last executing test programs: 5.298276791s ago: executing program 3 (id=1347): eventfd(0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) 4.302014574s ago: executing program 3 (id=1351): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r1, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000004e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00'], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') 3.274705177s ago: executing program 3 (id=1355): openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x28, r2, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2e, 0xe}, 0x0) mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) r7 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) syz_open_dev$usbfs(&(0x7f00000000c0), 0x8204, 0x2) 3.082250371s ago: executing program 2 (id=1356): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xe, 0x9, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 3.081448271s ago: executing program 3 (id=1357): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 2.938225344s ago: executing program 0 (id=1360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xe860}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4800, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x1020, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001eeffffffffffffff850a3f0000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, r6) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(r3, 0x0, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7400000010002104", @ANYRES32], 0x74}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) 2.063266664s ago: executing program 3 (id=1362): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xc8) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20004450) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$proc_mixer(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="50484f4e45494e0e0400000000000065272030303030303030301430303030303030303030300a4449474954414c310a"], 0x30) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b405f592196cd61a20fe534b0c02000034000000010000000000000600000000000000950000000000000000bf3fb6589c90737a597486369d72"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x1, 0x0, 0x337740ff}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0xfff5, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, r7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r13, 0x29, 0x4, &(0x7f0000000040)=0xb, 0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r12, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r0, r3, 0x0) 2.045224354s ago: executing program 0 (id=1363): syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000300)=@default_ibss_ssid, 0x6, 0x1) 2.028192665s ago: executing program 2 (id=1364): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) 1.732985641s ago: executing program 2 (id=1365): openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x28, r2, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2e, 0xe}, 0x0) mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) r7 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) syz_open_dev$usbfs(&(0x7f00000000c0), 0x8204, 0x2) 1.640461514s ago: executing program 0 (id=1366): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.531168036s ago: executing program 0 (id=1368): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) write$evdev(r0, 0x0, 0x0) 1.407374519s ago: executing program 0 (id=1369): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 1.407065979s ago: executing program 3 (id=1370): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='transPfd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x3, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x200000}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) write$cgroup_freezer_state(r0, 0x0, 0x0) 1.381362369s ago: executing program 2 (id=1372): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'hugetlb'}]}, 0x9) 1.292844321s ago: executing program 1 (id=1373): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r5, r5, 0x0, 0x23) 1.222351023s ago: executing program 0 (id=1374): exit(0x7ffd) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xfffff5b6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x2}, 0x8) socket$netlink(0x10, 0x3, 0x0) 1.222104173s ago: executing program 2 (id=1375): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x403, &(0x7f0000000000)={0x0}) r3 = getpgid(r2) fcntl$setown(r1, 0x8, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4a24, 0x4, @mcast2, 0xd924}}, 0x9, 0x8}, &(0x7f0000000280)=0x88) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r7 = eventfd2(0xa, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r7, 0x4}) write$eventfd(r7, &(0x7f0000000080)=0x430f, 0x8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.074360846s ago: executing program 1 (id=1376): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 730.764534ms ago: executing program 1 (id=1377): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) write$evdev(r0, 0x0, 0x0) 674.567835ms ago: executing program 2 (id=1378): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) pipe(&(0x7f00000001c0)) fsopen(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x1, 0x2, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) r6 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 462.34159ms ago: executing program 1 (id=1379): mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000240)='./file0\x00', 0x0, 0x49) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 353.795603ms ago: executing program 1 (id=1380): openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x28, r2, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2e, 0xe}, 0x0) mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) r7 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) syz_open_dev$usbfs(&(0x7f00000000c0), 0x8204, 0x2) 0s ago: executing program 1 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xe860}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4800, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x1020, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001eeffffffffffffff850a3f0000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, r6) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(r3, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 49.997525][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.021446][ T5436] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. syzkaller login: [ 73.188788][ T5761] cgroup: Unknown subsys name 'net' [ 73.328260][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.741836][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.120547][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.131705][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.139473][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.147971][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.155973][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.164046][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.265170][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.273605][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.282657][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.297350][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.306305][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.315210][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.331659][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.339710][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.347139][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.347705][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.354860][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.363025][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.370421][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.383346][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.390975][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.399830][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.412761][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.420669][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.688500][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 76.794964][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 76.853403][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.861171][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.868664][ T5773] bridge_slave_0: entered allmulticast mode [ 76.875852][ T5773] bridge_slave_0: entered promiscuous mode [ 76.907199][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.914963][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.922233][ T5773] bridge_slave_1: entered allmulticast mode [ 76.928949][ T5773] bridge_slave_1: entered promiscuous mode [ 77.010894][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.026308][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.069955][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 77.079763][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.087005][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.094238][ T5779] bridge_slave_0: entered allmulticast mode [ 77.101513][ T5779] bridge_slave_0: entered promiscuous mode [ 77.109328][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.116685][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.124120][ T5779] bridge_slave_1: entered allmulticast mode [ 77.131096][ T5779] bridge_slave_1: entered promiscuous mode [ 77.137587][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 77.150286][ T5773] team0: Port device team_slave_0 added [ 77.199186][ T5773] team0: Port device team_slave_1 added [ 77.238763][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.251820][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.267990][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.275245][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.301942][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.320799][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.327810][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.353978][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.438849][ T5779] team0: Port device team_slave_0 added [ 77.463485][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.473689][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.481118][ T5777] bridge_slave_0: entered allmulticast mode [ 77.487878][ T5777] bridge_slave_0: entered promiscuous mode [ 77.496740][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.503971][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.511293][ T5777] bridge_slave_1: entered allmulticast mode [ 77.518375][ T5777] bridge_slave_1: entered promiscuous mode [ 77.536627][ T5779] team0: Port device team_slave_1 added [ 77.564497][ T5773] hsr_slave_0: entered promiscuous mode [ 77.573349][ T5773] hsr_slave_1: entered promiscuous mode [ 77.587870][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.595242][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.603582][ T5776] bridge_slave_0: entered allmulticast mode [ 77.610441][ T5776] bridge_slave_0: entered promiscuous mode [ 77.618292][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.625567][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.633206][ T5776] bridge_slave_1: entered allmulticast mode [ 77.640015][ T5776] bridge_slave_1: entered promiscuous mode [ 77.658553][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.688760][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.696493][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.723288][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.742824][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.780738][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.787741][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.817418][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.844896][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.865987][ T5777] team0: Port device team_slave_0 added [ 77.884869][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.905997][ T5777] team0: Port device team_slave_1 added [ 77.964520][ T5776] team0: Port device team_slave_0 added [ 77.988976][ T5779] hsr_slave_0: entered promiscuous mode [ 77.996356][ T5779] hsr_slave_1: entered promiscuous mode [ 78.002898][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.010715][ T5779] Cannot create hsr debugfs directory [ 78.016908][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.024164][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.051418][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.063991][ T5776] team0: Port device team_slave_1 added [ 78.070316][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.077462][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.103992][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.193069][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.200064][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.227079][ T5785] Bluetooth: hci0: command tx timeout [ 78.229796][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.269799][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.276969][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.303263][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.328437][ T5777] hsr_slave_0: entered promiscuous mode [ 78.334749][ T5777] hsr_slave_1: entered promiscuous mode [ 78.340936][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.348504][ T5777] Cannot create hsr debugfs directory [ 78.430640][ T5086] Bluetooth: hci3: command tx timeout [ 78.436333][ T5785] Bluetooth: hci1: command tx timeout [ 78.503619][ T5776] hsr_slave_0: entered promiscuous mode [ 78.509945][ T5776] hsr_slave_1: entered promiscuous mode [ 78.517093][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.525598][ T5785] Bluetooth: hci2: command tx timeout [ 78.530764][ T5776] Cannot create hsr debugfs directory [ 78.586561][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.597815][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.644519][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.659020][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.803504][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.815759][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.863950][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.873981][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.953759][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.982036][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.993237][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.004144][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.096618][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.109032][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.125183][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.136668][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.177648][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.213487][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.259412][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.266777][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.291924][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.302839][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.309953][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.328192][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.387073][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.405544][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.441210][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.448385][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.457526][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.464682][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.474980][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.482156][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.516010][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.534451][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.541593][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.557081][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.633884][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.694177][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.701580][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.728823][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.736036][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.773243][ T5777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.788758][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.935366][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.029292][ T5773] veth0_vlan: entered promiscuous mode [ 80.068234][ T5773] veth1_vlan: entered promiscuous mode [ 80.164898][ T5773] veth0_macvtap: entered promiscuous mode [ 80.194212][ T5773] veth1_macvtap: entered promiscuous mode [ 80.264305][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.288188][ T5785] Bluetooth: hci0: command tx timeout [ 80.293553][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.308308][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.333173][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.345056][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.355463][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.364282][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.373117][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.416539][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.521249][ T5785] Bluetooth: hci1: command tx timeout [ 80.526714][ T5785] Bluetooth: hci3: command tx timeout [ 80.575387][ T5779] veth0_vlan: entered promiscuous mode [ 80.594967][ T2884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.601172][ T5779] veth1_vlan: entered promiscuous mode [ 80.605361][ T5086] Bluetooth: hci2: command tx timeout [ 80.619885][ T2884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.628149][ T5777] veth0_vlan: entered promiscuous mode [ 80.649989][ T5776] veth0_vlan: entered promiscuous mode [ 80.682640][ T5777] veth1_vlan: entered promiscuous mode [ 80.697552][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.723804][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.739795][ T5776] veth1_vlan: entered promiscuous mode [ 80.818693][ T5779] veth0_macvtap: entered promiscuous mode [ 80.842864][ T5779] veth1_macvtap: entered promiscuous mode [ 80.872489][ T5777] veth0_macvtap: entered promiscuous mode [ 80.894287][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.909443][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.923287][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.936799][ T5776] veth0_macvtap: entered promiscuous mode [ 80.947246][ T5777] veth1_macvtap: entered promiscuous mode [ 80.976794][ T5776] veth1_macvtap: entered promiscuous mode [ 80.987093][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.010700][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.026795][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.039427][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.048541][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.057885][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.067223][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.106889][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.118907][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.133617][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.144821][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.162940][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.354228][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.407871][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.461972][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.519640][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.623733][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.747127][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.764993][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.774997][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.785569][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.797571][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.808950][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.822046][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.833518][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.843184][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.856074][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.864899][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.926282][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.948840][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.973209][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.985938][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.996387][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.007478][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.019579][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.046974][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.059329][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.068915][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.079930][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.167593][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.194720][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.280521][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.288474][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.351398][ T5086] Bluetooth: hci0: command tx timeout [ 82.371010][ T2884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.386873][ T2884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.402670][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.421266][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.487645][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.532552][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.574071][ T3426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.651170][ T5086] Bluetooth: hci3: command tx timeout [ 82.657179][ T5086] Bluetooth: hci1: command tx timeout [ 82.672436][ T5849] Zero length message leads to an empty skb [ 82.678509][ T5086] Bluetooth: hci2: command tx timeout [ 82.684941][ T3426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.729059][ T5849] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 84.497991][ T5785] Bluetooth: hci0: command tx timeout [ 84.671021][ T5086] Bluetooth: hci3: command tx timeout [ 84.676719][ T5785] Bluetooth: hci1: command tx timeout [ 84.751434][ T5785] Bluetooth: hci2: command tx timeout [ 85.139187][ T27] IPVS: starting estimator thread 0... [ 85.197065][ T5871] syz.3.11[5871]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.251005][ T5872] IPVS: using max 22 ests per chain, 52800 per kthread [ 87.361586][ T970] cfg80211: failed to load regulatory.db [ 89.127120][ T5894] bridge1: entered promiscuous mode [ 90.925793][ T5904] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 90.935289][ T5904] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 90.944999][ T5904] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 90.966246][ T28] audit: type=1800 audit(1784330561.535:2): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.19" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 93.097708][ T5944] Bluetooth: MGMT ver 1.22 [ 93.341037][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.692540][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.800575][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 93.883107][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 93.958168][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.035022][ T9] usb 3-1: Product: syz [ 94.094291][ T9] usb 3-1: Manufacturer: syz [ 94.148813][ T9] usb 3-1: SerialNumber: syz [ 95.541629][ T9] usb 3-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 96.411446][ T5958] syz.1.33 (5958) used greatest stack depth: 17720 bytes left [ 96.634749][ T9] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 96.665159][ T9] usb 3-1: USB disconnect, device number 2 [ 96.815283][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.162212][ T5972] syz.3.37 uses obsolete (PF_INET,SOCK_PACKET) [ 100.118956][ T5995] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 102.170698][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.046615][ T9] usb 2-1: config 0 has no interfaces? [ 103.217237][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 103.523134][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.847274][ T9] usb 2-1: config 0 descriptor?? [ 103.958595][ T9] usb 2-1: can't set config #0, error -71 [ 103.996798][ T9] usb 2-1: USB disconnect, device number 2 [ 108.311229][ T6058] loop0: detected capacity change from 0 to 16 [ 108.414042][ T6058] erofs: (device loop0): mounted with root inode @ nid 36. [ 108.880824][ T6060] syz.0.62: attempt to access beyond end of device [ 108.880824][ T6060] loop0: rw=0, sector=36, nr_sectors = 1 limit=16 [ 114.380672][ T56] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.523302][ T6106] syz.2.73 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 114.780636][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 114.805053][ T56] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 115.452981][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.470725][ T56] usb 4-1: config 0 descriptor?? [ 115.477154][ T56] usb 4-1: can't set config #0, error -71 [ 115.491421][ T56] usb 4-1: USB disconnect, device number 2 [ 120.418909][ T6142] loop3: detected capacity change from 0 to 32768 [ 121.481068][ T6142] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.83 (6142) [ 121.563086][ T6142] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.563240][ T6142] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 121.563313][ T6142] BTRFS info (device loop3): force clearing of disk cache [ 121.563326][ T6142] BTRFS info (device loop3): metadata ratio 0 [ 121.563339][ T6142] BTRFS info (device loop3): enabling disk space caching [ 121.563349][ T6142] BTRFS info (device loop3): disk space caching is enabled [ 123.068758][ T6142] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 123.070012][ T6142] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 123.075934][ T6142] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 123.076416][ T6142] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 123.076841][ T6142] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 123.099235][ T6142] BTRFS error (device loop3): open_ctree failed: -12 [ 123.399982][ T5975] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5975) [ 126.428007][ T6175] pim6reg: entered allmulticast mode [ 126.542393][ T6175] pim6reg: left allmulticast mode [ 135.473541][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.481900][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.772115][ T6249] loop3: detected capacity change from 0 to 1024 [ 140.278890][ T6270] tipc: Trying to set illegal importance in message [ 143.053181][ T970] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.940555][ T970] usb 4-1: Using ep0 maxpacket: 32 [ 144.002263][ T970] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 144.046587][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.072392][ T970] usb 4-1: config 0 descriptor?? [ 144.102027][ T970] as10x_usb: device has been detected [ 144.129847][ T970] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 144.380550][ T56] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 144.735118][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.809599][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.925534][ T56] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.033506][ T970] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 145.059631][ T56] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.107727][ T970] as10x_usb: error during firmware upload part1 [ 145.117907][ T970] Registered device nBox DVB-T Dongle [ 145.124849][ T970] usb 4-1: USB disconnect, device number 3 [ 145.125236][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.179454][ T970] Unregistered device nBox DVB-T Dongle [ 145.208967][ T56] usb 1-1: config 0 descriptor?? [ 145.363978][ T970] as10x_usb: device has been disconnected [ 146.266946][ T56] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 146.530284][ T56] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 146.541796][ T56] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 146.549215][ T56] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 146.557249][ T56] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 146.595626][ T56] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 146.669201][ T56] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 146.859038][ T56] usb 1-1: USB disconnect, device number 2 [ 148.816785][ T6336] fido_id[6336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 151.021241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 151.400199][ T6369] binder: 6367:6369 ioctl c0306201 0 returned -14 [ 151.431718][ T6369] binder: 6367:6369 ioctl c0306201 0 returned -14 [ 151.462620][ T6369] binder: 6367:6369 ioctl 4018620d 0 returned -22 [ 151.573771][ T6374] binder: 6367:6374 ioctl c0306201 0 returned -14 [ 154.956994][ T6408] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 157.389734][ T6426] loop0: detected capacity change from 0 to 512 [ 157.434910][ T6424] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 157.506466][ T6426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.620779][ T5839] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 157.668100][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.870919][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 157.905942][ T5839] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.060025][ T5839] usb 4-1: config 0 has no interface number 0 [ 158.247940][ T5839] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 158.349263][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.398665][ T5839] usb 4-1: Product: syz [ 158.443891][ T5839] usb 4-1: Manufacturer: syz [ 158.448560][ T5839] usb 4-1: SerialNumber: syz [ 158.617205][ T5839] usb 4-1: config 0 descriptor?? [ 158.724455][ T6444] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 159.293207][ T5839] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 159.849456][ T5839] gspca_spca1528: reg_w err -110 [ 159.958911][ T5839] spca1528: probe of 4-1:0.1 failed with error -110 [ 160.219114][ T5839] usb 4-1: USB disconnect, device number 4 [ 163.108083][ T6472] comedi comedi3: Buffer allocation failed [ 167.085146][ T5812] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 172.022115][ T6529] sched: RT throttling activated [ 172.728064][ T6537] 9pnet_fd: Insufficient options for proto=fd [ 172.731042][ T6539] netlink: 'syz.1.195': attribute type 13 has an invalid length. [ 172.742376][ T6539] netlink: 'syz.1.195': attribute type 27 has an invalid length. [ 172.940543][ T970] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 173.182283][ T970] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.206072][ T970] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 173.228517][ T970] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.243770][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.343735][ T6536] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.511269][ T970] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 174.194681][ T970] usb 4-1: USB disconnect, device number 5 [ 176.389083][ T6572] 9pnet_fd: Insufficient options for proto=fd [ 178.930747][ T6567] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 179.395464][ T6567] usb 3-1: Using ep0 maxpacket: 32 [ 179.426900][ T6567] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 179.450595][ T6567] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 180.546290][ T6567] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 180.554619][ T6567] usb 3-1: Product: syz [ 180.577990][ T6567] usb 3-1: Manufacturer: syz [ 180.582741][ T6567] usb 3-1: SerialNumber: syz [ 180.601261][ T6567] usb 3-1: config 0 descriptor?? [ 180.607164][ T6584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.620808][ T6567] hub 3-1:0.0: bad descriptor, ignoring hub [ 180.630983][ T6567] hub: probe of 3-1:0.0 failed with error -5 [ 180.891877][ T5812] usb 3-1: USB disconnect, device number 4 [ 181.096511][ T6611] 9pnet_fd: Insufficient options for proto=fd [ 184.746672][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.754853][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.979786][ T6617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.021926][ T6663] 9pnet_fd: Insufficient options for proto=fd [ 188.038352][ T6617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.039505][ T6617] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.048691][ T6617] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.064157][ T6617] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.087444][ T6617] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.122113][ T6669] loop1: detected capacity change from 0 to 2048 [ 189.139614][ T6669] ======================================================= [ 189.139614][ T6669] WARNING: The mand mount option has been deprecated and [ 189.139614][ T6669] and is ignored by this kernel. Remove the mand [ 189.139614][ T6669] option from the mount to silence this warning. [ 189.139614][ T6669] ======================================================= [ 189.191112][ T6669] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.245992][ T28] audit: type=1800 audit(8226781603.863:3): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.230" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 190.631447][ T6680] overlayfs: failed to resolve './file0': -2 [ 191.020580][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 191.050186][ T6678] ALSA: mixer_oss: invalid OSS volume 'P' [ 191.210764][ T6690] 9pnet_fd: Insufficient options for proto=fd [ 191.224382][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 191.288593][ T27] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 191.390747][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 191.455460][ T27] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 191.541512][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.704131][ T27] usb 3-1: config 0 descriptor?? [ 192.176697][ T6695] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 192.183579][ T6695] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 192.242843][ T6695] vhci_hcd vhci_hcd.0: Device attached [ 192.296092][ T6696] vhci_hcd: connection closed [ 192.302622][ T42] vhci_hcd: stop threads [ 192.329544][ T42] vhci_hcd: release socket [ 192.345901][ T42] vhci_hcd: disconnect device [ 193.122374][ T27] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 193.129933][ T27] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 193.140504][ T27] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 193.148037][ T27] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 193.158019][ T27] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 193.169725][ T27] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 193.590553][ T6636] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 193.676951][ T27] corsair-cpro: probe of 0003:1B1C:0C10.0002 failed with error -110 [ 193.943317][ T27] usb 3-1: USB disconnect, device number 5 [ 194.380628][ T6636] usb 2-1: Using ep0 maxpacket: 8 [ 194.397293][ T6636] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 194.431605][ T6636] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 194.467482][ T6636] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 194.509539][ T6636] usb 2-1: config 250 has no interface number 0 [ 194.525972][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.532446][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.583526][ T6636] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 194.633976][ T6636] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 194.676438][ T6636] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.720012][ T6636] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 194.764950][ T6636] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 194.797729][ T6636] usb 2-1: config 250 interface 228 has no altsetting 0 [ 194.840269][ T6636] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 194.884616][ T6636] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 194.920991][ T6636] usb 2-1: Product: syz [ 194.939021][ T6636] usb 2-1: SerialNumber: syz [ 195.027704][ T6636] hub 2-1:250.228: bad descriptor, ignoring hub [ 195.085904][ T6636] hub: probe of 2-1:250.228 failed with error -5 [ 195.215001][ T6636] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 195.237267][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.245984][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.282038][ T6715] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 195.507987][ T6721] 9pnet_fd: Insufficient options for proto=fd [ 195.698999][ T6704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.721897][ T6704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.888178][ T6703] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 196.031096][ T6704] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.040107][ T6704] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.049577][ T6704] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.058822][ T6704] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.164070][ T6704] bridge1: left promiscuous mode [ 196.340671][ T6703] usb 2-1: failed to restore interface 228 altsetting 255 (error=-71) [ 196.367805][ T5814] usb 2-1: USB disconnect, device number 3 [ 196.402979][ T5814] usblp0: removed [ 197.041855][ T5814] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 197.580756][ T6748] tipc: Trying to set illegal importance in message [ 197.918482][ T6750] loop0: detected capacity change from 0 to 128 [ 197.978004][ T6750] FAT-fs (loop0): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 198.208325][ T6754] netlink: 'syz.2.253': attribute type 13 has an invalid length. [ 198.311474][ T6754] netlink: 'syz.2.253': attribute type 27 has an invalid length. [ 199.204216][ T6762] 9pnet_fd: Insufficient options for proto=fd [ 199.983138][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 200.081062][ T6633] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 200.314088][ T6633] usb 3-1: Using ep0 maxpacket: 32 [ 200.357163][ T6633] usb 3-1: no configurations [ 200.395679][ T6633] usb 3-1: can't read configurations, error -22 [ 200.701828][ T6633] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 201.600991][ T6633] usb 3-1: Using ep0 maxpacket: 32 [ 201.607979][ T6782] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 201.628831][ T6782] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 201.665470][ T6633] usb 3-1: no configurations [ 201.688539][ T6633] usb 3-1: can't read configurations, error -22 [ 201.758805][ T6633] usb usb3-port1: attempt power cycle [ 201.793547][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 201.799708][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 201.830197][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 201.850431][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 202.210586][ T6633] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 202.241175][ T6633] usb 3-1: Using ep0 maxpacket: 32 [ 203.396873][ T6633] usb 3-1: no configurations [ 203.632718][ T6633] usb 3-1: can't read configurations, error -22 [ 203.845248][ T6791] loop1: detected capacity change from 0 to 256 [ 207.340608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 209.598733][ T6819] siw: device registration error -23 [ 210.130858][ T6733] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 210.863735][ T6836] loop1: detected capacity change from 0 to 256 [ 210.930652][ T6733] usb 3-1: Using ep0 maxpacket: 32 [ 210.944721][ T6733] usb 3-1: no configurations [ 210.949566][ T6733] usb 3-1: can't read configurations, error -22 [ 211.130711][ T6733] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 211.320781][ T6733] usb 3-1: Using ep0 maxpacket: 32 [ 211.334754][ T6733] usb 3-1: no configurations [ 211.339836][ T6733] usb 3-1: can't read configurations, error -22 [ 211.351459][ T6733] usb usb3-port1: attempt power cycle [ 211.780729][ T6733] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.815276][ T6849] loop1: detected capacity change from 0 to 2048 [ 211.840898][ T6849] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.851820][ T6733] usb 3-1: Using ep0 maxpacket: 32 [ 212.064106][ T6733] usb 3-1: no configurations [ 212.068770][ T6733] usb 3-1: can't read configurations, error -22 [ 212.206614][ T28] audit: type=1800 audit(8226781626.596:4): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.280" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 213.287129][ T6733] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 213.530575][ T6733] usb 3-1: device not accepting address 13, error -71 [ 214.349585][ T6733] usb usb3-port1: unable to enumerate USB device [ 215.664072][ T6878] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 215.931277][ T6889] netlink: 'syz.2.291': attribute type 13 has an invalid length. [ 215.942872][ T6889] netlink: 'syz.2.291': attribute type 27 has an invalid length. [ 230.235026][ T6989] pim6reg: entered allmulticast mode [ 230.265155][ T6989] pim6reg: left allmulticast mode [ 232.799572][ T6994] random: crng reseeded on system resumption [ 235.091030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 235.380131][ T7013] siw: device registration error -23 [ 235.871397][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.329'. [ 237.717264][ T7025] block device autoloading is deprecated and will be removed. [ 237.754631][ T7020] md: md2 stopped. [ 237.903070][ T3456] nci: nci_rx_work: unknown MT 0x6 [ 239.037025][ T7052] pim6reg: entered allmulticast mode [ 239.060547][ T5811] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 239.318070][ T7051] pim6reg: left allmulticast mode [ 239.370073][ T7055] Bluetooth: MGMT ver 1.22 [ 239.378568][ T7055] Bluetooth: hci0: service_discovery: too big uuid_count value 48059 [ 239.532457][ T7059] siw: device registration error -23 [ 239.540584][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 239.796444][ T7029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.517076][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 240.581077][ T5811] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 240.614421][ T5811] usb 3-1: can't read configurations, error -71 [ 244.688904][ T7109] pim6reg: entered allmulticast mode [ 244.915438][ T42] nci: nci_rx_work: unknown MT 0x6 [ 244.975359][ T7107] pim6reg: left allmulticast mode [ 247.363935][ T7102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.213955][ T7141] fuse: Unknown parameter 'fd0x0000000000000004' [ 251.488178][ T7149] pim6reg: entered allmulticast mode [ 251.541442][ T7149] pim6reg: left allmulticast mode [ 251.887439][ T7156] [U]  [ 252.125572][ T3456] nci: nci_rx_work: unknown MT 0x6 [ 252.150560][ T6633] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 252.577367][ T6633] usb 1-1: Using ep0 maxpacket: 8 [ 252.972515][ T6633] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 252.983169][ T6633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.014346][ T6633] pvrusb2: Hardware description: Terratec Grabster AV400 [ 253.021712][ T6633] pvrusb2: ********** [ 253.025738][ T6633] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 253.050536][ T6633] pvrusb2: Important functionality might not be entirely working. [ 253.058434][ T6633] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 253.070386][ T6633] pvrusb2: ********** [ 253.180011][ T7180] siw: device registration error -23 [ 253.273631][ T2320] pvrusb2: Invalid write control endpoint [ 253.953462][ T6630] usb 1-1: USB disconnect, device number 3 [ 254.183527][ T2320] pvrusb2: Invalid write control endpoint [ 254.256767][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 254.358597][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 254.457389][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 254.555350][ T2320] pvrusb2: Device being rendered inoperable [ 254.629551][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 254.694346][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 254.872009][ T2320] pvrusb2: Attached sub-driver cx25840 [ 254.935387][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 254.948841][ T7169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.089539][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 256.775276][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.860357][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.540667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 258.825176][ T7201] [U]  [ 263.357718][ T7245] [U]  [ 273.790975][ T6629] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 274.070720][ T6629] usb 3-1: Using ep0 maxpacket: 16 [ 274.123430][ T6629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 274.335946][ T6629] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 274.441960][ T6629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.546979][ T6629] usb 3-1: Product: syz [ 274.601955][ T6629] usb 3-1: Manufacturer: syz [ 274.602418][ T6629] usb 3-1: SerialNumber: syz [ 274.677907][ T6629] usb 3-1: config 0 descriptor?? [ 274.774676][ T6629] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 274.774861][ T6629] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 275.081585][ T7326] siw: device registration error -23 [ 275.845782][ T6629] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 276.547672][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.382680][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.431934][ T7339] loop2: detected capacity change from 0 to 7 [ 277.446923][ T6629] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 277.470133][ T6629] em28xx 3-1:0.0: board has no eeprom [ 277.476527][ T7339] Dev loop2: unable to read RDB block 7 [ 277.501173][ T7341] 9pnet: Could not find request transport: fd0x0000000000000005 [ 277.510727][ T7339] loop2: unable to read partition table [ 277.535126][ T7339] loop2: partition table beyond EOD, truncated [ 277.542926][ T7339] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 277.596302][ T6629] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 277.663184][ T6629] em28xx 3-1:0.0: dvb set to bulk mode. [ 277.701968][ T5811] em28xx 3-1:0.0: Binding DVB extension [ 277.780798][ T6629] usb 3-1: USB disconnect, device number 16 [ 277.955349][ T6629] em28xx 3-1:0.0: Disconnecting em28xx [ 278.764409][ T5811] em28xx 3-1:0.0: Registering input extension [ 278.809972][ T6629] em28xx 3-1:0.0: Closing input extension [ 280.022620][ T7364] siw: device registration error -23 [ 280.530254][ T6629] em28xx 3-1:0.0: Freeing device [ 280.594729][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 280.613917][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 280.623025][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 280.632589][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 280.676101][ T7368] 9pnet_virtio: no channels available for device syz [ 281.791738][ T5775] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 281.839769][ T7378] 9pnet: Could not find request transport: fd0x0000000000000005 [ 282.893466][ T7391] input: syz1 as /devices/virtual/input/input6 [ 282.899975][ T7391] input: failed to attach handler leds to device input6, error: -6 [ 285.263181][ T7405] pim6reg: entered allmulticast mode [ 285.272922][ T7405] pim6reg: left allmulticast mode [ 286.945407][ T6632] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 288.410824][ T6632] usb 3-1: config 0 has no interfaces? [ 288.430567][ T6632] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 288.439827][ T6632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.472189][ T6632] usb 3-1: config 0 descriptor?? [ 289.569975][ T6567] usb 3-1: USB disconnect, device number 17 [ 289.586542][ T7440] pim6reg: entered allmulticast mode [ 289.607177][ T7440] pim6reg: left allmulticast mode [ 293.458516][ T7472] pim6reg: entered allmulticast mode [ 293.467563][ T7472] pim6reg: left allmulticast mode [ 293.872492][ T7485] fuse: Bad value for 'fd' [ 297.771492][ T7512] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.779290][ T7512] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.610593][ T7512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.652766][ T7512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.449288][ T7543] 9pnet_virtio: no channels available for device syz [ 300.647827][ T7512] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.657073][ T7512] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.666835][ T7512] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.676128][ T7512] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.808087][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 303.138482][ T7579] 9pnet_virtio: no channels available for device syz [ 306.720671][ T27] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 306.903092][ T27] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 306.952101][ T27] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 307.043094][ T27] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 307.112430][ T27] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 307.189681][ T27] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 307.220730][ T27] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 307.259507][ T27] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 307.275280][ T27] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 307.289180][ T27] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 307.308798][ T27] usb 4-1: string descriptor 0 read error: -22 [ 307.316139][ T27] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 307.459055][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.486579][ T27] adutux 4-1:168.0: interrupt endpoints not found [ 308.235991][ T27] usb 4-1: USB disconnect, device number 6 [ 308.422652][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 310.309382][ T7663] loop2: detected capacity change from 0 to 2048 [ 310.381889][ T7663] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.426640][ T28] audit: type=1800 audit(8226781725.042:5): pid=7663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.514" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 311.409419][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.417208][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.208589][ T7647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.267288][ T7647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.034064][ T7685] 9pnet_virtio: no channels available for device syz [ 313.828469][ T7647] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.837806][ T7647] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.847642][ T7647] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.856612][ T7647] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.961555][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 314.300794][ T7692] loop0: detected capacity change from 0 to 2048 [ 314.330742][ T5775] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 314.475529][ T7692] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.720931][ T28] audit: type=1800 audit(8226781729.322:6): pid=7692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.523" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 316.092782][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 316.104445][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 316.114676][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 316.124465][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 316.135047][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 316.150671][ T7714] 9pnet_virtio: no channels available for device syz [ 317.398163][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.404633][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.024970][ T7739] loop3: detected capacity change from 0 to 2048 [ 319.073486][ T7739] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.337339][ T7751] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 320.479429][ T7751] overlayfs: failed to look up (tracing) for ino (-66) [ 320.653028][ T28] audit: type=1800 audit(8226781733.752:7): pid=7739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.535" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 324.317304][ T7781] loop1: detected capacity change from 0 to 2048 [ 324.563104][ T7781] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.631960][ T28] audit: type=1800 audit(8226781739.242:8): pid=7781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.545" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 328.228881][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 328.240721][ T7828] loop1: detected capacity change from 0 to 2048 [ 328.279261][ T7828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.299601][ T28] audit: type=1800 audit(8226781742.912:9): pid=7828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.560" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 331.855443][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 331.866762][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 331.876864][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 331.889750][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 331.918833][ T7863] 9pnet_virtio: no channels available for device syz [ 334.190561][ T6567] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 334.454973][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 334.466447][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 334.477358][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 334.487742][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 334.506406][ T7897] 9pnet_virtio: no channels available for device syz [ 334.690643][ T6567] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 334.766567][ T6567] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.855330][ T6567] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 334.927158][ T6567] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.043189][ T6567] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.091156][ T6567] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.153004][ T6567] usb 3-1: Product: syz [ 335.182298][ T6567] usb 3-1: Manufacturer: syz [ 335.274299][ T6567] cdc_wdm 3-1:1.0: skipping garbage [ 335.279617][ T6567] cdc_wdm 3-1:1.0: skipping garbage [ 335.348034][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 335.359663][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 335.370719][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 335.381688][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 335.396407][ T7906] 9pnet_virtio: no channels available for device syz [ 335.408573][ T6567] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 335.527180][ T6567] cdc_wdm 3-1:1.0: Unknown control protocol [ 336.697346][ T6630] usb 3-1: USB disconnect, device number 18 [ 338.023912][ T7927] loop0: detected capacity change from 0 to 2048 [ 338.096502][ T7927] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.132096][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 338.144106][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 338.161792][ T7932] 9pnet_virtio: no channels available for device syz [ 338.378142][ T28] audit: type=1800 audit(8226781752.962:10): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.590" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 339.329603][ T7939] 9pnet_virtio: no channels available for device syz [ 342.184194][ T7962] loop3: detected capacity change from 0 to 2048 [ 342.230081][ T7962] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.284219][ T28] audit: type=1800 audit(8226781756.902:11): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.602" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 342.352659][ T7968] __nla_validate_parse: 7 callbacks suppressed [ 342.352685][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 342.485079][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 342.495178][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 342.504981][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 342.521529][ T7968] 9pnet_virtio: no channels available for device syz [ 345.083652][ T7995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.612'. [ 345.197523][ T7997] loop1: detected capacity change from 0 to 2048 [ 345.255673][ T7997] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.265284][ T7999] loop2: detected capacity change from 0 to 7 [ 345.292018][ T28] audit: type=1800 audit(8226781759.912:12): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.613" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 345.300604][ T7999] Dev loop2: unable to read RDB block 7 [ 345.350765][ T7999] loop2: AHDI p1 p2 p3 [ 345.356840][ T7999] loop2: partition table partially beyond EOD, truncated [ 345.365566][ T7999] loop2: p1 start 1601398130 is beyond EOD, truncated [ 345.630881][ T7999] loop2: p2 start 1702059890 is beyond EOD, truncated [ 346.135742][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 346.158488][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 346.170415][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 346.181073][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 346.190503][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 346.208395][ T8005] 9pnet_virtio: no channels available for device syz [ 348.064935][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.623'. [ 348.219500][ T8031] loop2: detected capacity change from 0 to 2048 [ 348.285012][ T8031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.354725][ T28] audit: type=1800 audit(8226781762.972:13): pid=8031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.624" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 350.650985][ T8046] UBIFS error (pid: 8046): cannot open "/dev/sequencer", error -22 [ 350.793080][ T8052] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 350.813925][ T8053] loop2: detected capacity change from 0 to 7 [ 350.848287][ T8053] Dev loop2: unable to read RDB block 7 [ 350.884973][ T8053] loop2: unable to read partition table [ 350.916125][ T8053] loop2: partition table beyond EOD, truncated [ 350.936337][ T8053] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 353.442835][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.634'. [ 353.759590][ T8078] loop3: detected capacity change from 0 to 2048 [ 353.821286][ T8078] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.846044][ T28] audit: type=1800 audit(8226781768.462:14): pid=8078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.636" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 353.896662][ T8084] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 356.065506][ T8108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.647'. [ 356.110570][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 357.082910][ T8118] loop2: detected capacity change from 0 to 7 [ 357.119684][ T8118] Dev loop2: unable to read RDB block 7 [ 357.125597][ T8118] loop2: unable to read partition table [ 357.132719][ T8120] loop3: detected capacity change from 0 to 2048 [ 357.136701][ T8118] loop2: partition table beyond EOD, truncated [ 357.150665][ T8118] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 357.184548][ T8120] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.229531][ T28] audit: type=1800 audit(8226781771.842:15): pid=8120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.651" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 358.881772][ T8127] Bluetooth: hci0: service_discovery: too big uuid_count value 48059 [ 359.130822][ T6733] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 359.134324][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.656'. [ 360.052982][ T6733] usb 3-1: unable to get BOS descriptor or descriptor too short [ 360.065315][ T6733] usb 3-1: not running at top speed; connect to a high speed hub [ 360.082225][ T6733] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 360.098240][ T6733] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 360.115751][ T6733] usb 3-1: config 14 has no interface number 0 [ 360.135615][ T6733] usb 3-1: config 14 has no interface number 1 [ 360.158970][ T6733] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 360.203333][ T6733] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 360.228750][ T6733] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.500748][ T6630] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 360.748273][ T6630] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 360.858800][ T6630] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 360.900701][ T6630] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 360.949939][ T6630] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 360.969631][ T6630] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 360.976034][ T6733] usb 3-1: config 14 interface 57 has no altsetting 0 [ 360.987636][ T6733] usb 3-1: config 14 interface 228 has no altsetting 0 [ 360.998169][ T6733] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 361.007049][ T6630] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 361.010479][ T6733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.043383][ T6733] usb 3-1: Product: syz [ 361.048259][ T6733] usb 3-1: Manufacturer: syz [ 361.051887][ T6630] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 361.058217][ T6733] usb 3-1: SerialNumber: syz [ 361.064724][ T6630] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 361.081107][ T6630] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 361.116367][ T6630] usb 1-1: string descriptor 0 read error: -22 [ 361.122927][ T6630] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 361.144382][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.164533][ T6630] adutux 1-1:168.0: interrupt endpoints not found [ 361.263925][ T8168] loop1: detected capacity change from 0 to 2048 [ 361.285557][ T8168] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.305004][ T28] audit: type=1800 audit(8226781775.922:16): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.664" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 361.431066][ T6567] usb 1-1: USB disconnect, device number 4 [ 361.528018][ T6733] legousbtower 3-1:14.57: interrupt endpoints not found [ 362.261435][ T6733] legousbtower 3-1:14.228: interrupt endpoints not found [ 362.400012][ T8175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.666'. [ 363.374282][ T6567] usb 3-1: USB disconnect, device number 19 [ 365.729500][ T8206] random: crng reseeded on system resumption [ 368.155406][ T8211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.675'. [ 373.732910][ T8257] random: crng reseeded on system resumption [ 374.927194][ T8259] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.155638][ T8251] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 375.277141][ T8266] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 376.352493][ T5775] Bluetooth: hci1: unexpected event for opcode 0x2043 [ 378.835971][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.844118][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.071367][ T8323] binder: 8321:8323 ioctl c0306201 0 returned -14 [ 383.221218][ T8355] loop2: detected capacity change from 0 to 7 [ 383.252746][ T8355] Dev loop2: unable to read RDB block 7 [ 383.271293][ T8355] loop2: unable to read partition table [ 383.300002][ T8355] loop2: partition table beyond EOD, truncated [ 383.313113][ T8355] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 384.263477][ T8360] NILFS (loop1): device size too small [ 387.775745][ T8373] loop1: detected capacity change from 0 to 2048 [ 387.803866][ T8373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.838772][ T28] audit: type=1800 audit(8226781802.452:17): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.718" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 390.620026][ T8401] loop2: detected capacity change from 0 to 7 [ 390.659096][ T8401] Dev loop2: unable to read RDB block 7 [ 390.677173][ T8401] loop2: unable to read partition table [ 390.693040][ T8401] loop2: partition table beyond EOD, truncated [ 390.725813][ T8401] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 392.133869][ T8417] loop3: detected capacity change from 0 to 2048 [ 392.305830][ T8417] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.760727][ T28] audit: type=1800 audit(8226781807.342:18): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.729" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 393.928005][ T8439] Bluetooth: hci0: unsupported parameter 255 [ 393.939047][ T8439] Bluetooth: hci0: unsupported parameter 255 [ 396.328920][ T8473] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 398.186171][ T8501] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 399.596459][ T8525] loop2: detected capacity change from 0 to 7 [ 399.604702][ T8525] Dev loop2: unable to read RDB block 7 [ 399.610963][ T8525] loop2: unable to read partition table [ 399.616803][ T8525] loop2: partition table beyond EOD, truncated [ 399.624419][ T8525] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 399.651293][ T5141] Dev loop2: unable to read RDB block 7 [ 399.657297][ T5141] loop2: unable to read partition table [ 399.664791][ T5141] loop2: partition table beyond EOD, truncated [ 399.917025][ T8533] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 400.000727][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 402.829936][ T8566] loop2: detected capacity change from 0 to 7 [ 402.848114][ T8566] Dev loop2: unable to read RDB block 7 [ 402.854260][ T8566] loop2: unable to read partition table [ 402.860178][ T8566] loop2: partition table beyond EOD, truncated [ 402.871965][ T8566] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 402.896498][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 405.694750][ T6567] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 405.968638][ T6567] usb 1-1: config 0 has no interfaces? [ 406.017032][ T6567] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 406.091642][ T6567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.250699][ T6567] usb 1-1: config 0 descriptor?? [ 407.692496][ T5811] usb 1-1: USB disconnect, device number 5 [ 407.882814][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 411.350786][ T6567] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 411.650914][ T6567] usb 3-1: config 0 has no interfaces? [ 411.724382][ T6567] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 411.838483][ T6567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.018697][ T6567] usb 3-1: config 0 descriptor?? [ 413.435419][ T5811] usb 3-1: USB disconnect, device number 20 [ 414.150757][ T8660] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 414.305423][ T8665] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 414.312000][ T8665] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 414.326104][ T8665] vhci_hcd vhci_hcd.0: Device attached [ 415.395395][ T6630] vhci_hcd: vhci_device speed not set [ 415.542136][ T6630] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 415.551638][ T6631] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 415.622723][ T8681] fuse: Bad value for 'fd' [ 415.760507][ T6631] usb 4-1: Using ep0 maxpacket: 16 [ 415.767641][ T6631] usb 4-1: config 0 has no interfaces? [ 415.775845][ T6631] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 415.790520][ T6631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.798552][ T6631] usb 4-1: Product: syz [ 415.820517][ T6631] usb 4-1: Manufacturer: syz [ 415.825236][ T6631] usb 4-1: SerialNumber: syz [ 415.832680][ T6631] usb 4-1: config 0 descriptor?? [ 416.066406][ T6631] usb 4-1: USB disconnect, device number 7 [ 416.073667][ T8666] vhci_hcd: connection closed [ 416.076763][ T3426] vhci_hcd: stop threads [ 416.109264][ T3426] vhci_hcd: release socket [ 416.128119][ T3426] vhci_hcd: disconnect device [ 416.162312][ T6630] vhci_hcd: vhci_device speed not set [ 416.670645][ T6567] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 416.740085][ T8695] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 416.896874][ T6567] usb 1-1: config 0 has no interfaces? [ 416.911267][ T6567] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 416.920362][ T6567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.952989][ T6567] usb 1-1: config 0 descriptor?? [ 418.969278][ T6630] usb 1-1: USB disconnect, device number 6 [ 419.231881][ T8721] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 425.024866][ T8757] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 428.536009][ T8781] pim6reg: entered allmulticast mode [ 428.760612][ T8777] libceph: resolve '96.' (ret=-3): failed [ 429.003740][ T8792] binder: 8789:8792 ioctl c0306201 0 returned -14 [ 429.816135][ T8799] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 434.925389][ T6630] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 434.955389][ T8829] UBIFS error (pid: 8829): cannot open "/dev/sequencer", error -22 [ 435.883883][ T8833] pim6reg: entered allmulticast mode [ 435.960082][ T8839] Bluetooth: hci0: service_discovery: too big uuid_count value 48059 [ 436.243656][ T8851] libceph: resolve '96.' (ret=-3): failed [ 436.635997][ T8860] UBIFS error (pid: 8860): cannot open "/dev/sequencer", error -22 [ 437.120584][ T6733] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 438.103781][ T6733] usb 1-1: config 0 has no interfaces? [ 438.109412][ T6733] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 438.118753][ T6733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.131785][ T6733] usb 1-1: config 0 descriptor?? [ 438.358203][ T6630] usb 1-1: USB disconnect, device number 8 [ 438.497482][ T8892] (null): rxe_set_mtu: Set mtu to 4096 [ 438.505713][ T8892] rdma_rxe: rxe_newlink: failed to add lo [ 438.625886][ T5775] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 438.994014][ T8905] UBIFS error (pid: 8905): cannot open "/dev/sequencer", error -22 [ 440.275633][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.501159][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.430758][ T6630] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 442.519098][ T8942] UBIFS error (pid: 8942): cannot open "/dev/sequencer", error -22 [ 442.666677][ T6630] usb 4-1: config 0 has no interfaces? [ 442.690714][ T6630] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 442.699802][ T6630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.750001][ T6630] usb 4-1: config 0 descriptor?? [ 442.976756][ T6630] usb 4-1: USB disconnect, device number 8 [ 444.484821][ T8983] UBIFS error (pid: 8983): cannot open "/dev/sequencer", error -22 [ 444.853872][ T9000] 9pnet_virtio: no channels available for device syz [ 445.640059][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 445.794171][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.896'. [ 445.804082][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.896'. [ 447.000697][ T9022] UBIFS error (pid: 9022): cannot open "/dev/sequencer", error -22 [ 447.283001][ T9032] autofs4:pid:9032:autofs_fill_super: called with bogus options [ 447.734776][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.908'. [ 447.745890][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.908'. [ 450.510948][ T9055] pim6reg: entered allmulticast mode [ 450.533178][ T9055] pim6reg: left allmulticast mode [ 451.187130][ T9072] UBIFS error (pid: 9072): cannot open "/dev/sequencer", error -22 [ 451.652845][ T9077] fuse: Bad value for 'fd' [ 454.630569][ T6567] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 454.732411][ T9127] UBIFS error (pid: 9127): cannot open "/dev/sequencer", error -22 [ 455.870586][ T6567] usb 1-1: Using ep0 maxpacket: 16 [ 457.208025][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 457.217652][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 457.226929][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 457.236083][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 457.246529][ T9149] 9pnet_virtio: no channels available for device syz [ 457.314363][ T6567] usb 1-1: unable to get BOS descriptor or descriptor too short [ 457.343714][ T6567] usb 1-1: no configurations [ 457.356218][ T6567] usb 1-1: can't read configurations, error -22 [ 458.677667][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 458.688497][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 458.698506][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 458.708314][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 458.717575][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 458.731929][ T9174] 9pnet_virtio: no channels available for device syz [ 461.175994][ T6567] IPVS: starting estimator thread 0... [ 461.290740][ T9196] IPVS: using max 22 ests per chain, 52800 per kthread [ 461.386297][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 461.404770][ T9206] 9pnet_virtio: no channels available for device syz [ 462.217224][ T9208] fuse: Bad value for 'fd' [ 464.170536][ T6630] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 465.100559][ T6630] usb 1-1: Using ep0 maxpacket: 32 [ 465.112780][ T6630] usb 1-1: unable to get BOS descriptor or descriptor too short [ 465.126339][ T6630] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 465.140616][ T6630] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 465.157171][ T6630] usb 1-1: config 14 has no interface number 0 [ 465.173525][ T6630] usb 1-1: config 14 has no interface number 1 [ 465.190127][ T6630] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 465.220270][ T6630] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 465.240569][ T6630] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 465.270743][ T6630] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.294365][ T6630] usb 1-1: config 14 interface 57 has no altsetting 0 [ 465.310542][ T6630] usb 1-1: config 14 interface 228 has no altsetting 0 [ 465.343189][ T6630] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 465.372919][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.400634][ T6630] usb 1-1: Product: syz [ 465.414580][ T6630] usb 1-1: Manufacturer: syz [ 465.424236][ T6630] usb 1-1: SerialNumber: syz [ 465.868135][ T6630] legousbtower 1-1:14.57: interrupt endpoints not found [ 466.068991][ T6630] legousbtower 1-1:14.228: interrupt endpoints not found [ 466.182866][ T9309] fuse: Bad value for 'fd' [ 467.996825][ T6630] usb 1-1: USB disconnect, device number 11 [ 468.890720][ T9289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.228032][ T9334] fuse: Bad value for 'fd' [ 469.296866][ T9337] __nla_validate_parse: 4 callbacks suppressed [ 469.296905][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 469.314968][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 469.325740][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 469.335768][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 469.345171][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 469.361224][ T9337] 9pnet_virtio: no channels available for device syz [ 469.865779][ T9339] loop2: detected capacity change from 0 to 7 [ 469.966342][ T9339] Dev loop2: unable to read RDB block 7 [ 470.015900][ T9339] loop2: AHDI p1 p2 p3 [ 470.060884][ T9339] loop2: partition table partially beyond EOD, truncated [ 470.131299][ T9339] loop2: p1 start 1601398130 is beyond EOD, truncated [ 470.147207][ T9339] loop2: p2 start 1702059890 is beyond EOD, truncated [ 470.279878][ T9349] Bluetooth: hci0: service_discovery: too big uuid_count value 48059 [ 470.288825][ T9346] (null): rxe_set_mtu: Set mtu to 4096 [ 470.333866][ T9346] rdma_rxe: rxe_newlink: failed to add lo [ 470.405164][ T6733] IPVS: starting estimator thread 0... [ 470.511012][ T9352] IPVS: using max 18 ests per chain, 43200 per kthread [ 472.409997][ T9380] Bluetooth: hci0: service_discovery: too big uuid_count value 48059 [ 472.526250][ T9392] (null): rxe_set_mtu: Set mtu to 4096 [ 472.534686][ T9392] rdma_rxe: rxe_newlink: failed to add lo [ 472.682451][ T9400] overlayfs: failed to clone upperpath [ 472.932003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 473.256127][ T9411] Bluetooth: hci0: service_discovery: too big uuid_count value 48059 [ 473.375663][ T9417] libceph: resolve '96.' (ret=-3): failed [ 473.632944][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 473.641946][ T9425] bridge_slave_1: left allmulticast mode [ 473.647595][ T9425] bridge_slave_1: left promiscuous mode [ 473.653398][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.672044][ T9425] bridge_slave_0: left allmulticast mode [ 473.677715][ T9425] bridge_slave_0: left promiscuous mode [ 473.683783][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.747885][ T9427] binder: 9426:9427 ioctl c0306201 0 returned -14 [ 475.693635][ T9452] libceph: resolve '96.' (ret=-3): failed [ 475.800095][ T9460] loop2: detected capacity change from 0 to 7 [ 475.820876][ T9460] Dev loop2: unable to read RDB block 7 [ 475.852749][ T9460] loop2: unable to read partition table [ 475.858670][ T9460] loop2: partition table beyond EOD, truncated [ 475.914403][ T9460] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 476.116777][ T9470] fuse: Bad value for 'fd' [ 476.125857][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 477.198394][ T9493] libceph: resolve '96.' (ret=-3): failed [ 477.523880][ T9499] loop2: detected capacity change from 0 to 7 [ 477.535782][ T9499] Dev loop2: unable to read RDB block 7 [ 477.560555][ T9499] loop2: unable to read partition table [ 477.580826][ T9499] loop2: partition table beyond EOD, truncated [ 477.633774][ T9499] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 478.830132][ T9516] fuse: Bad value for 'fd' [ 479.566238][ T9521] Bluetooth: hci0: service_discovery: too big uuid_count value 48059 [ 480.670569][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 480.833562][ T9537] binder: 9522:9537 ioctl c0306201 0 returned -14 [ 480.955732][ T9539] random: crng reseeded on system resumption [ 481.305685][ T9548] fuse: Bad value for 'fd' [ 482.416281][ T9558] Bluetooth: hci0: service_discovery: too big uuid_count value 48059 [ 482.767252][ T9568] libceph: resolve '96.' (ret=-3): failed [ 483.864977][ T9579] overlayfs: failed to clone lowerpath [ 483.928497][ T9581] overlayfs: failed to clone lowerpath [ 484.081322][ T9583] fuse: Bad value for 'fd' [ 484.231462][ T9588] Bluetooth: hci0: service_discovery: too big uuid_count value 48059 [ 484.673906][ T9600] UBIFS error (pid: 9600): cannot open "/dev/sequencer", error -22 [ 484.752906][ T9599] libceph: resolve '96.' (ret=-3): failed [ 486.186633][ T5780] Bluetooth: hci2: unexpected event for opcode 0x202f [ 486.283655][ T9617] overlayfs: failed to clone lowerpath [ 486.341733][ T9612] overlayfs: failed to clone lowerpath [ 488.825266][ T9647] random: crng reseeded on system resumption [ 490.969969][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 491.511748][ T9690] random: crng reseeded on system resumption [ 491.555185][ T6631] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 491.967597][ T6631] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 491.987828][ T6631] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 492.019736][ T6631] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 492.036739][ T9704] overlayfs: failed to clone upperpath [ 492.055133][ T6631] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 492.128959][ T6631] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 492.212730][ T6631] usb 4-1: config 168 interface 0 has no altsetting 0 [ 492.224246][ T6631] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 492.233046][ T6631] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 492.302194][ T6631] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 492.326765][ T6631] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 492.354270][ T6631] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 492.390945][ T6631] usb 4-1: config 168 interface 0 has no altsetting 0 [ 492.401610][ T6631] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 492.410538][ T6631] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 492.450609][ T6631] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 492.471927][ T6631] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 492.516821][ T6631] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 492.564870][ T6631] usb 4-1: config 168 interface 0 has no altsetting 0 [ 492.620668][ T5811] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 492.636371][ T6631] usb 4-1: string descriptor 0 read error: -22 [ 492.643093][ T6631] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 492.663911][ T6631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.380744][ T6631] adutux 4-1:168.0: interrupt endpoints not found [ 493.392509][ T6631] usb 4-1: USB disconnect, device number 9 [ 493.402497][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.417444][ T5811] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 493.427710][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.438868][ T5811] usb 3-1: config 0 descriptor?? [ 493.482265][ T9718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1138'. [ 493.492349][ T9718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1138'. [ 493.659727][ T5811] usbhid 3-1:0.0: can't add hid device: -71 [ 493.669285][ T5811] usbhid: probe of 3-1:0.0 failed with error -71 [ 493.685899][ T5811] usb 3-1: USB disconnect, device number 21 [ 494.113539][ T9738] overlayfs: failed to clone lowerpath [ 494.141559][ T9738] overlayfs: failed to clone lowerpath [ 494.251639][ T5811] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 494.263792][ T6631] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 494.453612][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.470207][ T6631] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 494.495052][ T5811] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 494.504462][ T6631] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD4, skipping [ 494.541196][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.549599][ T6631] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.565545][ T5811] usb 3-1: config 0 descriptor?? [ 494.583838][ T6631] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 494.595601][ T6631] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 494.604091][ T6631] usb 4-1: Manufacturer: syz [ 494.609015][ T6631] usb 4-1: SerialNumber: syz [ 495.315913][ T6631] usb 4-1: config 0 descriptor?? [ 495.328810][ T9734] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 495.392148][ T9749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1147'. [ 495.404801][ T9749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1147'. [ 495.579580][ T6567] usb 4-1: USB disconnect, device number 10 [ 495.650576][ T5811] usbhid 3-1:0.0: can't add hid device: -71 [ 495.658328][ T5811] usbhid: probe of 3-1:0.0 failed with error -71 [ 495.696534][ T5811] usb 3-1: USB disconnect, device number 22 [ 496.270077][ T9776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1157'. [ 496.281441][ T9776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1157'. [ 497.655799][ T9806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1167'. [ 497.688570][ T9806] netlink: 'syz.3.1167': attribute type 7 has an invalid length. [ 497.771916][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 497.890493][ T9806] erspan0: entered promiscuous mode [ 498.827850][ T9806] gretap0: entered promiscuous mode [ 498.840563][ T9806] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 498.857719][ T9806] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 498.939749][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1169'. [ 498.963743][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1169'. [ 499.003824][ T9811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1167'. [ 499.031095][ T9811] netlink: 'syz.3.1167': attribute type 7 has an invalid length. [ 499.071479][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 499.432096][ T9838] loop2: detected capacity change from 0 to 7 [ 499.478202][ T9838] Dev loop2: unable to read RDB block 7 [ 499.490971][ T9838] loop2: unable to read partition table [ 499.496936][ T9838] loop2: partition table beyond EOD, truncated [ 499.510801][ T9838] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 499.531541][ T5141] Dev loop2: unable to read RDB block 7 [ 499.537197][ T5141] loop2: unable to read partition table [ 499.548375][ T5141] loop2: partition table beyond EOD, truncated [ 500.860840][ T9856] (null): rxe_set_mtu: Set mtu to 4096 [ 500.866838][ T9856] rdma_rxe: rxe_newlink: failed to add lo [ 501.296760][ T9881] loop2: detected capacity change from 0 to 7 [ 501.328125][ T9881] Dev loop2: unable to read RDB block 7 [ 501.334783][ T9881] loop2: unable to read partition table [ 501.353046][ T9881] loop2: partition table beyond EOD, truncated [ 501.369615][ T9881] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 501.715689][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.722141][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.738850][ T5780] Bluetooth: hci1: unexpected event for opcode 0x202f [ 502.935931][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 502.945626][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 502.954775][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 502.963839][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 502.972782][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 503.011030][ T9910] 9pnet_virtio: no channels available for device syz [ 503.102831][ T9914] loop2: detected capacity change from 0 to 7 [ 503.128439][ T9914] Dev loop2: unable to read RDB block 7 [ 503.134350][ T9914] loop2: unable to read partition table [ 503.142775][ T9914] loop2: partition table beyond EOD, truncated [ 503.152288][ T9914] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 503.196263][ T5141] Dev loop2: unable to read RDB block 7 [ 503.212048][ T5141] loop2: unable to read partition table [ 503.220834][ T5141] loop2: partition table beyond EOD, truncated [ 504.488300][ T9929] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 504.723072][ T9936] random: crng reseeded on system resumption [ 507.160646][ T12] wlan0: Trigger new scan to find an IBSS to join [ 508.743640][ T9968] overlayfs: failed to clone lowerpath [ 508.775078][ T9968] overlayfs: failed to clone lowerpath [ 510.494875][T10006] random: crng reseeded on system resumption [ 511.152896][ T11] wlan0: Trigger new scan to find an IBSS to join [ 512.173210][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'. [ 512.184981][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'. [ 512.195251][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'. [ 512.205005][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'. [ 512.214456][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'. [ 512.230249][T10014] 9pnet_virtio: no channels available for device syz [ 512.439574][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.057992][T10028] UBIFS error (pid: 10028): cannot open "/dev/sequencer", error -22 [ 514.302613][T10043] fuse: Bad value for 'fd' [ 515.181250][ T5811] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 515.368560][ T5811] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 515.368644][ T5811] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 515.368776][ T5811] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 515.368818][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.436992][T10066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 515.481935][ T5811] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 515.778573][ T5811] usb 3-1: USB disconnect, device number 23 [ 515.778756][T10073] fuse: Bad value for 'fd' [ 516.480589][ T6733] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 516.675203][ T6733] usb 1-1: not running at top speed; connect to a high speed hub [ 516.689592][ T6733] usb 1-1: config 3 has an invalid interface number: 161 but max is 0 [ 516.699975][ T6733] usb 1-1: config 3 has no interface number 0 [ 516.707478][ T6567] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 516.717002][ T6733] usb 1-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 516.731900][ T6733] usb 1-1: config 3 interface 161 has no altsetting 0 [ 516.744566][ T6733] usb 1-1: language id specifier not provided by device, defaulting to English [ 516.786584][ T6733] usb 1-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 516.795882][ T6733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.942620][ T6567] usb 4-1: Using ep0 maxpacket: 16 [ 517.013268][ T6567] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 517.116115][T10097] fuse: Bad value for 'fd' [ 517.159820][ T6567] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.342024][ T6567] usb 4-1: config 0 has no interfaces? [ 517.374846][ T6567] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 517.403330][ T6567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.443375][ T6567] usb 4-1: config 0 descriptor?? [ 517.520563][T10102] Bluetooth: MGMT ver 1.22 [ 517.651705][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 517.652159][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 517.652346][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 517.653419][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 517.718136][T10101] 9pnet_virtio: no channels available for device syz [ 517.761611][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1258'. [ 517.812175][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1258'. [ 517.812369][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1258'. [ 517.812652][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1258'. [ 517.812777][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1258'. [ 517.812983][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1258'. [ 517.860688][ T5811] usb 4-1: USB disconnect, device number 11 [ 518.239096][ T6733] option 1-1:3.161: GSM modem (1-port) converter detected [ 518.283022][ T6733] usb 1-1: USB disconnect, device number 12 [ 518.311014][ T6733] option 1-1:3.161: device disconnected [ 518.480123][T10121] (null): rxe_set_mtu: Set mtu to 4096 [ 518.488312][T10121] rdma_rxe: rxe_newlink: failed to add lo [ 518.566811][T10124] fuse: Bad value for 'fd' [ 519.426730][T10144] (null): rxe_set_mtu: Set mtu to 4096 [ 519.440076][T10144] rdma_rxe: rxe_newlink: failed to add lo [ 520.768098][T10180] (null): rxe_set_mtu: Set mtu to 4096 [ 520.806487][T10180] rdma_rxe: rxe_newlink: failed to add lo [ 521.118699][T10192] binder: 10185:10192 ioctl c0306201 0 returned -14 [ 522.565691][T10219] (null): rxe_set_mtu: Set mtu to 4096 [ 522.574648][T10218] fuse: Bad value for 'fd' [ 522.575039][T10219] rdma_rxe: rxe_newlink: failed to add lo [ 523.493546][T10233] binder: 10232:10233 ioctl c0306201 0 returned -14 [ 523.561744][T10236] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 523.570919][ T28] audit: type=1800 audit(8226781938.172:19): pid=10235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1309" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 524.817324][T10255] (null): rxe_set_mtu: Set mtu to 4096 [ 524.827837][T10255] rdma_rxe: rxe_newlink: failed to add lo [ 524.855080][ T6733] IPVS: starting estimator thread 0... [ 524.960617][T10257] IPVS: using max 36 ests per chain, 86400 per kthread [ 526.131154][ T11] wlan0: Trigger new scan to find an IBSS to join [ 526.285284][ T6733] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 526.702144][T10276] UBIFS error (pid: 10276): cannot open "/dev/sequencer", error -22 [ 526.733276][ T6733] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 526.842259][ T6733] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 526.946103][ T6733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.110270][ T6733] usb 4-1: config 0 descriptor?? [ 527.528598][T10274] ubi0: attaching mtd0 [ 527.668864][T10274] ubi0: scanning is finished [ 527.711385][T10274] ubi0: empty MTD device detected [ 527.733332][T10289] (null): rxe_set_mtu: Set mtu to 4096 [ 527.787701][T10289] rdma_rxe: rxe_newlink: failed to add lo [ 528.197430][T10274] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 528.240749][T10274] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 528.248112][T10274] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 528.284515][T10274] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 528.292866][T10274] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 528.299849][T10274] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 528.312604][T10274] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 441261224 [ 528.330974][T10274] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 528.352287][T10292] ubi0: background thread "ubi_bgt0d" started, PID 10292 [ 528.391818][ T6631] usb 4-1: USB disconnect, device number 12 [ 528.725472][T10304] binder: 10303:10304 ioctl c0306201 0 returned -14 [ 530.367392][T10321] (null): rxe_set_mtu: Set mtu to 4096 [ 530.569811][T10329] UBIFS error (pid: 10329): cannot open "/dev/sequencer", error -22 [ 531.022771][T10321] rdma_rxe: rxe_newlink: failed to add lo [ 531.070596][ T11] wlan0: Trigger new scan to find an IBSS to join [ 531.078948][T10330] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 531.594807][T10341] binder: 10339:10341 ioctl c0306201 0 returned -14 [ 532.310962][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.340564][ T5811] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 532.540677][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 532.568044][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.597677][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.627224][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 532.641012][ T5811] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 532.650149][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.668072][ T5811] usb 1-1: config 0 descriptor?? [ 533.571229][ T5811] usbhid 1-1:0.0: can't add hid device: -71 [ 533.577288][ T5811] usbhid: probe of 1-1:0.0 failed with error -71 [ 533.637508][ T5811] usb 1-1: USB disconnect, device number 13 [ 535.195417][T10371] (null): rxe_set_mtu: Set mtu to 4096 [ 535.217396][T10371] rdma_rxe: rxe_newlink: failed to add lo [ 535.387624][T10377] binder: 10374:10377 ioctl c0306201 0 returned -14 [ 535.470978][T10380] UBIFS error (pid: 10380): cannot open "/dev/sequencer", error -22 [ 537.220539][T10404] binfmt_misc: register: failed to install interpreter file ./file0 [ 537.897766][T10401] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 537.987443][T10407] (null): rxe_set_mtu: Set mtu to 4096 [ 537.993430][T10407] rdma_rxe: rxe_newlink: failed to add lo [ 538.056411][T10409] binder: 10408:10409 ioctl c0306201 0 returned -14 [ 539.204695][T10431] UBIFS error (pid: 10431): cannot open "", error -22 [ 539.281044][T10434] qrtr: Invalid version 0 [ 539.318867][T10435] __nla_validate_parse: 14 callbacks suppressed [ 539.318879][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 539.334883][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 539.344464][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 539.353558][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 539.362558][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 539.376138][T10435] 9pnet_virtio: no channels available for device syz [ 539.463476][T10434] syzkaller1: entered promiscuous mode [ 539.475838][T10434] syzkaller1: entered allmulticast mode [ 539.484827][T10440] (null): rxe_set_mtu: Set mtu to 4096 [ 539.496731][T10440] rdma_rxe: rxe_newlink: failed to add lo [ 539.618296][T10444] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 539.970873][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 539.980368][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 539.989691][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 539.998773][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 540.009145][T10458] 9pnet_virtio: no channels available for device syz [ 540.188459][T10472] UBIFS error (pid: 10472): cannot open "", error -22 [ 540.724817][T10480] 9pnet_virtio: no channels available for device syz [ 540.865581][T10482] (null): rxe_set_mtu: Set mtu to 4096 [ 540.889106][T10482] rdma_rxe: rxe_newlink: failed to add lo [ 557.650671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 560.210729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 562.770665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 563.155816][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.162247][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.330670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 570.450732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 716.760471][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 175s! [ 716.770043][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 175s! [ 716.778968][ C0] Showing busy workqueues and worker pools: [ 716.784884][ C0] workqueue events: flags=0x0 [ 716.789659][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=12/256 refcnt=13 [ 716.789701][ C0] pending: nsim_dev_hwstats_traffic_work, vidtv_mux_tick, psi_avgs_work, ipvlan_process_multicast, psi_avgs_work, kfree_rcu_monitor, psi_avgs_work, ipvlan_process_multicast, 4*ovs_dp_masks_rebalance [ 716.817647][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=10/256 refcnt=11 [ 716.817692][ C0] pending: 3*nsim_dev_hwstats_traffic_work, vmstat_shepherd, ovs_dp_masks_rebalance, 2*psi_avgs_work, kfree_rcu_monitor, 2*ipvlan_process_multicast [ 716.840919][ C0] workqueue events_long: flags=0x0 [ 716.846050][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.846097][ C0] pending: defense_work_handler [ 716.859078][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 716.859118][ C0] pending: 4*defense_work_handler [ 716.872170][ C0] workqueue events_unbound: flags=0x2 [ 716.877588][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/512 refcnt=5 [ 716.877626][ C0] pending: nsim_dev_trap_report_work, idle_cull_fn, crng_reseed, idle_cull_fn [ 716.894145][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=9/512 refcnt=10 [ 716.894183][ C0] pending: 3*nsim_dev_trap_report_work, toggle_allocation_gate, flush_memcg_stats_dwork, 2*cfg80211_wiphy_work, 2*idle_cull_fn [ 716.915152][ C0] workqueue events_freezable: flags=0x4 [ 716.920711][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.920753][ C0] pending: update_balloon_stats_func [ 716.934088][ C0] workqueue events_power_efficient: flags=0x80 [ 716.940256][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 716.940296][ C0] pending: neigh_managed_work, neigh_periodic_work, do_cache_clean [ 716.956403][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 716.956444][ C0] pending: fb_flashcursor, wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, check_lifetime, gc_worker, reg_check_chans_work [ 716.979149][ C0] workqueue mm_percpu_wq: flags=0x8 [ 716.984360][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.984401][ C0] pending: vmstat_update [ 716.996669][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.996709][ C0] pending: vmstat_update [ 717.008987][ C0] workqueue writeback: flags=0x4a [ 717.014029][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 717.014075][ C0] pending: wb_workfn [ 717.025609][ C0] workqueue dm_bufio_cache: flags=0x8 [ 717.030992][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 717.031035][ C0] pending: work_fn [ 717.042861][ C0] workqueue ipv6_addrconf: flags=0xe000a [ 717.048503][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=8 [ 717.048537][ C0] pending: addrconf_verify_work [ 717.048649][ C0] inactive: 4*addrconf_verify_work [ 717.066353][ C0] workqueue bat_events: flags=0xe000a [ 717.071737][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=39 [ 717.071774][ C0] pending: batadv_nc_worker [ 717.071884][ C0] inactive: 3*batadv_nc_worker, 4*batadv_mcast_mla_update, 2*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_purge_orig, 8*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, 3*batadv_tt_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge [ 717.123382][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: