T47] usb 3-1: Failed to submit usb control message: -71 [ 451.692470][ T47] usb 3-1: unable to send the bmi data to the device: -71 [ 451.692487][ T47] usb 3-1: unable to get target info from device [ 451.692501][ T47] usb 3-1: could not get target info (-71) [ 451.692518][ T47] usb 3-1: could not probe fw (-71) [ 452.908554][ T9269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.022426][ T9269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.311297][ T9269] team0: Port device team_slave_0 added [ 453.374511][ T9269] team0: Port device team_slave_1 added [ 453.591232][ T5725] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 453.751441][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 453.762569][ T5725] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 453.762599][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.815343][ T5725] pvrusb2: Hardware description: Terratec Grabster AV400 [ 453.815362][ T5725] pvrusb2: ********** [ 453.815368][ T5725] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 453.815380][ T5725] pvrusb2: Important functionality might not be entirely working. [ 453.815389][ T5725] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 453.815400][ T5725] pvrusb2: ********** [ 453.898188][ T9269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.898204][ T9269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.898229][ T9269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.028903][ T2381] pvrusb2: Invalid write control endpoint [ 454.140769][ T2381] pvrusb2: Invalid write control endpoint [ 454.140785][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 454.140795][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 454.140803][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 454.140813][ T2381] pvrusb2: Device being rendered inoperable [ 454.140884][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 454.140940][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 454.145416][ T2381] pvrusb2: Attached sub-driver cx25840 [ 454.145431][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 454.145439][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 454.164387][ T9269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.164404][ T9269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.164430][ T9269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.217230][ T9533] libceph: resolve '0' (ret=-3): failed [ 454.221895][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.957'. [ 454.224956][ T5725] usb 1-1: USB disconnect, device number 31 [ 456.174203][ T9131] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 456.203637][ T9131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.357688][ T9131] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 456.393688][ T9131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.403005][ T9269] hsr_slave_0: entered promiscuous mode [ 456.405270][ T9269] hsr_slave_1: entered promiscuous mode [ 456.406771][ T9269] debugfs: 'hsr0' already exists in 'hsr' [ 456.406794][ T9269] Cannot create hsr debugfs directory [ 456.419631][ T1265] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 456.429062][ T9131] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 456.474395][ T9131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.600184][ T1265] usb 3-1: Using ep0 maxpacket: 32 [ 456.613225][ T1265] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 456.613256][ T1265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.623647][ T1265] usb 3-1: config 0 descriptor?? [ 456.660525][ T1265] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 456.794154][ T9131] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 457.005760][ T9131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.050343][ T9580] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 458.064250][ T9400] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.064502][ T9400] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.064757][ T9400] bridge_slave_0: entered allmulticast mode [ 458.068479][ T9400] bridge_slave_0: entered promiscuous mode [ 458.088629][ T9400] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.088901][ T9400] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.089135][ T9400] bridge_slave_1: entered allmulticast mode [ 458.093994][ T9400] bridge_slave_1: entered promiscuous mode [ 458.245626][ T9400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.264841][ T9400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.363702][ T9400] team0: Port device team_slave_0 added [ 458.386686][ T9400] team0: Port device team_slave_1 added [ 458.429778][ T5725] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 458.510614][ T9400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.510631][ T9400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.510657][ T9400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.531803][ T9400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.531819][ T9400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.531845][ T9400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.579809][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 458.586648][ T5725] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 458.586685][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.635836][ T5725] pvrusb2: Hardware description: Terratec Grabster AV400 [ 458.635854][ T5725] pvrusb2: ********** [ 458.635860][ T5725] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 458.635871][ T5725] pvrusb2: Important functionality might not be entirely working. [ 458.635880][ T5725] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 458.635891][ T5725] pvrusb2: ********** [ 458.837345][ T2381] pvrusb2: Invalid write control endpoint [ 458.981429][ T1265] gspca_vc032x: reg_r err -32 [ 458.981445][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981456][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981464][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981473][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981481][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981491][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981498][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981507][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981515][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981524][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981532][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981541][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981549][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981558][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981567][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981576][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981584][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981592][ T1265] gspca_vc032x: I2c Bus Busy Wait 00 [ 458.981601][ T1265] gspca_vc032x: Unknown sensor... [ 458.981678][ T1265] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 459.010797][ T2381] pvrusb2: Invalid write control endpoint [ 459.010813][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 459.010821][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 459.010828][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 459.010838][ T2381] pvrusb2: Device being rendered inoperable [ 459.010910][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 459.010953][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 459.014190][ T2381] pvrusb2: Attached sub-driver cx25840 [ 459.014203][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 459.014212][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 459.068239][ T9584] libceph: resolve '0' (ret=-3): failed [ 459.070430][ T9584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.966'. [ 459.072782][ T10] usb 1-1: USB disconnect, device number 32 [ 459.456933][ T9400] hsr_slave_0: entered promiscuous mode [ 459.458309][ T9400] hsr_slave_1: entered promiscuous mode [ 459.459312][ T9400] debugfs: 'hsr0' already exists in 'hsr' [ 459.459335][ T9400] Cannot create hsr debugfs directory [ 460.344473][ T1265] usb 3-1: USB disconnect, device number 33 [ 461.203855][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'. [ 461.562340][ T9131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.600758][ T9131] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.627012][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.627459][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.534399][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.534564][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.581120][ T9611] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 462.940854][ T6042] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 463.316292][ T6042] usb 1-1: Using ep0 maxpacket: 8 [ 463.701311][ T6042] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 463.701351][ T6042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.846696][ T6042] pvrusb2: Hardware description: Terratec Grabster AV400 [ 463.846713][ T6042] pvrusb2: ********** [ 463.846719][ T6042] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 463.846731][ T6042] pvrusb2: Important functionality might not be entirely working. [ 463.846740][ T6042] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 463.846750][ T6042] pvrusb2: ********** [ 463.995494][ T1452] bridge_slave_1: left allmulticast mode [ 463.995569][ T1452] bridge_slave_1: left promiscuous mode [ 463.996467][ T1452] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.035833][ T2381] pvrusb2: Invalid write control endpoint [ 464.112859][ T2381] pvrusb2: Invalid write control endpoint [ 464.112869][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 464.112874][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 464.112879][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 464.112884][ T2381] pvrusb2: Device being rendered inoperable [ 464.122892][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 464.123102][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 464.127613][ T2381] pvrusb2: Attached sub-driver cx25840 [ 464.127626][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 464.127636][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 464.223684][ T1452] bridge_slave_0: left allmulticast mode [ 464.223720][ T1452] bridge_slave_0: left promiscuous mode [ 464.223988][ T1452] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.244892][ T9613] libceph: resolve '0' (ret=-3): failed [ 464.245950][ T9613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.974'. [ 464.267433][ T199] usb 1-1: USB disconnect, device number 33 [ 464.499745][ T1452] bridge_slave_1: left allmulticast mode [ 464.499779][ T1452] bridge_slave_1: left promiscuous mode [ 464.500032][ T1452] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.550318][ T9642] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 464.681314][ T1452] bridge_slave_0: left allmulticast mode [ 464.681377][ T1452] bridge_slave_0: left promiscuous mode [ 464.681620][ T1452] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.685446][ T9649] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 467.564264][ T199] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 468.320993][ T1452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.471519][ T1452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.479689][ T199] usb 3-1: Using ep0 maxpacket: 8 [ 468.492558][ T199] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 468.492589][ T199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.511185][ T199] pvrusb2: Hardware description: Terratec Grabster AV400 [ 468.511203][ T199] pvrusb2: ********** [ 468.511209][ T199] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 468.511221][ T199] pvrusb2: Important functionality might not be entirely working. [ 468.511228][ T199] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 468.511239][ T199] pvrusb2: ********** [ 468.572915][ T1452] bond0 (unregistering): Released all slaves [ 469.076610][ T9676] libceph: resolve '0' (ret=-3): failed [ 469.099781][ T9676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.990'. [ 469.200849][ T2381] pvrusb2: Invalid write control endpoint [ 469.476601][ T199] usb 3-1: USB disconnect, device number 34 [ 469.548090][ T2381] pvrusb2: Invalid write control endpoint [ 469.548106][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 469.548115][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 469.548123][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 469.548132][ T2381] pvrusb2: Device being rendered inoperable [ 469.548211][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 469.548253][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 469.552492][ T2381] pvrusb2: Attached sub-driver cx25840 [ 469.552506][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 469.552515][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 470.081720][ T1452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.031046][ T1452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.116317][ T1452] bond0 (unregistering): Released all slaves [ 471.871057][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 474.326807][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'. [ 474.624746][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 474.678272][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 474.688298][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 474.702856][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 474.740286][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.815049][ T199] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 475.320623][ T199] usb 1-1: Using ep0 maxpacket: 8 [ 475.712056][ T199] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 475.712088][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.793001][ T199] pvrusb2: Hardware description: Terratec Grabster AV400 [ 475.793025][ T199] pvrusb2: ********** [ 475.793031][ T199] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 475.793044][ T199] pvrusb2: Important functionality might not be entirely working. [ 475.793052][ T199] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 475.793064][ T199] pvrusb2: ********** [ 475.924121][ T1452] hsr_slave_0: left promiscuous mode [ 475.962315][ T1452] hsr_slave_1: left promiscuous mode [ 475.963499][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.983770][ T2381] pvrusb2: Invalid write control endpoint [ 476.018305][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.108768][ T2381] pvrusb2: Invalid write control endpoint [ 476.108783][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 476.108792][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 476.108800][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 476.108811][ T2381] pvrusb2: Device being rendered inoperable [ 476.108886][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 476.108932][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 476.135393][ T2381] pvrusb2: Attached sub-driver cx25840 [ 476.135408][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 476.135418][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 476.245889][ T1452] hsr_slave_0: left promiscuous mode [ 476.366136][ T1452] hsr_slave_1: left promiscuous mode [ 476.377268][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.378831][ T9726] libceph: resolve '0' (ret=-3): failed [ 476.394973][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'. [ 476.410387][ T199] usb 1-1: USB disconnect, device number 34 [ 476.444261][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.906659][ T60] Bluetooth: hci2: command tx timeout [ 477.756264][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'. [ 478.351095][ T1452] team0 (unregistering): Port device team_slave_1 removed [ 478.431347][ T1452] team0 (unregistering): Port device team_slave_0 removed [ 478.996092][ T60] Bluetooth: hci2: command tx timeout [ 480.159625][ T5710] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 480.239032][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1024'. [ 480.340078][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 480.341764][ T5710] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 480.341792][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.393829][ T5710] pvrusb2: Hardware description: Terratec Grabster AV400 [ 480.393847][ T5710] pvrusb2: ********** [ 480.393853][ T5710] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 480.393864][ T5710] pvrusb2: Important functionality might not be entirely working. [ 480.393873][ T5710] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 480.393884][ T5710] pvrusb2: ********** [ 480.589000][ T2381] pvrusb2: Invalid write control endpoint [ 481.055167][ T60] Bluetooth: hci2: command tx timeout [ 481.066314][ T2381] pvrusb2: Invalid write control endpoint [ 481.066330][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 481.066352][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 481.066358][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 481.066366][ T2381] pvrusb2: Device being rendered inoperable [ 481.066401][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 481.066444][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 481.072860][ T2381] pvrusb2: Attached sub-driver cx25840 [ 481.072873][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 481.072881][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 481.166879][ T9769] libceph: resolve '0' (ret=-3): failed [ 481.182187][ T9769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1020'. [ 481.198614][ T6643] usb 3-1: USB disconnect, device number 35 [ 481.304789][ T1452] team0 (unregistering): Port device team_slave_1 removed [ 481.370494][ T1452] team0 (unregistering): Port device team_slave_0 removed [ 481.851844][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 482.175027][ T9814] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1035'. [ 482.517299][ T5710] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 482.709893][ T5710] usb 1-1: Using ep0 maxpacket: 32 [ 483.119576][ T60] Bluetooth: hci2: command tx timeout [ 483.123030][ T5710] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 483.123061][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.162912][ T5710] usb 1-1: config 0 descriptor?? [ 483.261999][ T5710] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 483.849644][ T199] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 484.032259][ T199] usb 3-1: Using ep0 maxpacket: 8 [ 484.035703][ T199] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 484.035732][ T199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.085611][ T199] pvrusb2: Hardware description: Terratec Grabster AV400 [ 484.085631][ T199] pvrusb2: ********** [ 484.085637][ T199] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 484.085648][ T199] pvrusb2: Important functionality might not be entirely working. [ 484.085657][ T199] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 484.085668][ T199] pvrusb2: ********** [ 484.334393][ T2381] pvrusb2: Invalid write control endpoint [ 484.524127][ T9828] libceph: resolve '0' (ret=-3): failed [ 484.525318][ T2381] pvrusb2: Invalid write control endpoint [ 484.525331][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 484.525392][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 484.525400][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 484.525409][ T2381] pvrusb2: Device being rendered inoperable [ 484.525558][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 484.525617][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 484.526758][ T9828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1037'. [ 484.573427][ T199] usb 3-1: USB disconnect, device number 36 [ 484.669319][ T2381] pvrusb2: Attached sub-driver cx25840 [ 484.669333][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 484.669343][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 485.077822][ T5710] gspca_vc032x: reg_r err -32 [ 485.077840][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077850][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077859][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077869][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077878][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077894][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077903][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077912][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077920][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077929][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077937][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077946][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077955][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077964][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077972][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077980][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077989][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.077998][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.078089][ T5710] gspca_vc032x: Unknown sensor... [ 485.078172][ T5710] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 486.100500][ T9269] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 486.179153][ T9269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.364615][ T199] usb 1-1: USB disconnect, device number 35 [ 486.715920][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 486.851738][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 486.887544][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 486.889305][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 486.890560][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 486.894979][ T5603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 488.481720][ T1265] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 488.639665][ T1265] usb 3-1: Using ep0 maxpacket: 8 [ 488.648787][ T1265] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 488.648817][ T1265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.702971][ T1265] pvrusb2: Hardware description: Terratec Grabster AV400 [ 488.702988][ T1265] pvrusb2: ********** [ 488.702996][ T1265] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 488.703007][ T1265] pvrusb2: Important functionality might not be entirely working. [ 488.703017][ T1265] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 488.703028][ T1265] pvrusb2: ********** [ 488.897664][ T2381] pvrusb2: Invalid write control endpoint [ 488.936046][ T9731] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.936422][ T9731] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.936679][ T9731] bridge_slave_0: entered allmulticast mode [ 488.939703][ T32] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 488.949204][ T9731] bridge_slave_0: entered promiscuous mode [ 488.976710][ T2381] pvrusb2: Invalid write control endpoint [ 488.976724][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 488.976733][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 488.976740][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 488.977022][ T2381] pvrusb2: Device being rendered inoperable [ 488.977090][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 488.977131][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 488.977947][ T2381] pvrusb2: Attached sub-driver cx25840 [ 488.977957][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 488.977965][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 489.057776][ T9731] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.058025][ T9731] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.058276][ T9731] bridge_slave_1: entered allmulticast mode [ 489.062368][ T9731] bridge_slave_1: entered promiscuous mode [ 489.090499][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 489.094456][ T32] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 489.094485][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.099255][ T9935] libceph: resolve '0' (ret=-3): failed [ 489.122818][ T60] Bluetooth: hci3: command tx timeout [ 489.125810][ T32] usb 1-1: config 0 descriptor?? [ 489.143719][ T9935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1045'. [ 489.149682][ T199] usb 3-1: USB disconnect, device number 37 [ 489.178701][ T32] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 489.286095][ T9731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.307878][ T9731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.500482][ T9400] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 489.524433][ T9400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.529080][ T9731] team0: Port device team_slave_0 added [ 489.567154][ T9400] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 489.596613][ T9400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.611875][ T9731] team0: Port device team_slave_1 added [ 489.619361][ T9400] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 489.667271][ T9400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.720860][ T9400] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 489.775726][ T9400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.901636][ T9951] netlink: 'syz.2.1048': attribute type 1 has an invalid length. [ 489.901658][ T9951] netlink: 16146 bytes leftover after parsing attributes in process `syz.2.1048'. [ 491.240981][ T32] gspca_vc032x: reg_r err -32 [ 491.241041][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241052][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241060][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241068][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241077][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241085][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241123][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241133][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241172][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241182][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241190][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241236][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241245][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241286][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241295][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241335][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241344][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241353][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 491.241398][ T32] gspca_vc032x: Unknown sensor... [ 491.241753][ T32] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 491.260232][ T60] Bluetooth: hci3: command tx timeout [ 491.755795][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.755811][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.755836][ T9731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.845163][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.845174][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.845189][ T9731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.162046][ T9731] hsr_slave_0: entered promiscuous mode [ 492.164394][ T9731] hsr_slave_1: entered promiscuous mode [ 492.166019][ T9731] debugfs: 'hsr0' already exists in 'hsr' [ 492.166041][ T9731] Cannot create hsr debugfs directory [ 492.295732][ T5725] usb 1-1: USB disconnect, device number 36 [ 492.369777][ T1452] bridge_slave_1: left allmulticast mode [ 492.369811][ T1452] bridge_slave_1: left promiscuous mode [ 492.370096][ T1452] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.551788][ T1452] bridge_slave_0: left allmulticast mode [ 492.551821][ T1452] bridge_slave_0: left promiscuous mode [ 492.552079][ T1452] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.757868][ T5725] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 492.909670][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 492.917513][ T5725] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 492.917542][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.994338][ T5725] pvrusb2: Hardware description: Terratec Grabster AV400 [ 492.994356][ T5725] pvrusb2: ********** [ 492.994363][ T5725] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 492.994370][ T5725] pvrusb2: Important functionality might not be entirely working. [ 492.994375][ T5725] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 492.994380][ T5725] pvrusb2: ********** [ 493.238133][ T2381] pvrusb2: Invalid write control endpoint [ 493.361364][ T60] Bluetooth: hci3: command tx timeout [ 493.376200][ T2381] pvrusb2: Invalid write control endpoint [ 493.376213][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 493.376222][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 493.376231][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 493.376241][ T2381] pvrusb2: Device being rendered inoperable [ 493.377502][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 493.377562][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 493.394025][ T2381] pvrusb2: Attached sub-driver cx25840 [ 493.394040][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 493.394050][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 493.480512][ T9985] libceph: resolve '0' (ret=-3): failed [ 493.481430][ T9985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1055'. [ 493.488722][ T5725] usb 1-1: USB disconnect, device number 37 [ 494.958131][T10029] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1059'. [ 494.965596][ T1452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.042821][ T1452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.090329][ T1452] bond0 (unregistering): Released all slaves [ 495.439560][ T5603] Bluetooth: hci3: command tx timeout [ 496.312518][ T1452] hsr_slave_0: left promiscuous mode [ 496.349610][ T1452] hsr_slave_1: left promiscuous mode [ 496.350298][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.391212][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.439908][ T32] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 496.470759][T10044] netlink: 'syz.2.1064': attribute type 13 has an invalid length. [ 496.470773][T10044] netlink: 'syz.2.1064': attribute type 4 has an invalid length. [ 496.470780][T10044] netlink: 13912 bytes leftover after parsing attributes in process `syz.2.1064'. [ 496.710507][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 496.712178][ T32] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 496.712207][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.715464][ T32] usb 1-1: config 0 descriptor?? [ 496.726160][ T32] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 497.430297][ T32] gspca_vc032x: reg_r err -110 [ 497.430318][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430329][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430338][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430347][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430356][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430365][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430374][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430382][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430391][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430400][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430408][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430432][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430441][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430450][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430458][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430467][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430475][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430484][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.430492][ T32] gspca_vc032x: Unknown sensor... [ 497.430574][ T32] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 497.930234][ T1452] team0 (unregistering): Port device team_slave_1 removed [ 497.998396][ T1452] team0 (unregistering): Port device team_slave_0 removed [ 498.076998][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 498.089723][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 498.093169][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 498.127909][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 498.138218][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.170857][ T5710] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 498.331632][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 498.340817][ T5710] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 498.340845][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.375898][ T5710] pvrusb2: Hardware description: Terratec Grabster AV400 [ 498.375909][ T5710] pvrusb2: ********** [ 498.375913][ T5710] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 498.375920][ T5710] pvrusb2: Important functionality might not be entirely working. [ 498.375924][ T5710] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 498.375930][ T5710] pvrusb2: ********** [ 498.598825][ T2381] pvrusb2: Invalid write control endpoint [ 498.758211][ T2381] pvrusb2: Invalid write control endpoint [ 498.758225][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 498.758233][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 498.758240][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 498.758247][ T2381] pvrusb2: Device being rendered inoperable [ 498.758270][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 498.760647][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 498.761696][ T2381] pvrusb2: Attached sub-driver cx25840 [ 498.761706][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 498.761715][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 498.855210][T10052] libceph: resolve '0' (ret=-3): failed [ 498.869246][T10052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1066'. [ 498.887986][ T199] usb 3-1: USB disconnect, device number 38 [ 499.344949][ T199] usb 1-1: USB disconnect, device number 38 [ 499.547244][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.547514][ T9885] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.547727][ T9885] bridge_slave_0: entered allmulticast mode [ 499.550876][ T9885] bridge_slave_0: entered promiscuous mode [ 499.554358][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.554706][ T9885] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.554940][ T9885] bridge_slave_1: entered allmulticast mode [ 499.558345][ T9885] bridge_slave_1: entered promiscuous mode [ 500.166775][ T9885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.239693][ T60] Bluetooth: hci5: command tx timeout [ 500.481577][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 500.491074][ T9885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.397999][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.425518][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.319575][ T60] Bluetooth: hci5: command tx timeout [ 502.364131][T10110] netlink: 2224 bytes leftover after parsing attributes in process `syz.0.1075'. [ 503.679825][T10112] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 503.871805][ T9885] team0: Port device team_slave_0 added [ 503.979643][ T6042] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 503.996216][ T9885] team0: Port device team_slave_1 added [ 504.131232][ T6042] usb 3-1: Using ep0 maxpacket: 8 [ 504.146044][ T6042] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 504.146067][ T6042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.200928][ T6042] pvrusb2: Hardware description: Terratec Grabster AV400 [ 504.200947][ T6042] pvrusb2: ********** [ 504.200954][ T6042] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 504.200975][ T6042] pvrusb2: Important functionality might not be entirely working. [ 504.200984][ T6042] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 504.200995][ T6042] pvrusb2: ********** [ 504.373906][ T2381] pvrusb2: Invalid write control endpoint [ 504.401153][ T60] Bluetooth: hci5: command tx timeout [ 504.438310][ T2381] pvrusb2: Invalid write control endpoint [ 504.438324][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 504.438333][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 504.438341][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 504.438349][ T2381] pvrusb2: Device being rendered inoperable [ 504.438418][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 504.438463][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 504.495115][ T2381] pvrusb2: Attached sub-driver cx25840 [ 504.495129][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 504.495138][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 504.579552][T10114] libceph: resolve '0' (ret=-3): failed [ 504.581611][T10114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1076'. [ 504.602576][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.602590][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.602613][ T9885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.611723][ T5725] usb 3-1: USB disconnect, device number 39 [ 506.479708][ T60] Bluetooth: hci5: command tx timeout [ 507.364504][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.364520][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.364544][ T9885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.009291][T10140] netlink: 2224 bytes leftover after parsing attributes in process `syz.0.1085'. [ 508.430204][T10142] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 508.899695][ T5725] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 509.049639][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 509.052730][ T5725] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 509.052758][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.063799][ T5725] pvrusb2: Hardware description: Terratec Grabster AV400 [ 509.063813][ T5725] pvrusb2: ********** [ 509.063820][ T5725] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 509.063831][ T5725] pvrusb2: Important functionality might not be entirely working. [ 509.063841][ T5725] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 509.063853][ T5725] pvrusb2: ********** [ 509.267221][ T2381] pvrusb2: Invalid write control endpoint [ 509.295036][ T9885] hsr_slave_0: entered promiscuous mode [ 509.299407][ T9885] hsr_slave_1: entered promiscuous mode [ 509.305251][ T9885] debugfs: 'hsr0' already exists in 'hsr' [ 509.305274][ T9885] Cannot create hsr debugfs directory [ 509.346655][ T2381] pvrusb2: Invalid write control endpoint [ 509.346670][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 509.346678][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 509.346685][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 509.346695][ T2381] pvrusb2: Device being rendered inoperable [ 509.346774][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 509.346825][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_j) [ 509.348695][ T2381] pvrusb2: Attached sub-driver cx25840 [ 509.348705][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 509.348715][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 509.483746][T10144] libceph: resolve '0' (ret=-3): failed [ 509.486727][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1087'. [ 509.495463][ T6042] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 509.536310][ T1265] usb 1-1: USB disconnect, device number 39 [ 509.701730][ T6042] usb 3-1: Using ep0 maxpacket: 8 [ 509.704075][ T6042] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 509.704099][ T6042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.741098][ T6042] pvrusb2: Hardware description: Terratec Grabster AV400 [ 509.741113][ T6042] pvrusb2: ********** [ 509.741119][ T6042] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 509.741129][ T6042] pvrusb2: Important functionality might not be entirely working. [ 509.741138][ T6042] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 509.741147][ T6042] pvrusb2: ********** [ 509.955422][ T2381] pvrusb2: Invalid write control endpoint [ 510.074508][ T2381] pvrusb2: Invalid write control endpoint [ 510.074532][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 510.074542][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 510.074550][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 510.074559][ T2381] pvrusb2: Device being rendered inoperable [ 510.074595][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 510.074649][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_j) [ 510.109764][ T2381] pvrusb2: Attached sub-driver cx25840 [ 510.109779][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 510.109788][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 510.172913][T10150] libceph: resolve '0' (ret=-3): failed [ 510.173966][T10150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1090'. [ 510.192308][ T5725] usb 3-1: USB disconnect, device number 40 [ 511.011060][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 511.274614][ T9731] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 511.552982][ T9731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.703464][ T9731] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 511.754759][ T9731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.835540][T10180] netlink: 1712 bytes leftover after parsing attributes in process `syz.0.1098'. [ 511.924197][ T9731] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 511.985974][ T9731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.041200][ T9731] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 512.131494][ T9731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.163216][T10054] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.163432][T10054] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.163670][T10054] bridge_slave_0: entered allmulticast mode [ 512.176869][T10054] bridge_slave_0: entered promiscuous mode [ 512.180409][ T38] audit: type=1107 audit(1783713952.184:2): pid=10185 uid=0 auid=4294967295 ses=4294967295 msg='' [ 512.258985][T10054] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.259230][T10054] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.260981][T10054] bridge_slave_1: entered allmulticast mode [ 512.284751][T10054] bridge_slave_1: entered promiscuous mode [ 512.451692][T10202] netlink: 1712 bytes leftover after parsing attributes in process `syz.0.1106'. [ 512.530208][T10054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.546926][T10054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.552346][ T5710] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 512.687654][T10054] team0: Port device team_slave_0 added [ 512.707707][T10054] team0: Port device team_slave_1 added [ 512.711691][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 512.717168][ T5710] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 512.717194][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.757966][ T5710] pvrusb2: Hardware description: Terratec Grabster AV400 [ 512.757983][ T5710] pvrusb2: ********** [ 512.757990][ T5710] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 512.758001][ T5710] pvrusb2: Important functionality might not be entirely working. [ 512.758010][ T5710] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 512.758021][ T5710] pvrusb2: ********** [ 512.954249][ T2381] pvrusb2: Invalid write control endpoint [ 513.080430][ T2381] pvrusb2: Invalid write control endpoint [ 513.080446][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 513.080455][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 513.080464][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 513.080473][ T2381] pvrusb2: Device being rendered inoperable [ 513.082558][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 513.082609][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_j) [ 513.084401][ T2381] pvrusb2: Attached sub-driver cx25840 [ 513.084412][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 513.084422][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 513.174231][T10195] libceph: resolve '0' (ret=-3): failed [ 513.178867][T10195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1103'. [ 513.220306][ T1265] usb 3-1: USB disconnect, device number 41 [ 513.385133][T10054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.385149][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.385174][T10054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.411875][T10054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.411891][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.411917][T10054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.956584][ T5258] 8021q: adding VLAN 0 to HW filter on device eth11 [ 513.988764][T10054] hsr_slave_0: entered promiscuous mode [ 514.005128][T10054] hsr_slave_1: entered promiscuous mode [ 514.011438][T10054] debugfs: 'hsr0' already exists in 'hsr' [ 514.011463][T10054] Cannot create hsr debugfs directory [ 515.319682][ T1452] bridge_slave_1: left allmulticast mode [ 515.319705][ T1452] bridge_slave_1: left promiscuous mode [ 515.319943][ T1452] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.481493][ T1452] bridge_slave_0: left allmulticast mode [ 515.481527][ T1452] bridge_slave_0: left promiscuous mode [ 515.481781][ T1452] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.539638][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 515.689578][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 515.692811][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 515.692840][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.723098][ T1452] bridge_slave_1: left allmulticast mode [ 515.723129][ T1452] bridge_slave_1: left promiscuous mode [ 515.723368][ T1452] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.727263][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 515.727274][ T10] pvrusb2: ********** [ 515.727277][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 515.727284][ T10] pvrusb2: Important functionality might not be entirely working. [ 515.727289][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 515.727295][ T10] pvrusb2: ********** [ 515.870875][ T1452] bridge_slave_0: left allmulticast mode [ 515.870911][ T1452] bridge_slave_0: left promiscuous mode [ 515.871170][ T1452] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.903713][ T2381] pvrusb2: Invalid write control endpoint [ 515.957006][ T2381] pvrusb2: Invalid write control endpoint [ 515.957020][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 515.957030][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 515.957038][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 515.957047][ T2381] pvrusb2: Device being rendered inoperable [ 515.957119][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 515.957161][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_j) [ 515.961495][ T2381] pvrusb2: Attached sub-driver cx25840 [ 515.961507][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 515.961517][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 516.106313][T10266] libceph: resolve '0' (ret=-3): failed [ 516.107174][T10266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1123'. [ 516.116866][ T1265] usb 1-1: USB disconnect, device number 40 [ 516.430163][ T1452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.510312][ T1452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.571142][ T1452] bond0 (unregistering): Released all slaves [ 516.881371][ T1452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.961005][ T1452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.021157][ T1452] bond0 (unregistering): Released all slaves [ 518.501886][ T9731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.849613][ T1452] hsr_slave_0: left promiscuous mode [ 518.890305][ T1452] hsr_slave_1: left promiscuous mode [ 518.891313][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.940534][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.929613][ T5725] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 519.990537][ T1452] hsr_slave_0: left promiscuous mode [ 520.817846][ T1452] hsr_slave_1: left promiscuous mode [ 520.820829][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.861136][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.889592][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 520.893428][ T5725] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 520.893455][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.903473][ T5725] pvrusb2: Hardware description: Terratec Grabster AV400 [ 520.903487][ T5725] pvrusb2: ********** [ 520.903494][ T5725] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 520.903505][ T5725] pvrusb2: Important functionality might not be entirely working. [ 520.903514][ T5725] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 520.903526][ T5725] pvrusb2: ********** [ 521.112466][ T2381] pvrusb2: Invalid write control endpoint [ 521.180014][ T2381] pvrusb2: Invalid write control endpoint [ 521.180028][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 521.180038][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 521.180046][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 521.180055][ T2381] pvrusb2: Device being rendered inoperable [ 521.180119][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 521.180171][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_j) [ 521.183557][ T2381] pvrusb2: Attached sub-driver cx25840 [ 521.183571][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 521.183582][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 521.223362][T10325] ======================================================= [ 521.223362][T10325] WARNING: The mand mount option has been deprecated and [ 521.223362][T10325] and is ignored by this kernel. Remove the mand [ 521.223362][T10325] option from the mount to silence this warning. [ 521.223362][T10325] ======================================================= [ 521.329182][T10302] libceph: resolve '0' (ret=-3): failed [ 521.334308][T10302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1131'. [ 521.353436][ T6042] usb 1-1: USB disconnect, device number 41 [ 522.602867][ T1452] team0 (unregistering): Port device team_slave_1 removed [ 522.820978][ T1452] team0 (unregistering): Port device team_slave_0 removed [ 524.315002][T10348] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 525.889903][ T5710] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 526.761679][ T1452] team0 (unregistering): Port device team_slave_1 removed [ 526.809664][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 526.811463][ T5710] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 526.811480][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.875574][ T5710] pvrusb2: Hardware description: Terratec Grabster AV400 [ 526.875658][ T5710] pvrusb2: ********** [ 526.875666][ T5710] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 526.875677][ T5710] pvrusb2: Important functionality might not be entirely working. [ 526.875716][ T5710] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 526.875728][ T5710] pvrusb2: ********** [ 527.257833][ T1452] team0 (unregistering): Port device team_slave_0 removed [ 528.109044][ T2381] pvrusb2: Invalid write control endpoint [ 528.240646][ T2381] pvrusb2: Invalid write control endpoint [ 528.240659][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 528.240667][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 528.240672][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 528.240680][ T2381] pvrusb2: Device being rendered inoperable [ 528.240710][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 528.240747][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_k) [ 528.245653][ T2381] pvrusb2: Attached sub-driver cx25840 [ 528.245662][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 528.245668][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 528.304257][T10362] libceph: resolve '0' (ret=-3): failed [ 528.306675][T10362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1149'. [ 528.358478][ T10] usb 3-1: USB disconnect, device number 42 [ 529.719354][ T5258] 8021q: adding VLAN 0 to HW filter on device eth12 [ 529.795824][ T9731] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.823345][ T9885] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 529.846503][ T9885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 529.864630][ T9885] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 529.899589][ T5585] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 529.949651][ T9885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.079207][ T1496] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.101252][ T1496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.130808][ T9885] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 530.875263][ T9885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.875696][ T5585] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 530.875721][ T5585] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.875740][ T5585] usb 1-1: config 0 has no interface number 0 [ 530.875785][ T5585] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 530.875827][ T5585] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 530.875850][ T5585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.966721][ T5585] usb 1-1: config 0 descriptor?? [ 531.086326][ T5585] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 531.203029][ T123] usb 1-1: Failed to submit usb control message: -71 [ 531.203066][ T123] usb 1-1: unable to send the bmi data to the device: -71 [ 531.203083][ T123] usb 1-1: unable to get target info from device [ 531.203111][ T123] usb 1-1: could not get target info (-71) [ 531.203221][ T123] usb 1-1: could not probe fw (-71) [ 531.203586][ T5585] usb 1-1: USB disconnect, device number 42 [ 531.757919][ T9885] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 532.024074][ T9885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.045703][ T1517] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.045946][ T1517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.379662][ T1265] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 534.699648][ T1265] usb 1-1: Using ep0 maxpacket: 8 [ 534.701323][ T1265] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 534.701351][ T1265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.717024][ T1265] pvrusb2: Hardware description: Terratec Grabster AV400 [ 534.717037][ T1265] pvrusb2: ********** [ 534.717043][ T1265] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 534.717055][ T1265] pvrusb2: Important functionality might not be entirely working. [ 534.717064][ T1265] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 534.717076][ T1265] pvrusb2: ********** [ 534.862067][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 534.926126][ T2381] pvrusb2: Invalid write control endpoint [ 535.011705][ T10] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 535.011733][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.011751][ T10] usb 3-1: config 0 has no interface number 0 [ 535.011802][ T10] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 535.011844][ T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 535.011867][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.088812][ T10] usb 3-1: config 0 descriptor?? [ 535.123674][T10435] libceph: resolve '0' (ret=-3): failed [ 535.124591][T10435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1162'. [ 535.146366][ T5585] usb 1-1: USB disconnect, device number 43 [ 535.212782][ T10] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 535.217192][ T2381] pvrusb2: Invalid write control endpoint [ 535.217205][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 535.217212][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 535.217219][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 535.217226][ T2381] pvrusb2: Device being rendered inoperable [ 535.272657][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 535.272711][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_k) [ 535.273737][ T2381] pvrusb2: Attached sub-driver cx25840 [ 535.273750][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 535.273760][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 535.428401][ T123] usb 3-1: Failed to submit usb control message: -71 [ 535.428435][ T123] usb 3-1: unable to send the bmi data to the device: -71 [ 535.428453][ T123] usb 3-1: unable to get target info from device [ 535.428467][ T123] usb 3-1: could not get target info (-71) [ 535.428484][ T123] usb 3-1: could not probe fw (-71) [ 535.519240][ T10] usb 3-1: USB disconnect, device number 43 [ 535.787724][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 535.907923][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 535.935952][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 535.961041][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 535.962075][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 536.580016][ T9885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.682601][ T9885] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.747883][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.748017][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.805853][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.806016][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.624854][T10491] 9pnet_virtio: no channels available for device syz [ 538.127047][ T5603] Bluetooth: hci1: command tx timeout [ 540.169652][ T5603] Bluetooth: hci1: command tx timeout [ 541.281369][ T5585] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 541.431178][ T5585] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 541.431195][ T5585] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.431205][ T5585] usb 1-1: config 0 has no interface number 0 [ 541.431229][ T5585] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 541.431252][ T5585] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 541.431265][ T5585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.438151][ T5585] usb 1-1: config 0 descriptor?? [ 541.589112][ T5585] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 541.658631][ T5585] usb 1-1: USB disconnect, device number 44 [ 541.699370][ T1011] usb 1-1: Failed to submit usb control message: -71 [ 541.699404][ T1011] usb 1-1: unable to send the bmi data to the device: -71 [ 541.704944][ T1011] usb 1-1: unable to get target info from device [ 541.704964][ T1011] usb 1-1: could not get target info (-71) [ 541.704981][ T1011] usb 1-1: could not probe fw (-71) [ 542.249400][ T5603] Bluetooth: hci1: command tx timeout [ 543.093579][T10054] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 543.139641][T10054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.269321][ T38] audit: type=1326 audit(1783713983.314:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10548 comm="syz.0.1180" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a0404de59 code=0x0 [ 543.561473][T10054] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 543.621810][T10054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.669103][T10054] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 543.714798][T10054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.739153][T10054] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 543.792719][T10054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.351301][ T5603] Bluetooth: hci1: command tx timeout [ 547.869130][T10588] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 547.985432][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 548.008055][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 548.010347][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 548.025839][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 548.027368][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 548.032158][ T1452] bridge_slave_1: left allmulticast mode [ 548.032184][ T1452] bridge_slave_1: left promiscuous mode [ 548.032413][ T1452] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.220493][ T1452] bridge_slave_0: left allmulticast mode [ 548.220524][ T1452] bridge_slave_0: left promiscuous mode [ 548.220728][ T1452] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.110292][ T1452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.190341][ T1452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.211762][ T1452] bond0 (unregistering): Released all slaves [ 550.226294][ T5603] Bluetooth: hci2: command tx timeout [ 551.471059][ T1452] hsr_slave_0: left promiscuous mode [ 551.511851][ T1452] hsr_slave_1: left promiscuous mode [ 551.512847][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.550564][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.574783][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'. [ 552.239583][ T5603] Bluetooth: hci2: command tx timeout [ 553.121169][ T1452] team0 (unregistering): Port device team_slave_1 removed [ 553.170615][ T1452] team0 (unregistering): Port device team_slave_0 removed [ 553.363648][T10661] macvtap1: entered promiscuous mode [ 553.364152][T10661] team0: Device macvtap1 is already an upper device of the team interface [ 553.533169][T10464] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.533320][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.533492][T10464] bridge_slave_0: entered allmulticast mode [ 553.535522][T10464] bridge_slave_0: entered promiscuous mode [ 553.567591][T10464] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.567842][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.568084][T10464] bridge_slave_1: entered allmulticast mode [ 553.589177][T10464] bridge_slave_1: entered promiscuous mode [ 553.732906][T10464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.753915][T10464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.906654][T10464] team0: Port device team_slave_0 added [ 553.953815][T10464] team0: Port device team_slave_1 added [ 553.966971][T10667] Bluetooth: MGMT ver 1.23 [ 554.108793][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805f980800: rx timeout, send abort [ 554.109131][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805f980800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 554.126143][T10054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.157315][T10464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.157330][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.157356][T10464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.216290][T10464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.216306][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.216331][T10464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.338419][ T5603] Bluetooth: hci2: command tx timeout [ 554.771286][T10054] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.814205][T10464] hsr_slave_0: entered promiscuous mode [ 554.819917][T10464] hsr_slave_1: entered promiscuous mode [ 554.831332][T10464] debugfs: 'hsr0' already exists in 'hsr' [ 554.831372][T10464] Cannot create hsr debugfs directory [ 554.994620][ T1496] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.994858][ T1496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.072005][ T5258] 8021q: adding VLAN 0 to HW filter on device eth12 [ 555.435878][ T1496] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.457759][ T1496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.399545][ T5603] Bluetooth: hci2: command tx timeout [ 556.515308][T10590] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.515941][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.516180][T10590] bridge_slave_0: entered allmulticast mode [ 556.543787][T10590] bridge_slave_0: entered promiscuous mode [ 557.090045][T10590] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.090228][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.090399][T10590] bridge_slave_1: entered allmulticast mode [ 557.092288][T10590] bridge_slave_1: entered promiscuous mode [ 557.318336][T10590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.422115][T10590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.132901][T10590] team0: Port device team_slave_0 added [ 558.135329][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 558.155473][T10590] team0: Port device team_slave_1 added [ 558.365000][T10590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.365011][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.365025][T10590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.390704][T10590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.390720][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.390745][T10590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.717259][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 558.723516][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 558.779324][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 558.797070][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 558.803621][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 559.609236][T10590] hsr_slave_0: entered promiscuous mode [ 559.617363][T10590] hsr_slave_1: entered promiscuous mode [ 559.618900][T10590] debugfs: 'hsr0' already exists in 'hsr' [ 559.618924][T10590] Cannot create hsr debugfs directory [ 559.950307][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 560.103137][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 560.107980][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 560.108006][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 560.108030][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 560.108053][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.108092][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 560.108115][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.366379][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 560.366426][ T10] usbtmc 1-1:16.0: can't read capabilities [ 560.378273][ T1452] bridge_slave_1: left allmulticast mode [ 560.378302][ T1452] bridge_slave_1: left promiscuous mode [ 560.378564][ T1452] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.550556][ T1452] bridge_slave_0: left allmulticast mode [ 560.550579][ T1452] bridge_slave_0: left promiscuous mode [ 560.550735][ T1452] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.598164][ T10] usb 1-1: USB disconnect, device number 45 [ 560.881172][ T5603] Bluetooth: hci3: command tx timeout [ 562.179327][ T1452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.250644][ T1452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.293131][ T1452] bond0 (unregistering): Released all slaves [ 562.821363][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.821459][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.960572][ T5603] Bluetooth: hci3: command tx timeout [ 563.114091][ T1452] hsr_slave_0: left promiscuous mode [ 563.152886][ T1452] hsr_slave_1: left promiscuous mode [ 563.154671][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.172759][T10383] Flush: task=udevd[10383] dev=loop7 state=2 [ 563.192018][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.242988][T10383] Teardown: task=udevd[10383] dev=loop7 state=2 [ 563.435270][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 563.741299][ T1452] team0 (unregistering): Port device team_slave_1 removed [ 563.790006][ T1452] team0 (unregistering): Port device team_slave_0 removed [ 563.958555][T10464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 563.998179][T10464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 564.047911][T10464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 564.084023][T10464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 564.504162][T10464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 564.607849][T10464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 564.691022][T10464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 564.744932][T10464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 565.041123][ T5603] Bluetooth: hci3: command tx timeout [ 566.058744][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 566.248920][T10931] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 567.130828][ T5603] Bluetooth: hci3: command tx timeout [ 567.214908][T10948] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 567.423384][T10773] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.425194][T10773] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.425375][T10773] bridge_slave_0: entered allmulticast mode [ 567.481937][T10773] bridge_slave_0: entered promiscuous mode [ 567.578244][T10956] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 567.798040][T10773] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.798280][T10773] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.798511][T10773] bridge_slave_1: entered allmulticast mode [ 567.827706][T10773] bridge_slave_1: entered promiscuous mode [ 568.038208][T10773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.273288][T10773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.393838][T10984] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 568.964004][T10773] team0: Port device team_slave_0 added [ 568.983928][T10773] team0: Port device team_slave_1 added [ 569.073112][T10590] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 569.128103][T10590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.171703][T10590] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 569.222626][T10590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.226084][T10773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.226094][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.226108][T10773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.284826][T10590] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 569.346170][T10590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.392645][T10773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.392662][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.392689][T10773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.555866][T10590] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 569.586306][T10590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.801436][T10464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.822958][T10773] hsr_slave_0: entered promiscuous mode [ 569.825047][T10773] hsr_slave_1: entered promiscuous mode [ 569.826797][T10773] debugfs: 'hsr0' already exists in 'hsr' [ 569.826819][T10773] Cannot create hsr debugfs directory [ 570.175580][T10464] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.273446][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.273543][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.399712][ T1452] bridge_slave_1: left allmulticast mode [ 570.399736][ T1452] bridge_slave_1: left promiscuous mode [ 570.399910][ T1452] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.500444][ T1452] bridge_slave_0: left allmulticast mode [ 570.500469][ T1452] bridge_slave_0: left promiscuous mode [ 570.500633][ T1452] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.300406][ T1452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.380869][ T1452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.401929][ T1452] bond0 (unregistering): Released all slaves [ 571.496556][ T1496] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.496685][ T1496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.053865][T11002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.541768][ T1452] hsr_slave_0: left promiscuous mode [ 572.581129][ T1452] hsr_slave_1: left promiscuous mode [ 572.581982][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.620307][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.939258][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 573.791655][ T1452] team0 (unregistering): Port device team_slave_1 removed [ 573.850241][ T1452] team0 (unregistering): Port device team_slave_0 removed [ 573.969810][ T5585] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 574.057746][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10 [ 574.129639][ T5585] usb 1-1: Using ep0 maxpacket: 16 [ 574.136273][ T5585] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 574.136299][ T5585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.136309][ T5585] usb 1-1: Product: syz [ 574.136316][ T5585] usb 1-1: Manufacturer: syz [ 574.136324][ T5585] usb 1-1: SerialNumber: syz [ 574.176567][ T5585] usb 1-1: config 0 descriptor?? [ 574.912709][ T5585] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 577.314255][ T5585] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 577.315119][ T5585] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 577.315294][ T5585] usb 1-1: media controller created [ 577.526123][ T5585] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.359918][T11083] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 578.394378][ T5585] zl10353_read_register: readreg error (reg=127, ret==0) [ 578.394413][ T5585] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 578.394422][ T5585] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 578.428213][ T5585] usb 1-1: USB disconnect, device number 46 [ 578.733934][ T5585] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 578.939276][T10590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.073108][T10464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.262436][T10590] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.333342][ T1570] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.335056][ T1570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.472420][ T1570] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.472583][ T1570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.812676][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'. [ 580.161700][ T38] audit: type=1326 audit(1783714020.194:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11138 comm="syz.2.1343" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d8295de59 code=0x0 [ 580.425826][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 580.426756][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 580.464974][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 580.465157][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 580.491665][ T5710] libceph: connect (1)[c::]:6789 error -101 [ 580.491846][ T5710] libceph: mon0 (1)[c::]:6789 connect error [ 580.546151][ T5710] libceph: connect (1)[c::]:6789 error -101 [ 580.546336][ T5710] libceph: mon0 (1)[c::]:6789 connect error [ 580.726058][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 580.726237][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 580.819541][T11133] ceph: No mds server is up or the cluster is laggy [ 580.822677][T11137] ceph: No mds server is up or the cluster is laggy [ 580.851313][ T6042] libceph: connect (1)[c::]:6789 error -101 [ 580.851485][ T6042] libceph: mon0 (1)[c::]:6789 connect error [ 580.872233][T10773] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 580.905073][T10773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 580.919332][T10773] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 580.967313][T10773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 581.005197][T10773] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 581.101109][T10773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 581.112171][T10773] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 581.203849][T10773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 581.207333][T10464] veth0_vlan: entered promiscuous mode [ 581.232104][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 581.232280][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 581.307616][T10464] veth1_vlan: entered promiscuous mode [ 581.372934][ T6042] libceph: connect (1)[c::]:6789 error -101 [ 581.373108][ T6042] libceph: mon0 (1)[c::]:6789 connect error [ 581.860791][T10464] veth0_macvtap: entered promiscuous mode [ 581.912896][T10464] veth1_macvtap: entered promiscuous mode [ 582.316470][T10464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.487522][T10464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.531777][T10590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.558898][ T38] audit: type=1326 audit(1783714022.604:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11179 comm="syz.0.1351" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a0404de59 code=0x0 [ 582.564885][ T1570] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.568518][ T1570] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.593113][ T1570] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.598166][ T1570] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.662331][T10773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.982634][T10773] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.133737][ T1496] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.212487][ T1496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.335923][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.336104][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.416646][ T1452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.416676][ T1452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.754476][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.754495][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.891857][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1360'. [ 584.739662][T10590] veth0_vlan: entered promiscuous mode [ 584.826232][T10590] veth1_vlan: entered promiscuous mode [ 585.105171][T10590] veth0_macvtap: entered promiscuous mode [ 585.149804][T10590] veth1_macvtap: entered promiscuous mode [ 585.237202][T10590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.293847][T10590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.329387][ T1011] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.351774][ T1011] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.351819][ T1011] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.351855][ T1011] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.508376][T11223] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 587.489544][T11239] fuse: Bad value for 'fd' [ 587.648166][T11239] overlay: ./file0 is not a directory [ 588.757099][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.757122][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.426191][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.426206][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.895238][T10773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.358969][T11287] fuse: Bad value for 'fd' [ 590.417473][T11287] overlay: ./file0 is not a directory [ 591.696549][T11302] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 594.193071][T10773] veth0_vlan: entered promiscuous mode [ 594.210657][T10773] veth1_vlan: entered promiscuous mode [ 594.370086][T10773] veth0_macvtap: entered promiscuous mode [ 594.379998][T10773] veth1_macvtap: entered promiscuous mode [ 594.467769][T10773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.236719][T10773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.394989][ T47] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.395075][ T47] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.395111][ T47] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.395147][ T47] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.496135][T11333] fuse: Unknown parameter '0x0000000000000005' [ 595.542621][T11333] overlay: ./file0 is not a directory [ 597.682164][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.682185][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.092580][ T1496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.092599][ T1496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.179563][T11353] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1404'. [ 598.528555][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.716194][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.899137][T11376] fuse: Unknown parameter '0x0000000000000005' [ 599.948935][T11376] overlay: ./file0 is not a directory [ 600.947717][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1415'. [ 600.982693][ T32] libceph: connect (1)[c::]:6789 error -101 [ 600.982857][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 600.983887][ T32] libceph: connect (1)[c::]:6789 error -101 [ 600.984044][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 601.122954][ T5585] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 601.178724][T11404] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 601.243569][ T5687] libceph: connect (1)[c::]:6789 error -101 [ 601.243902][ T5687] libceph: mon0 (1)[c::]:6789 connect error [ 601.309539][ T5585] usb 8-1: Using ep0 maxpacket: 16 [ 601.839918][T11389] ceph: No mds server is up or the cluster is laggy [ 602.004643][ T32] libceph: connect (1)[c::]:6789 error -101 [ 602.224423][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 602.987702][ T5585] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 602.987745][ T5585] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.987766][ T5585] usb 8-1: Product: syz [ 602.987780][ T5585] usb 8-1: Manufacturer: syz [ 602.987793][ T5585] usb 8-1: SerialNumber: syz [ 603.008281][ T5585] usb 8-1: config 0 descriptor?? [ 603.473486][ T5585] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 603.524261][ T5585] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 603.525243][ T5585] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 603.525330][ T5585] usb 8-1: media controller created [ 603.631510][T11427] fuse: Unknown parameter '0x0000000000000005' [ 603.672600][T11427] overlay: ./file0 is not a directory [ 604.438606][ T5585] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.482936][ T5585] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 604.482956][ T5585] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 604.715741][ T6042] usb 8-1: USB disconnect, device number 2 [ 604.790001][T11431] netlink: 'syz.6.1429': attribute type 12 has an invalid length. [ 604.790015][T11431] netlink: 'syz.6.1429': attribute type 29 has an invalid length. [ 604.790022][T11431] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1429'. [ 604.790036][T11431] netlink: 'syz.6.1429': attribute type 1 has an invalid length. [ 604.790043][T11431] netlink: 'syz.6.1429': attribute type 2 has an invalid length. [ 604.790049][T11431] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1429'. [ 604.948098][ T6042] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 605.058923][T11439] 9pnet_virtio: no channels available for device syz [ 607.352914][T11477] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.1444'. [ 607.398735][ T38] audit: type=1326 audit(1783714047.444:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11478 comm="syz.0.1448" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a0404de59 code=0x0 [ 608.550177][T11489] vivid-004: kernel_thread() failed [ 608.929575][ T1265] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 609.079504][ T1265] usb 6-1: Using ep0 maxpacket: 8 [ 609.081867][ T1265] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 609.081895][ T1265] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.141967][ T1265] pvrusb2: Hardware description: Terratec Grabster AV400 [ 609.141984][ T1265] pvrusb2: ********** [ 609.141991][ T1265] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 609.142003][ T1265] pvrusb2: Important functionality might not be entirely working. [ 609.142012][ T1265] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 609.142023][ T1265] pvrusb2: ********** [ 610.202276][ T2381] pvrusb2: Invalid write control endpoint [ 610.279538][ T5710] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 610.389002][T11499] libceph: resolve '0' (ret=-3): failed [ 610.395709][T11499] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1452'. [ 610.405070][ T2381] pvrusb2: Invalid write control endpoint [ 610.405082][ T2381] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 610.405091][ T2381] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 610.405099][ T2381] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 610.405108][ T2381] pvrusb2: Device being rendered inoperable [ 610.405212][ T2381] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 610.405264][ T2381] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_k) [ 610.406225][ T2381] pvrusb2: Attached sub-driver cx25840 [ 610.406236][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 610.406245][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 610.450178][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 610.532667][ T5710] usb 1-1: config 0 has no interfaces? [ 610.541786][ T5710] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 610.541815][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.541892][ T5710] usb 1-1: Product: syz [ 610.541907][ T5710] usb 1-1: Manufacturer: syz [ 610.541921][ T5710] usb 1-1: SerialNumber: syz [ 610.604832][ T5710] usb 1-1: config 0 descriptor?? [ 610.712834][ T5710] usb 6-1: USB disconnect, device number 2 [ 611.647198][ T9] usb 1-1: USB disconnect, device number 47 [ 612.168641][T11547] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.1469'. [ 612.881896][T11555] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 612.912711][T11555] block device autoloading is deprecated and will be removed. [ 615.086075][T11514] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 615.245179][T11514] usb 6-1: Using ep0 maxpacket: 8 [ 615.258606][T11514] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 615.258660][T11514] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.258683][T11514] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.258707][T11514] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 615.258730][T11514] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.258771][T11514] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 615.258793][T11514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.584515][T11514] usb 6-1: usb_control_msg returned -32 [ 615.584563][T11514] usbtmc 6-1:16.0: can't read capabilities [ 615.639730][ T5725] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 615.789817][ T5725] usb 7-1: Using ep0 maxpacket: 16 [ 615.796100][ T5725] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 615.796117][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.796128][ T5725] usb 7-1: Product: syz [ 615.796135][ T5725] usb 7-1: Manufacturer: syz [ 615.796143][ T5725] usb 7-1: SerialNumber: syz [ 615.819379][ T5725] usb 7-1: config 0 descriptor?? [ 616.234616][ T5725] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 616.286220][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 616.288576][ T5725] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 616.288609][ T5725] usb 7-1: media controller created [ 616.304440][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 616.505297][T11609] fuse: Unknown parameter '0x0000000000000005' [ 616.552383][T11609] overlay: ./file0 is not a directory [ 617.272258][ T5725] zl10353_read_register: readreg error (reg=127, ret==0) [ 617.272297][ T5725] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 617.272305][ T5725] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 617.536048][T11611] usbtmc 6-1:16.0: CHECK_CLEAR_STATUS returned a9 [ 619.035398][ T9] usb 7-1: USB disconnect, device number 2 [ 619.063755][ T199] usb 6-1: USB disconnect, device number 3 [ 619.276030][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 621.616269][T11664] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1505'. [ 621.889683][T11676] capability: warning: `syz.0.1506' uses deprecated v2 capabilities in a way that may be insecure [ 621.951128][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 622.129656][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 622.137955][ T9] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 622.137995][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.138020][ T9] usb 6-1: Product: syz [ 622.138040][ T9] usb 6-1: Manufacturer: syz [ 622.138055][ T9] usb 6-1: SerialNumber: syz [ 622.182115][ T9] usb 6-1: config 0 descriptor?? [ 622.593963][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 622.613205][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 622.616225][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 622.616286][ T9] usb 6-1: media controller created [ 622.694387][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 622.795172][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 622.795186][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 623.001484][T11702] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 623.693882][ T1265] usb 6-1: USB disconnect, device number 4 [ 624.022368][ T1265] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 624.245364][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.245465][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.435674][T11730] nbd: couldn't find device at index 16711680 [ 625.134987][T11761] 9pnet_virtio: no channels available for device syz [ 625.201601][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 625.248251][T11765] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 625.355041][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 625.373458][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 625.373489][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.373509][ T9] usb 3-1: Product: syz [ 625.373524][ T9] usb 3-1: Manufacturer: syz [ 625.373537][ T9] usb 3-1: SerialNumber: syz [ 625.439895][ T9] usb 3-1: config 0 descriptor?? [ 625.582021][ T1035] nci: nci_rsp_packet: unknown rsp opcode 0x19 [ 626.004550][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 626.008698][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 626.011585][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 626.011644][ T9] usb 3-1: media controller created [ 626.028477][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 626.208183][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 626.208202][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 626.430699][T11754] ------------[ cut here ]------------ [ 626.430712][T11754] usb 3-1: BOGUS control dir, pipe 80002c80 doesn't match bRequestType c0 [ 626.430737][T11754] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.2.1539/11754 [ 626.430809][T11754] Modules linked in: [ 626.430853][T11754] CPU: 0 UID: 0 PID: 11754 Comm: syz.2.1539 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 626.430951][T11754] Tainted: [L]=SOFTLOCKUP [ 626.430958][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 626.430976][T11754] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 626.431047][T11754] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 626.431066][T11754] RSP: 0018:ffffc90006cb7718 EFLAGS: 00010246 [ 626.431091][T11754] RAX: 0000000000000000 RBX: ffff88802ad56c00 RCX: 0000000080002c80 [ 626.431105][T11754] RDX: ffff88803fa4bc60 RSI: ffffffff8c11b5e0 RDI: ffffffff8fbbec80 [ 626.431122][T11754] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 626.431137][T11754] R10: ffffc90006cb7800 R11: fffff52000d96f0c R12: 1ffff110044d3820 [ 626.431153][T11754] R13: ffff88802269c100 R14: ffff88803fa4bc60 R15: 0000000080002c80 [ 626.431168][T11754] FS: 00007f6d80bb66c0(0000) GS:ffff888125c43000(0000) knlGS:0000000000000000 [ 626.431187][T11754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 626.431202][T11754] CR2: 000000110c45a3f3 CR3: 000000006327a000 CR4: 00000000003526f0 [ 626.431220][T11754] Call Trace: [ 626.431257][T11754] [ 626.431313][T11754] usb_start_wait_urb+0x13f/0x5b0 [ 626.431356][T11754] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 626.431431][T11754] usb_control_msg+0x234/0x3e0 [ 626.431467][T11754] dtv5100_i2c_msg+0x231/0x2f0 [ 626.431503][T11754] dtv5100_i2c_xfer+0x1a5/0x610 [ 626.431539][T11754] __i2c_transfer+0x7be/0x1fe0 [ 626.431569][T11754] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 626.431594][T11754] ? lockdep_hardirqs_on+0x7a/0x110 [ 626.431619][T11754] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 626.431644][T11754] ? rt_mutex_lock_nested+0x156/0x1c0 [ 626.431671][T11754] ? i2c_transfer+0xc8/0x2d0 [ 626.431699][T11754] i2c_transfer+0x1cc/0x2d0 [ 626.431728][T11754] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 626.431765][T11754] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 626.431798][T11754] ? _copy_from_user+0x94/0xb0 [ 626.431833][T11754] i2cdev_write+0x116/0x1e0 [ 626.431863][T11754] vfs_writev+0x4c4/0x990 [ 626.431887][T11754] ? __pfx_i2cdev_write+0x10/0x10 [ 626.431917][T11754] ? __pfx_vfs_writev+0x10/0x10 [ 626.431965][T11754] ? __fget_files+0x2a/0x420 [ 626.431995][T11754] ? __fget_files+0x3a8/0x420 [ 626.432019][T11754] ? __fget_files+0x2a/0x420 [ 626.432053][T11754] do_writev+0x15a/0x2e0 [ 626.432100][T11754] ? __pfx_do_writev+0x10/0x10 [ 626.432132][T11754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.432156][T11754] do_syscall_64+0x174/0x580 [ 626.432180][T11754] ? trace_irq_disable+0x3b/0x140 [ 626.432205][T11754] ? clear_bhb_loop+0x40/0x90 [ 626.432231][T11754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.432251][T11754] RIP: 0033:0x7f6d8295de59 [ 626.432278][T11754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.432296][T11754] RSP: 002b:00007f6d80bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 626.432318][T11754] RAX: ffffffffffffffda RBX: 00007f6d82be5fa0 RCX: 00007f6d8295de59 [ 626.432333][T11754] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 626.432347][T11754] RBP: 00007f6d829f3e6f R08: 0000000000000000 R09: 0000000000000000 [ 626.432361][T11754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.432374][T11754] R13: 00007f6d82be6038 R14: 00007f6d82be5fa0 R15: 00007ffc095c6e98 [ 626.432407][T11754] [ 626.432418][T11754] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 626.432436][T11754] CPU: 0 UID: 0 PID: 11754 Comm: syz.2.1539 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 626.432464][T11754] Tainted: [L]=SOFTLOCKUP [ 626.432472][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 626.432484][T11754] Call Trace: [ 626.432492][T11754] [ 626.432500][T11754] vpanic+0x5d9/0xad0 [ 626.432524][T11754] ? __pfx_vpanic+0x10/0x10 [ 626.432544][T11754] ? __pfx__printk+0x10/0x10 [ 626.432568][T11754] ? is_bpf_text_address+0x292/0x2b0 [ 626.432596][T11754] ? is_bpf_text_address+0x26/0x2b0 [ 626.432632][T11754] panic+0xc5/0xd0 [ 626.432652][T11754] ? __pfx_panic+0x10/0x10 [ 626.432689][T11754] __warn+0x315/0x4c0 [ 626.432708][T11754] ? usb_submit_urb+0x1057/0x18b0 [ 626.432737][T11754] ? usb_submit_urb+0x1057/0x18b0 [ 626.432767][T11754] __report_bug+0x276/0x570 [ 626.432796][T11754] ? usb_submit_urb+0x1057/0x18b0 [ 626.432824][T11754] ? __pfx___report_bug+0x10/0x10 [ 626.432848][T11754] ? stack_trace_save+0xa9/0x100 [ 626.432876][T11754] ? stack_depot_save_flags+0x33/0x800 [ 626.432911][T11754] report_bug_entry+0x19a/0x290 [ 626.432936][T11754] ? usb_submit_urb+0x1100/0x18b0 [ 626.432959][T11754] ? usb_submit_urb+0x1105/0x18b0 [ 626.432983][T11754] handle_bug+0xce/0x200 [ 626.433012][T11754] exc_invalid_op+0x1a/0x50 [ 626.433039][T11754] asm_exc_invalid_op+0x1a/0x20 [ 626.433059][T11754] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 626.433085][T11754] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 626.433102][T11754] RSP: 0018:ffffc90006cb7718 EFLAGS: 00010246 [ 626.433120][T11754] RAX: 0000000000000000 RBX: ffff88802ad56c00 RCX: 0000000080002c80 [ 626.433134][T11754] RDX: ffff88803fa4bc60 RSI: ffffffff8c11b5e0 RDI: ffffffff8fbbec80 [ 626.433150][T11754] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 626.433164][T11754] R10: ffffc90006cb7800 R11: fffff52000d96f0c R12: 1ffff110044d3820 [ 626.433180][T11754] R13: ffff88802269c100 R14: ffff88803fa4bc60 R15: 0000000080002c80 [ 626.433212][T11754] ? usb_submit_urb+0x1091/0x18b0 [ 626.433248][T11754] usb_start_wait_urb+0x13f/0x5b0 [ 626.433282][T11754] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 626.433329][T11754] usb_control_msg+0x234/0x3e0 [ 626.433362][T11754] dtv5100_i2c_msg+0x231/0x2f0 [ 626.433397][T11754] dtv5100_i2c_xfer+0x1a5/0x610 [ 626.433433][T11754] __i2c_transfer+0x7be/0x1fe0 [ 626.433461][T11754] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 626.433487][T11754] ? lockdep_hardirqs_on+0x7a/0x110 [ 626.433510][T11754] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 626.433535][T11754] ? rt_mutex_lock_nested+0x156/0x1c0 [ 626.433562][T11754] ? i2c_transfer+0xc8/0x2d0 [ 626.433590][T11754] i2c_transfer+0x1cc/0x2d0 [ 626.433619][T11754] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 626.433649][T11754] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 626.433681][T11754] ? _copy_from_user+0x94/0xb0 [ 626.433714][T11754] i2cdev_write+0x116/0x1e0 [ 626.433743][T11754] vfs_writev+0x4c4/0x990 [ 626.433772][T11754] ? __pfx_i2cdev_write+0x10/0x10 [ 626.433803][T11754] ? __pfx_vfs_writev+0x10/0x10 [ 626.433839][T11754] ? __fget_files+0x2a/0x420 [ 626.433868][T11754] ? __fget_files+0x3a8/0x420 [ 626.433892][T11754] ? __fget_files+0x2a/0x420 [ 626.433926][T11754] do_writev+0x15a/0x2e0 [ 626.433951][T11754] ? __pfx_do_writev+0x10/0x10 [ 626.433980][T11754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.434003][T11754] do_syscall_64+0x174/0x580 [ 626.434027][T11754] ? trace_irq_disable+0x3b/0x140 [ 626.434051][T11754] ? clear_bhb_loop+0x40/0x90 [ 626.434076][T11754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.434097][T11754] RIP: 0033:0x7f6d8295de59 [ 626.434114][T11754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.434131][T11754] RSP: 002b:00007f6d80bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 626.434152][T11754] RAX: ffffffffffffffda RBX: 00007f6d82be5fa0 RCX: 00007f6d8295de59 [ 626.434167][T11754] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 626.434180][T11754] RBP: 00007f6d829f3e6f R08: 0000000000000000 R09: 0000000000000000 [ 626.434193][T11754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.434206][T11754] R13: 00007f6d82be6038 R14: 00007f6d82be5fa0 R15: 00007ffc095c6e98 [ 626.434239][T11754] [ 626.434506][T11754] Kernel Offset: disabled