last executing test programs: 3m36.862881724s ago: executing program 32 (id=108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) close(0x4) 3m34.267124631s ago: executing program 33 (id=120): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r4}], 0x54, 0x0, &(0x7f0000000280)="37b82b8f41afa37c5297fe5b692d3cedbd057d6f37743560799bbf4ddd06bc810453adcec0c458de737aeadf5afcd6641ea3434a1a0bfd0debe7506939a82090490c46a6010019e855badfb0bee8561d5ee15bac"}) 3m32.351342989s ago: executing program 34 (id=128): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="28033e000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 3m30.271037059s ago: executing program 35 (id=139): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[], 0x27) 3m28.23892898s ago: executing program 36 (id=146): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)='4', 0x1}], 0x1) 3m16.506249465s ago: executing program 37 (id=155): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2108c0, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m15.074044884s ago: executing program 38 (id=167): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r1, &(0x7f0000001a80)=""/4043, 0xffffffffffffff9b, 0x12, 0x0, 0x0) 3m7.027614361s ago: executing program 9 (id=221): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x6342, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) close(0x3) 3m6.451376847s ago: executing program 39 (id=221): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x6342, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) close(0x3) 2m40.504875752s ago: executing program 40 (id=332): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffe7d, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x7, 0xfff2}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 2m38.358694544s ago: executing program 8 (id=345): futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 2m37.73144129s ago: executing program 8 (id=346): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/141, 0x8d) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 2m37.030994907s ago: executing program 41 (id=346): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/141, 0x8d) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 2m29.90281693s ago: executing program 42 (id=368): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m26.311694268s ago: executing program 43 (id=376): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x6}, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x9, 0x9, 0x3, 0x8000000fffffffc, 0x20002}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 2m22.135797973s ago: executing program 44 (id=384): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40025b0c, 0x0) 2m15.522381856s ago: executing program 4 (id=400): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r4, r3, 0x9, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x805, 0x32c}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0xd, 0x0, 0x0, "5deb13561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfc}) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m14.843493104s ago: executing program 45 (id=401): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f", 0x62}, {0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m13.437139289s ago: executing program 4 (id=405): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xfff, 0xa925, 0x9, 0x8007, 0x8, "7a3800e5ffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xff) 2m13.078511946s ago: executing program 4 (id=406): r0 = socket(0x29, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000007c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r1, r2) 2m12.769041595s ago: executing program 4 (id=407): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m11.825768098s ago: executing program 4 (id=410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m11.354740344s ago: executing program 7 (id=412): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) 2m11.09931468s ago: executing program 7 (id=413): r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) 2m10.841876591s ago: executing program 7 (id=414): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fstat(r0, &(0x7f0000000140)) 2m10.486363864s ago: executing program 4 (id=415): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x1100, 0xffeffffffffffffd}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) preadv(r6, &(0x7f0000000840)=[{&(0x7f0000000280)=""/29, 0x1d}], 0x1, 0x0, 0x5) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, 0x0) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m10.010335026s ago: executing program 46 (id=415): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x1100, 0xffeffffffffffffd}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) preadv(r6, &(0x7f0000000840)=[{&(0x7f0000000280)=""/29, 0x1d}], 0x1, 0x0, 0x5) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, 0x0) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m9.938445077s ago: executing program 7 (id=418): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m8.923852889s ago: executing program 7 (id=420): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB='\b'], 0x2a) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0xc4, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6e}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x9, 0x7, 0x1e0, 0xed00, 0xc, 0x417]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xda}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 2m8.412269144s ago: executing program 7 (id=421): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) 2m8.133439316s ago: executing program 47 (id=421): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048054}, 0x0) 2m5.879524892s ago: executing program 9 (id=385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) unshare(0x26020480) socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x80047456, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) 2m3.88963874s ago: executing program 9 (id=425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd28, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e0, 0xca0b, 0x8, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2m0.163318296s ago: executing program 9 (id=427): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m59.188970643s ago: executing program 9 (id=430): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000003680)=[{&(0x7f0000000340)="cf779dbd", 0x4}], 0x1, 0xfffffc01, 0x93c, 0x2) 1m58.884309597s ago: executing program 9 (id=431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x4800) 1m58.591084613s ago: executing program 48 (id=431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x4800) 1m57.74222992s ago: executing program 5 (id=434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd28, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e0, 0xca0b, 0x8, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 1m55.591966139s ago: executing program 5 (id=435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000406010200000000000000000a000005050001"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) 1m55.456140635s ago: executing program 5 (id=436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x7}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd79, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) 1m55.258347854s ago: executing program 5 (id=437): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m54.304907048s ago: executing program 5 (id=438): signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) memfd_create(&(0x7f0000000180)='\x8a\'\x0e\xda4N\x0e\xea\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5%\xdd\x19\x03K\x98\xf5`\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z\xc4]V\xfa\xdc\x1f\xf9\x15\n8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9', 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) close_range(r1, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x5dfbd751, 0x401) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, 0x0, 0x0, 0x3}, 0x94) 1m54.048919914s ago: executing program 5 (id=439): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r4, 0x8947, &(0x7f0000000400)={'bond0\x00', @ifru_addrs=@llc={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @broadcast}}) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/203, 0xcb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') 1m53.851641879s ago: executing program 49 (id=439): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r4, 0x8947, &(0x7f0000000400)={'bond0\x00', @ifru_addrs=@llc={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @broadcast}}) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/203, 0xcb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') 1m47.421227491s ago: executing program 8 (id=417): r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x2, 'virt_wifi0\x00', {0x9}, 0x4}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) 1m47.19266614s ago: executing program 8 (id=444): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m46.084229055s ago: executing program 8 (id=447): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m45.753952096s ago: executing program 8 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24040083}, 0x800) 1m44.917988032s ago: executing program 50 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24040083}, 0x800) 5.649368765s ago: executing program 3 (id=921): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, 0x0, 0x0) r2 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) 5.388865439s ago: executing program 3 (id=923): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="400c0e"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f00000018c0)=[{0x1, 0x1000, 0x0, 0x0}], 0x1}) 4.709255505s ago: executing program 2 (id=928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 4.488863317s ago: executing program 1 (id=930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0xa2, 0x1, 0x0, 0x4, 0xffff, 0xffff, 0x7f]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x20009040) 4.481123467s ago: executing program 2 (id=931): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) 4.253421521s ago: executing program 1 (id=932): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f0"], 0xf0}, 0x1, 0x0, 0x0, 0xc075}, 0x4800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x40000002}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 3.93756268s ago: executing program 0 (id=934): r0 = syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_control_io$uac1(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0003"]}, 0x0) 3.229390327s ago: executing program 1 (id=935): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ecb403236035", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x8}, "ffb00afe4e70"}}}}}}}, 0x0) 3.120762031s ago: executing program 1 (id=936): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0) 2.97266431s ago: executing program 1 (id=937): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.891650014s ago: executing program 0 (id=938): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a", 0x7b}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29", 0x92}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce800", 0x2a}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.697251786s ago: executing program 0 (id=939): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e000000105000300000000002400010000000000000000000000000000000000000000000000000000000000000000008001"], 0x21c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x2}, 0x94) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="1ece", 0x2}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.57441641s ago: executing program 6 (id=940): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 2.550058681s ago: executing program 0 (id=941): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 2.418440189s ago: executing program 6 (id=942): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x52, 0x20020084, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) write(r0, &(0x7f0000000500)='G', 0x1) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f0000000880)="91d0", 0x2, 0x40, 0x0, 0x0) 2.29030097s ago: executing program 0 (id=943): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 2.169913646s ago: executing program 6 (id=944): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) r2 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) 2.16972068s ago: executing program 3 (id=945): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48}) 1.88657139s ago: executing program 3 (id=946): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ecb403236035", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x8}, "ffb00afe4e70"}}}}}}}, 0x0) 1.87217842s ago: executing program 6 (id=947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 1.592246372s ago: executing program 6 (id=948): arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x20) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r8, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r9, 0x0, r8}) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000540)={0x8, 0x10, 0x8, 0x0, 0x0, [{{}, 0x3}, {{r2}, 0x81}, {{r2}, 0x7}, {{r0}, 0x5}, {{r6}, 0x40}, {{r0}, 0x8}, {{r7}, 0xf9e0b4be0000000}, {{r0}, 0x10}]}) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000"], 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x72, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x0, 0x90, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x81, 0x8, 0xf5}, {0x6, 0x24, 0x1a, 0x800, 0x18}, [@acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xe, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x61, 0x7, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xdd, 0x7, 0x9}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0xf5, 0xe, 0xe, 0x10, 0x7f}, 0x40, &(0x7f0000000340)={0x5, 0xf, 0x40, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x1, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x0, 0x8001}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x7d, 0x2, 0x6, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x80, 0x1e00, 0xe, [0x3f00, 0xf, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x2}]}, 0x1, [{0x97, &(0x7f0000000400)=@string={0x97, 0x3, "b50b4c0433dc77f4703922aeab96edb20b10af220d54ba71a850135b89a2295b991dd8abc805ff126cf245f2155a6fbcc5d976dfa5f218b9422be80060189cfb1162a44bc492c279dd761955103c217b7ec12f2955200c9658578ec39a89d47ba0d2aa4ffedadf59207e10c0082a83ae58bf0f4958c58e2d12f12f463318ea69d17c1f46404330b9b84c4380e7d2752acec5bf4f1b"}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000240800014000000011080003400000005708000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x4) 1.591337677s ago: executing program 3 (id=949): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffbffffffe, 0x2) socket(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.449273077s ago: executing program 0 (id=950): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197ea9647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f00000000c0)={0x1, 0x100, 0x9, 0x9, 0xb65, 0x1, 0x8, 0x81, 0x8, 0x1, 0xfffffffa, 0x5, 0x8000, 0x7}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x100000, 0x400000, 0x0, 0x3}) 1.302470989s ago: executing program 2 (id=951): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e000000105000300000000002400010000000000000000000000000000000000000000000000000000000000000000008001"], 0x21c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x2}, 0x94) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="1ece", 0x2}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.185190063s ago: executing program 3 (id=952): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1.083883704s ago: executing program 2 (id=953): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 783.910242ms ago: executing program 2 (id=954): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000140)={0x7, 'vlan1\x00', {0xa}, 0x2}) 501.291679ms ago: executing program 2 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x3ffffffffffffcd0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000500)={0x0, 0xfffffffffffffda6, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c64d2, &(0x7f0000000180)={r6, 0x80000}) 32.221286ms ago: executing program 1 (id=956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r0, 0x66a8, 0x4000, 0xf, 0x0, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=957): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) r2 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) kernel console output (not intermixed with test programs): entered promiscuous mode [ 198.659493][ T5626] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input6 [ 198.694450][ T8005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.711982][ T8005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.774986][ T8005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.850804][ T8005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.877959][ T8005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.926770][ T8005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.930381][ T7817] veth1_vlan: entered promiscuous mode [ 198.933060][ T7797] veth1_vlan: entered promiscuous mode [ 199.062168][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.063199][ T5697] usb 3-1: USB disconnect, device number 3 [ 199.069214][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 199.151280][ T5697] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 199.202126][ T7817] veth0_macvtap: entered promiscuous mode [ 199.236465][ T8005] hsr_slave_0: entered promiscuous mode [ 199.243347][ T8005] hsr_slave_1: entered promiscuous mode [ 199.251840][ T8005] debugfs: 'hsr0' already exists in 'hsr' [ 199.260368][ T8005] Cannot create hsr debugfs directory [ 199.302002][ T7817] veth1_macvtap: entered promiscuous mode [ 199.433528][ T7968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.448473][ T7797] veth0_macvtap: entered promiscuous mode [ 199.460973][ T3302] bridge_slave_1: left allmulticast mode [ 199.470867][ T3302] bridge_slave_1: left promiscuous mode [ 199.476745][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.489563][ T3302] bridge_slave_0: left allmulticast mode [ 199.496180][ T3302] bridge_slave_0: left promiscuous mode [ 199.501997][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.909842][ T3302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.940468][ T3302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.953174][ T3302] bond0 (unregistering): Released all slaves [ 200.052037][ T7797] veth1_macvtap: entered promiscuous mode [ 200.081655][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.108024][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.115790][ T5640] Bluetooth: hci2: command tx timeout [ 200.347749][ T7968] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.392754][ T1162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.421025][ T1162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.526748][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.536258][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.591165][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.598457][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.651965][ T7797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.664248][ T5633] Bluetooth: hci4: command tx timeout [ 200.684103][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.691337][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.817937][ T3302] hsr_slave_0: left promiscuous mode [ 200.823991][ T3302] hsr_slave_1: left promiscuous mode [ 200.835351][ T3302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.842785][ T3302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.852472][ T3302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.863158][ T3302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.879948][ T3302] veth1_macvtap: left promiscuous mode [ 200.885667][ T3302] veth0_macvtap: left promiscuous mode [ 200.891256][ T3302] veth1_vlan: left promiscuous mode [ 200.897137][ T3302] veth0_vlan: left promiscuous mode [ 201.324286][ T3302] team0 (unregistering): Port device team_slave_1 removed [ 201.353653][ T3302] team0 (unregistering): Port device team_slave_0 removed [ 201.569035][ T7797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.671421][ T112] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.720062][ T112] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.741665][ T112] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.787567][ T112] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.883557][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.908344][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.083569][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.105352][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.119377][ T5290] 8021q: adding VLAN 0 to HW filter on device eth10 [ 202.263832][ T7968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.291695][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.310056][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.534474][ T3302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.547044][ T3302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.588029][ T8005] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.600459][ T8005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.615805][ T8005] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.631884][ T8005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.715268][ T5633] Bluetooth: hci4: command tx timeout [ 202.722046][ T8005] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.750083][ T8005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.775920][ T8005] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.831444][ T8005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.964477][ T7968] veth0_vlan: entered promiscuous mode [ 203.016975][ T7968] veth1_vlan: entered promiscuous mode [ 203.189355][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.445'. [ 203.338332][ T7968] veth0_macvtap: entered promiscuous mode [ 203.415606][ T7968] veth1_macvtap: entered promiscuous mode [ 203.576744][ T7968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.606075][ T46] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 203.629806][ T7968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.674486][ T3302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.694571][ T3302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.717589][ T8005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.730907][ T3302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.758618][ T3302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.784456][ T46] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 203.812936][ T46] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 203.838771][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.864840][ T46] usb 1-1: Product: syz [ 203.894127][ T46] usb 1-1: Manufacturer: syz [ 203.899115][ T46] usb 1-1: SerialNumber: syz [ 203.902784][ T8005] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.981529][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.988750][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.061755][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.068991][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.147933][ T46] usb 1-1: selecting invalid altsetting 1 [ 204.254177][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.284197][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.379424][ T46] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 204.379554][ T46] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 204.484076][ T46] usb 1-1: USB disconnect, device number 4 [ 204.484534][ T8061] Set syz1 is full, maxelem 65536 reached [ 204.702650][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.795373][ T5633] Bluetooth: hci4: command tx timeout [ 204.860527][ T3302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.921994][ T3302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.974779][ T8005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.242792][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.565511][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 205.626082][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.763862][ T24] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 205.780639][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.796234][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.824543][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.845107][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.856581][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.869698][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.877919][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.887163][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.897409][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.906471][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.918957][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.951175][ T24] usb 2-1: config 0 descriptor?? [ 205.959641][ T8138] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.138158][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.402772][ T8005] veth0_vlan: entered promiscuous mode [ 206.641062][ T8159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.454'. [ 206.660933][ T24] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 206.807137][ T8005] veth1_vlan: entered promiscuous mode [ 206.885762][ T5720] usb 2-1: USB disconnect, device number 6 [ 206.901584][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 206.905312][ T8160] ip6gre1: entered allmulticast mode [ 206.946674][ T8160] team0: Device ip6gre1 is of different type [ 206.991352][ T8162] fido_id[8162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 207.136735][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aa73400: rx timeout, send abort [ 207.481295][ T8171] netlink: 168 bytes leftover after parsing attributes in process `syz.2.456'. [ 207.708293][ T13] bridge_slave_1: left allmulticast mode [ 207.735295][ T13] bridge_slave_1: left promiscuous mode [ 207.752649][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.814368][ T13] bridge_slave_0: left allmulticast mode [ 207.840791][ T13] bridge_slave_0: left promiscuous mode [ 207.880821][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.995716][ T5633] Bluetooth: hci3: command tx timeout [ 208.116763][ T7378] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 208.289082][ T7378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.312490][ T7378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.345393][ T7378] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 208.367474][ T7378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.394701][ T7378] usb 1-1: config 0 descriptor?? [ 208.406778][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.439387][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.464863][ T13] bond0 (unregistering): Released all slaves [ 208.501775][ T8180] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.865799][ T8005] veth0_macvtap: entered promiscuous mode [ 208.881816][ T7378] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 208.900472][ T7378] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 208.917884][ T7378] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 208.935188][ T7378] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 208.950414][ T7378] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 208.964715][ T7378] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 208.983073][ T7378] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 208.996822][ T8214] process 'syz.1.463' launched './file1' with NULL argv: empty string added [ 209.056323][ T7378] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 209.141428][ T7378] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 209.173577][ T8005] veth1_macvtap: entered promiscuous mode [ 209.276150][ T13] hsr_slave_0: left promiscuous mode [ 209.299656][ T13] hsr_slave_1: left promiscuous mode [ 209.324114][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.348811][ T7378] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 209.363333][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.414106][ T7378] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -32 [ 209.434902][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.464111][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.538250][ T7378] usb 1-1: USB disconnect, device number 5 [ 209.549947][ T13] veth1_macvtap: left promiscuous mode [ 209.569997][ T13] veth0_macvtap: left promiscuous mode [ 209.583571][ T13] veth1_vlan: left promiscuous mode [ 209.620447][ T13] veth0_vlan: left promiscuous mode [ 210.075025][ T5633] Bluetooth: hci3: command tx timeout [ 210.081938][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 210.732746][ T13] team0 (unregistering): Port device team_slave_1 removed [ 210.785579][ T13] team0 (unregistering): Port device team_slave_0 removed [ 211.048553][ T5290] 8021q: adding VLAN 0 to HW filter on device eth19 [ 211.231939][ T8005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.277293][ T8005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.551909][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.588541][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.622813][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.671081][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.691933][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.727296][ T8149] bridge_slave_0: entered allmulticast mode [ 211.761041][ T8149] bridge_slave_0: entered promiscuous mode [ 211.781448][ T8262] netlink: 32 bytes leftover after parsing attributes in process `syz.0.472'. [ 211.797284][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.814430][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.830866][ T8149] bridge_slave_1: entered allmulticast mode [ 211.877768][ T8149] bridge_slave_1: entered promiscuous mode [ 211.896054][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.156019][ T5633] Bluetooth: hci3: command tx timeout [ 212.227257][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.343497][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.702205][ T8149] team0: Port device team_slave_0 added [ 212.791282][ T8149] team0: Port device team_slave_1 added [ 212.994037][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.008841][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.026157][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.040913][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.079666][ T5710] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 213.103543][ T8149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.199026][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.229972][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.278752][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.310480][ T8149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.323433][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.347174][ T5710] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 213.376320][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.408980][ T5710] usb 1-1: config 0 descriptor?? [ 213.470212][ T8275] dvmrp1: entered allmulticast mode [ 213.800883][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.826732][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.858096][ T5710] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 213.896799][ T5710] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 213.910218][ T8149] hsr_slave_0: entered promiscuous mode [ 213.927451][ T5710] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 213.940832][ T8149] hsr_slave_1: entered promiscuous mode [ 213.955603][ T5710] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 213.968791][ T8149] debugfs: 'hsr0' already exists in 'hsr' [ 213.985872][ T5710] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 214.005153][ T8149] Cannot create hsr debugfs directory [ 214.011776][ T5710] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 214.026088][ T5710] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 214.067831][ T5710] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 214.167334][ T5710] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00 [ 214.235527][ T5633] Bluetooth: hci3: command tx timeout [ 214.372456][ T5710] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 214.439457][ T5710] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -32 [ 214.471949][ T5710] usb 1-1: USB disconnect, device number 6 [ 214.763696][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'. [ 215.056622][ T5710] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 215.115139][ T5720] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 215.243998][ T5710] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.270460][ T5710] usb 2-1: config 0 has no interface number 0 [ 215.276763][ T5720] usb 3-1: Using ep0 maxpacket: 8 [ 215.288395][ T5710] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 215.316093][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.324468][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.336196][ T5710] usb 2-1: config 0 descriptor?? [ 215.368449][ T5710] usb 2-1: selecting invalid altsetting 1 [ 215.372647][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.416674][ T5710] dvb_ttusb_budget: ttusb_init_controller: error [ 215.423450][ T5720] usb 3-1: unable to get BOS descriptor or descriptor too short [ 215.424226][ T5720] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 215.424255][ T5720] usb 3-1: can't read configurations, error -71 [ 215.462535][ T5710] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 215.690199][ T5710] DVB: Unable to find symbol cx22700_attach() [ 215.835673][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.482'. [ 215.899615][ T8149] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.935053][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.104662][ T5710] DVB: Unable to find symbol tda10046_attach() [ 216.123074][ T5710] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 216.161262][ T5710] usb 2-1: USB disconnect, device number 7 [ 216.233271][ T8355] netlink: 148 bytes leftover after parsing attributes in process `syz.1.485'. [ 216.246319][ T8355] netlink: 164 bytes leftover after parsing attributes in process `syz.1.485'. [ 216.596315][ T8149] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.610131][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.665771][ T8149] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.684750][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.749960][ T8149] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.806393][ T5710] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 216.850294][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.986857][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.024568][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.493'. [ 217.041271][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.082076][ T5710] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 217.107966][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.131253][ T5710] usb 3-1: config 0 descriptor?? [ 217.173889][ T8149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.232646][ T8149] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.255435][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.262598][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.335954][ T5713] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 217.358905][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.367426][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.536513][ T5713] usb 2-1: Using ep0 maxpacket: 8 [ 217.582071][ T5710] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 217.589356][ T8385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.619955][ T5710] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 217.634803][ T8385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.658287][ T5710] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 217.681301][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.698877][ T5710] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 217.710890][ T8149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.719791][ T5713] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 217.731614][ T5710] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 217.751880][ T5713] usb 2-1: can't read configurations, error -71 [ 217.848034][ T5710] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00 [ 217.871781][ T8149] veth0_vlan: entered promiscuous mode [ 217.923271][ T8149] veth1_vlan: entered promiscuous mode [ 218.031793][ T8149] veth0_macvtap: entered promiscuous mode [ 218.050475][ T5710] cp2112 0003:10C4:EA90.000B: error requesting SMBus config [ 218.080433][ T8149] veth1_macvtap: entered promiscuous mode [ 218.092207][ T5710] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -32 [ 218.144254][ T5710] usb 3-1: USB disconnect, device number 6 [ 218.157097][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.227404][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.303845][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.347843][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.365079][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 218.377504][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.410979][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.529311][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.567566][ T10] usb 7-1: config 0 has no interface number 0 [ 218.584046][ T10] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 218.604384][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.621718][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.639326][ T10] usb 7-1: config 0 descriptor?? [ 218.662448][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.677046][ T10] usb 7-1: selecting invalid altsetting 1 [ 218.687928][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 218.694540][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 218.792849][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.822092][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.857211][ T10] DVB: Unable to find symbol cx22700_attach() [ 218.889193][ T8421] syz_tun: entered allmulticast mode [ 219.053175][ T10] DVB: Unable to find symbol tda10046_attach() [ 219.073942][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 219.130511][ T10] usb 7-1: USB disconnect, device number 12 [ 219.695849][ T8418] syz_tun: left allmulticast mode [ 220.240036][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 220.325656][ T1225] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 220.558159][ T1225] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 220.607488][ T1225] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 220.695476][ T1225] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 220.724648][ T1225] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.744443][ T1225] usb 7-1: Product: syz [ 220.753673][ T1225] usb 7-1: Manufacturer: syz [ 220.765043][ T1225] usb 7-1: SerialNumber: syz [ 220.793271][ T1225] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 221.024566][ T5728] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 221.285026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 221.325184][ T46] usb 7-1: USB disconnect, device number 13 [ 221.635023][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 221.806798][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.833653][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.858767][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 221.888244][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.929893][ T24] usb 3-1: config 0 descriptor?? [ 222.155650][ T5728] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 222.167841][ T5728] ath9k_htc: Failed to initialize the device [ 222.182880][ T46] usb 7-1: ath9k_htc: USB layer deinitialized [ 222.307571][ T5713] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 222.372968][ T24] hid_parser_main: 3 callbacks suppressed [ 222.372990][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 222.419116][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 222.434995][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 222.454879][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 222.466021][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 222.485656][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 222.486953][ T5713] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.497554][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 222.516807][ T24] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 222.526802][ T5713] usb 4-1: config 0 has no interface number 0 [ 222.545157][ T46] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 222.552435][ T5713] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 222.570775][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.597985][ T5713] usb 4-1: config 0 descriptor?? [ 222.616715][ T24] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 222.623923][ T5713] usb 4-1: selecting invalid altsetting 1 [ 222.643160][ T5713] dvb_ttusb_budget: ttusb_init_controller: error [ 222.660199][ T5713] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 222.696017][ T46] usb 7-1: Using ep0 maxpacket: 32 [ 222.707486][ T46] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 222.743936][ T46] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 222.800654][ T5713] DVB: Unable to find symbol cx22700_attach() [ 222.818019][ T46] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 222.831621][ T24] cp2112 0003:10C4:EA90.000C: error requesting SMBus config [ 222.865361][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.895440][ T24] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -32 [ 222.901582][ T5713] DVB: Unable to find symbol tda10046_attach() [ 222.907121][ T46] usb 7-1: Product: syz [ 222.925338][ T5713] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 222.931517][ T46] usb 7-1: Manufacturer: syz [ 222.946608][ T24] usb 3-1: USB disconnect, device number 7 [ 222.957325][ T46] usb 7-1: SerialNumber: syz [ 222.982943][ T5713] usb 4-1: USB disconnect, device number 5 [ 223.016718][ T46] ldusb 7-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 223.118333][ T46] usb 7-1: USB disconnect, device number 14 [ 223.191362][ T46] ldusb 7-1:1.0: LD USB Device #0 now disconnected [ 223.638547][ T8530] syz_tun: entered allmulticast mode [ 223.730758][ T8533] netlink: 'syz.3.517': attribute type 3 has an invalid length. [ 223.762095][ T8533] netlink: 60 bytes leftover after parsing attributes in process `syz.3.517'. [ 223.914006][ T5290] 8021q: adding VLAN 0 to HW filter on device eth12 [ 224.394515][ T8525] syz_tun: left allmulticast mode [ 224.675418][ T5728] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 224.868011][ T5728] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.889723][ T5728] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 224.927468][ T5728] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.984988][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.014887][ T8550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.058910][ T5728] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.219647][ T5710] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 225.406745][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.426680][ T5710] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 225.442593][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.459091][ T5710] usb 4-1: config 0 descriptor?? [ 225.506622][ T8550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.529025][ T8550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.618235][ T46] usb 1-1: USB disconnect, device number 7 [ 225.681673][ T5710] usbhid 4-1:0.0: can't add hid device: -71 [ 225.711816][ T5710] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 225.745402][ T5710] usb 4-1: USB disconnect, device number 6 [ 226.245036][ T7378] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 226.248055][ T5710] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 226.435360][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 226.446622][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.458339][ T7378] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.464888][ T5710] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 226.480797][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.488682][ T7378] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.494150][ T5710] usb 4-1: config 0 descriptor?? [ 226.510955][ T7378] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 226.520024][ T5710] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 226.525740][ T5710] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 226.545018][ T7378] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.565604][ T7378] usb 7-1: config 0 descriptor?? [ 226.985963][ T7378] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 227.001076][ T7378] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 227.015771][ T7378] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 227.040777][ T7378] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 227.183725][ T7378] cp2112 0003:10C4:EA90.000D: Part Number: 0x00 Device Version: 0x00 [ 227.389545][ T7378] cp2112 0003:10C4:EA90.000D: error requesting SMBus config [ 227.398396][ T8629] ALSA: mixer_oss: invalid OSS volume '' [ 227.436281][ T7378] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -32 [ 227.479790][ T7378] usb 7-1: USB disconnect, device number 15 [ 227.734856][ T29] audit: type=1804 audit(1778448937.040:82): pid=8640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.537" name="/newroot/34/file0" dev="tmpfs" ino=193 res=1 errno=0 [ 228.162878][ T5713] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 228.207967][ T10] usb 4-1: USB disconnect, device number 7 [ 228.225587][ T10] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 228.325040][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 228.342624][ T5713] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 228.366251][ T5713] usb 3-1: config 0 has no interface number 0 [ 228.383843][ T5713] usb 3-1: config 0 interface 184 has no altsetting 0 [ 228.394789][ T5713] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 228.408248][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.418708][ T5713] usb 3-1: Product: syz [ 228.423035][ T5713] usb 3-1: Manufacturer: syz [ 228.427825][ T5713] usb 3-1: SerialNumber: syz [ 228.437214][ T5713] usb 3-1: config 0 descriptor?? [ 228.496144][ T8660] netlink: 'syz.6.539': attribute type 4 has an invalid length. [ 228.851247][ T5290] 8021q: adding VLAN 0 to HW filter on device eth11 [ 228.985034][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 229.136578][ T10] usb 1-1: device descriptor read/64, error -71 [ 229.405227][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 229.546151][ T10] usb 1-1: device descriptor read/64, error -71 [ 229.635277][ T8691] ALSA: mixer_oss: invalid OSS volume '' [ 229.675989][ T10] usb usb1-port1: attempt power cycle [ 229.885065][ T5713] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 229.916650][ T5713] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 229.949245][ T5713] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 229.983080][ T5713] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 230.013511][ T5713] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 230.026070][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 230.049251][ T5713] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 230.065450][ T10] usb 1-1: device descriptor read/8, error -71 [ 230.084454][ T5713] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 230.115953][ T5713] usb 3-1: USB disconnect, device number 8 [ 230.315900][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 230.346035][ T10] usb 1-1: device descriptor read/8, error -71 [ 230.468287][ T10] usb usb1-port1: unable to enumerate USB device [ 230.815253][ T5626] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 230.990364][ T5626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.008349][ T8727] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 231.015112][ T8727] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 231.063798][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 231.084295][ T5626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.093144][ T8727] vhci_hcd vhci_hcd.0: Device attached [ 231.137540][ T5626] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 231.284521][ T5626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.346296][ T5720] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 231.422188][ T8728] vhci_hcd: connection reset by peer [ 231.471606][ T12] vhci_hcd vhci_hcd.6: stop threads [ 231.485566][ T12] vhci_hcd vhci_hcd.6: release socket [ 231.509450][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 231.696996][ T5626] usb 2-1: config 0 descriptor?? [ 232.208972][ T5626] usbhid 2-1:0.0: can't add hid device: -71 [ 232.243251][ T5626] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 232.295314][ T5626] usb 2-1: USB disconnect, device number 10 [ 232.476460][ T8748] ALSA: mixer_oss: invalid OSS volume '' [ 233.136625][ T46] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 233.325282][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 233.338836][ T46] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 233.368825][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.397593][ T46] usb 2-1: Product: syz [ 233.410816][ T46] usb 2-1: Manufacturer: syz [ 233.435152][ T46] usb 2-1: SerialNumber: syz [ 233.685208][ T46] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 233.739962][ T46] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 233.768202][ T8775] bridge_slave_0: left allmulticast mode [ 233.786775][ T46] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 233.796951][ T8775] bridge_slave_0: left promiscuous mode [ 233.817769][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.839084][ T46] usb 2-1: media controller created [ 233.877071][ T8775] bridge_slave_1: left allmulticast mode [ 233.901407][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.916846][ T8775] bridge_slave_1: left promiscuous mode [ 233.934227][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.006447][ T8775] bond0: (slave bond_slave_0): Releasing backup interface [ 234.059332][ T8775] bond0: (slave bond_slave_1): Releasing backup interface [ 234.083376][ T46] zl10353_read_register: readreg error (reg=127, ret==-71) [ 234.150554][ T8775] team0: Port device team_slave_0 removed [ 234.223382][ T8775] team0: Port device team_slave_1 removed [ 234.255919][ T8775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.281484][ T8775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.343675][ T46] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 234.346271][ T8775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.407508][ T8775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.420862][ T46] usb 2-1: USB disconnect, device number 11 [ 234.470327][ T8775] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.805238][ T46] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 234.849993][ T8797] ALSA: mixer_oss: invalid OSS volume '' [ 234.991697][ T46] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 235.029084][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 235.051949][ T46] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 235.079574][ T46] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 235.087917][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 235.108308][ T46] usb 2-1: Product: syz [ 235.122916][ T46] usb 2-1: Manufacturer: syz [ 235.137327][ T46] usb 2-1: SerialNumber: syz [ 235.160287][ T46] usb 2-1: config 0 descriptor?? [ 235.202263][ T46] usb 2-1: selecting invalid altsetting 0 [ 235.272217][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.309575][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.346711][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 235.385145][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.425204][ T24] usb 1-1: config 0 descriptor?? [ 235.470017][ T46] usb 2-1: USB disconnect, device number 12 [ 235.886633][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 235.905996][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 235.943553][ T24] usb 1-1: USB disconnect, device number 12 [ 236.066075][ T8812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.571'. [ 236.475330][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 236.488571][ T5720] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 236.995323][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 237.171090][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 237.209770][ T24] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 237.244393][ T24] usb 7-1: config 0 has no interface number 0 [ 237.310467][ T24] usb 7-1: config 0 interface 12 has no altsetting 0 [ 237.424886][ T24] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 237.479819][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.504230][ T24] usb 7-1: Product: syz [ 237.517244][ T24] usb 7-1: Manufacturer: syz [ 237.531757][ T24] usb 7-1: SerialNumber: syz [ 237.557894][ T24] usb 7-1: config 0 descriptor?? [ 238.918199][ T8859] ALSA: mixer_oss: invalid OSS volume '' [ 239.217981][ T24] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 239.235033][ T24] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 239.252653][ T24] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 239.274565][ T24] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 239.300076][ T8867] input: syz1 as /devices/virtual/input/input8 [ 239.339021][ T24] usb 7-1: USB disconnect, device number 16 [ 240.463775][ T5290] 8021q: adding VLAN 0 to HW filter on device eth14 [ 240.625193][ T8898] syzkaller0: entered promiscuous mode [ 240.632858][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 240.666691][ T8898] syzkaller0: entered allmulticast mode [ 240.967859][ T8894] vivid-000: disconnect [ 241.323665][ T8915] ALSA: mixer_oss: invalid OSS volume '' [ 241.369845][ T8888] vivid-000: reconnect [ 241.981461][ T8930] netlink: 'syz.6.597': attribute type 1 has an invalid length. [ 242.015060][ T8930] netlink: 'syz.6.597': attribute type 2 has an invalid length. [ 242.056290][ T8930] netlink: 'syz.6.597': attribute type 1 has an invalid length. [ 242.093221][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.6.597'. [ 242.648912][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 243.082524][ T5290] 8021q: adding VLAN 0 to HW filter on device eth15 [ 243.169741][ T8960] ALSA: mixer_oss: invalid OSS volume '' [ 243.365994][ T5728] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 243.514348][ T8972] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 243.536183][ T8972] netlink: 'syz.3.608': attribute type 2 has an invalid length. [ 243.546939][ T5728] usb 7-1: Using ep0 maxpacket: 8 [ 243.560241][ T5728] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 243.577077][ T8972] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 243.601505][ T5728] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.612247][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.608'. [ 243.629875][ T5728] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.655722][ T5728] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.688097][ T5728] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.748895][ T5728] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.799500][ T5728] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.062508][ T5728] usb 7-1: GET_CAPABILITIES returned 0 [ 244.081554][ T5728] usbtmc 7-1:16.0: can't read capabilities [ 244.259007][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 244.268402][ T8996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.277135][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.299121][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.308261][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.333228][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.333672][ T8996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.342364][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.342409][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.342446][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.350249][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.392637][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.401865][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.411071][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.420367][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.453657][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 244.474920][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.484039][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.493103][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 244.502261][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 244.568984][ T5728] usb 7-1: USB disconnect, device number 17 [ 244.978300][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 245.161291][ T5290] 8021q: adding VLAN 0 to HW filter on device eth16 [ 245.312489][ T9021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.619'. [ 245.367142][ T9021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.619'. [ 245.468631][ T9027] netlink: 'syz.6.620': attribute type 1 has an invalid length. [ 245.499133][ T9027] netlink: 'syz.6.620': attribute type 2 has an invalid length. [ 245.541207][ T9027] netlink: 'syz.6.620': attribute type 1 has an invalid length. [ 245.561063][ T9027] netlink: 16 bytes leftover after parsing attributes in process `syz.6.620'. [ 246.165465][ T5710] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 246.345000][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 246.364014][ T5710] usb 2-1: config 0 has no interfaces? [ 246.378523][ T5710] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 246.393277][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.406311][ T5710] usb 2-1: config 0 descriptor?? [ 246.644237][ T5710] usb 2-1: USB disconnect, device number 13 [ 246.685580][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 246.854987][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 246.876874][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 246.897031][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.912401][ T24] usb 3-1: config 0 descriptor?? [ 246.944419][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 247.266344][ T5710] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 247.436364][ T5710] usb 4-1: Using ep0 maxpacket: 8 [ 247.455656][ T5710] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 247.478400][ T5710] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.501356][ T5710] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.524719][ T5710] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.547590][ T5710] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.578588][ T5710] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 247.604475][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.865109][ T5710] usb 4-1: GET_CAPABILITIES returned 0 [ 247.886978][ T5710] usbtmc 4-1:16.0: can't read capabilities [ 247.950893][ T24] gspca_sonixj: reg_w1 err -71 [ 247.998313][ T24] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 248.036593][ T24] usb 3-1: USB disconnect, device number 9 [ 248.069547][ T5697] usb 4-1: USB disconnect, device number 8 [ 248.176931][ T9094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.631'. [ 248.198162][ T9094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.631'. [ 248.371473][ T9099] netlink: 'syz.0.632': attribute type 1 has an invalid length. [ 248.390842][ T9099] netlink: 'syz.0.632': attribute type 2 has an invalid length. [ 248.410014][ T9099] netlink: 'syz.0.632': attribute type 1 has an invalid length. [ 248.423401][ T9099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.632'. [ 248.833280][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 249.175865][ T9132] netlink: 40 bytes leftover after parsing attributes in process `syz.6.642'. [ 249.198985][ T9132] netlink: 32 bytes leftover after parsing attributes in process `syz.6.642'. [ 249.525716][ T9138] netlink: 'syz.6.644': attribute type 1 has an invalid length. [ 249.575824][ T9138] netlink: 'syz.6.644': attribute type 2 has an invalid length. [ 249.577945][ T9139] tipc: Started in network mode [ 249.624878][ T9138] netlink: 'syz.6.644': attribute type 1 has an invalid length. [ 249.655447][ T9139] tipc: Node identity 4, cluster identity 4711 [ 249.679411][ T9138] netlink: 16 bytes leftover after parsing attributes in process `syz.6.644'. [ 249.695103][ T9139] tipc: Node number set to 4 [ 250.405185][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 250.587509][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 250.611822][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 250.634479][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.657881][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.694835][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 250.729343][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.777875][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 250.806180][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.988590][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 251.056743][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 251.072929][ T24] usbtmc 2-1:16.0: can't read capabilities [ 251.205771][ T5697] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 251.286644][ T7379] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 251.287693][ T10] usb 2-1: USB disconnect, device number 14 [ 251.365187][ T5697] usb 4-1: Using ep0 maxpacket: 8 [ 251.384498][ T9181] netlink: 40 bytes leftover after parsing attributes in process `syz.6.654'. [ 251.414650][ T5697] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 251.438795][ T5697] usb 4-1: config 0 has no interface number 0 [ 251.464564][ T5697] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.495566][ T7379] usb 3-1: Using ep0 maxpacket: 16 [ 251.502384][ T5697] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 251.518610][ T7379] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 251.555128][ T7379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.563252][ T5697] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.584019][ T7379] usb 3-1: config 0 descriptor?? [ 251.592517][ T5697] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.613713][ T7379] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 251.630348][ T5697] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 251.652445][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.700306][ T5697] usb 4-1: config 0 descriptor?? [ 251.732297][ T5697] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 252.097744][ T5697] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 252.201086][ T5728] usb 4-1: USB disconnect, device number 9 [ 252.201212][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 252.271628][ T5728] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 252.279870][ T9170] ldusb: No device or device unplugged -19 [ 252.331142][ T5697] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 252.377018][ T5697] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.480009][ T5697] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 252.500407][ T9205] syzkaller1: entered promiscuous mode [ 252.515365][ T5697] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 252.517678][ T9205] syzkaller1: entered allmulticast mode [ 252.543422][ T5697] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.560893][ T5697] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.570516][ T5697] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.626973][ T7379] gspca_sonixj: reg_w1 err -71 [ 252.643179][ T5697] usb 7-1: config 0 descriptor?? [ 252.673779][ T7379] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 252.685718][ T9191] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 252.822822][ T7379] usb 3-1: USB disconnect, device number 10 [ 253.142165][ T5697] usbhid 7-1:0.0: can't add hid device: -71 [ 253.164308][ T5697] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 253.199462][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 253.218357][ T5697] usb 7-1: USB disconnect, device number 18 [ 253.400406][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 253.560957][ T9230] syz_tun: entered allmulticast mode [ 253.875939][ T9236] netlink: 40 bytes leftover after parsing attributes in process `syz.6.665'. [ 254.315317][ T5728] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 254.330221][ T9228] syz_tun: left allmulticast mode [ 254.511620][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.551138][ T5728] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 254.587186][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.624592][ T5728] usb 4-1: config 0 descriptor?? [ 254.695334][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 254.881010][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 254.893893][ T5728] usbhid 4-1:0.0: can't add hid device: -71 [ 254.930445][ T5728] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 254.965588][ T10] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 254.993620][ T5728] usb 4-1: USB disconnect, device number 10 [ 255.008020][ T5710] hid_parser_main: 4 callbacks suppressed [ 255.008041][ T5710] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 255.024872][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.054319][ T10] usb 2-1: Product: syz [ 255.080705][ T10] usb 2-1: Manufacturer: syz [ 255.098959][ T10] usb 2-1: SerialNumber: syz [ 255.108534][ T5710] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 255.379446][ T10] usb 2-1: selecting invalid altsetting 1 [ 255.416014][ T9261] fido_id[9261]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 255.465592][ T5728] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 255.562113][ T10] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 255.562227][ T10] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 255.675856][ T5728] usb 4-1: Using ep0 maxpacket: 32 [ 255.678773][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.688640][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.701538][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.762802][ T5728] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 255.777987][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 255.808158][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.808489][ T7379] usb 2-1: USB disconnect, device number 15 [ 255.877636][ T5728] usb 4-1: config 0 descriptor?? [ 255.921688][ T5728] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 256.012149][ T5728] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 256.048504][ T9278] capability: warning: `syz.6.675' uses deprecated v2 capabilities in a way that may be insecure [ 256.283386][ T9283] netlink: 40 bytes leftover after parsing attributes in process `syz.6.676'. [ 256.351408][ T7379] usb 4-1: USB disconnect, device number 11 [ 256.396398][ T7379] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 256.532341][ T9289] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 256.557492][ T9289] netlink: 'syz.1.677': attribute type 2 has an invalid length. [ 256.569464][ T9289] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 256.580714][ T9289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.677'. [ 256.724524][ T9296] syz_tun: entered allmulticast mode [ 256.856852][ T9295] syz_tun: left allmulticast mode [ 257.083087][ T5290] 8021q: adding VLAN 0 to HW filter on device eth8 [ 257.138671][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 257.165079][ T7379] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 257.460271][ T7379] usb 3-1: Using ep0 maxpacket: 16 [ 257.483073][ T7379] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 257.502067][ T7379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.538500][ T7379] usb 3-1: config 0 descriptor?? [ 257.558412][ T7379] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 258.578808][ T7379] gspca_sonixj: reg_w1 err -71 [ 258.595088][ T7379] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 258.633091][ T7379] usb 3-1: USB disconnect, device number 11 [ 259.179051][ T9351] netlink: 52 bytes leftover after parsing attributes in process `syz.6.685'. [ 259.303629][ T9354] mmap: syz.6.685 (9354) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 259.681044][ T9363] netlink: 'syz.6.689': attribute type 1 has an invalid length. [ 259.694124][ T9364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.688'. [ 259.706464][ T5710] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 259.722068][ T9363] netlink: 'syz.6.689': attribute type 2 has an invalid length. [ 259.762482][ T9363] netlink: 'syz.6.689': attribute type 1 has an invalid length. [ 259.792383][ T9363] netlink: 16 bytes leftover after parsing attributes in process `syz.6.689'. [ 259.895240][ T5710] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 259.946840][ T5710] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 259.958588][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.969179][ T5710] usb 3-1: Product: syz [ 259.973544][ T5710] usb 3-1: Manufacturer: syz [ 259.979342][ T5710] usb 3-1: SerialNumber: syz [ 259.991074][ T9369] syz_tun: entered allmulticast mode [ 260.012486][ T9371] netlink: 'syz.3.692': attribute type 11 has an invalid length. [ 260.029190][ T9371] netlink: 56 bytes leftover after parsing attributes in process `syz.3.692'. [ 260.038771][ T9368] syz_tun: left allmulticast mode [ 260.218670][ T5710] usb 3-1: selecting invalid altsetting 1 [ 260.425104][ T5710] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 260.425236][ T5710] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 260.642468][ T5710] usb 3-1: USB disconnect, device number 12 [ 260.743154][ T10] IPVS: starting estimator thread 0... [ 260.765329][ T9389] IPVS: set_ctl: invalid protocol: 0 172.20.20.14:20004 [ 260.895050][ T9391] IPVS: using max 29 ests per chain, 69600 per kthread [ 261.189540][ T5290] 8021q: adding VLAN 0 to HW filter on device eth17 [ 261.483092][ T9399] syz_tun: entered allmulticast mode [ 261.532134][ T9397] syz_tun: left allmulticast mode [ 262.590769][ T9425] netlink: 16 bytes leftover after parsing attributes in process `syz.6.700'. [ 263.099770][ T9435] syz_tun: entered allmulticast mode [ 263.147360][ T9434] syz_tun: left allmulticast mode [ 263.187659][ T5710] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 263.365761][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 263.388710][ T5710] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 263.414034][ T5710] usb 2-1: config 2 has no interface number 0 [ 263.425456][ T7378] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 263.431524][ T5710] usb 2-1: config 2 interface 31 has no altsetting 0 [ 263.467046][ T5710] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 263.498106][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.522994][ T5710] usb 2-1: Product: syz [ 263.538906][ T5710] usb 2-1: Manufacturer: syz [ 263.559129][ T5710] usb 2-1: SerialNumber: syz [ 263.629142][ T7378] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 263.660688][ T7378] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 263.684352][ T7378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.718748][ T7378] usb 3-1: Product: syz [ 263.747350][ T7378] usb 3-1: Manufacturer: syz [ 263.761647][ T7378] usb 3-1: SerialNumber: syz [ 264.024116][ T7378] usb 3-1: selecting invalid altsetting 1 [ 264.227994][ T7378] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 264.228108][ T7378] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 264.456289][ T7378] usb 3-1: USB disconnect, device number 13 [ 264.888821][ T5710] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 264.958572][ T5290] 8021q: adding VLAN 0 to HW filter on device eth18 [ 265.284255][ T7378] IPVS: starting estimator thread 0... [ 265.385046][ T9473] IPVS: using max 53 ests per chain, 127200 per kthread [ 265.866797][ T7378] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 266.051721][ T7378] usb 7-1: Using ep0 maxpacket: 32 [ 266.082040][ T7378] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 266.142752][ T7378] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 266.201590][ T7378] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.231826][ T9489] syz_tun: entered allmulticast mode [ 266.241812][ T7378] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 266.281306][ T9488] syz_tun: left allmulticast mode [ 266.296965][ T7378] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 266.334820][ T7378] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.373896][ T7378] usb 7-1: Product: syz [ 266.397720][ T7378] usb 7-1: Manufacturer: syz [ 266.416671][ T7378] usb 7-1: SerialNumber: syz [ 266.468429][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 266.623963][ T7378] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input9 [ 266.671593][ T5710] usb 2-1: USB disconnect, device number 16 [ 266.678127][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.719'. [ 266.765889][ T7378] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 266.801553][ T9500] vivid-000: disconnect [ 266.815150][ T7378] (id 0x00) [ 266.916536][ T7378] rc_core: IR keymap rc-imon-pad not found [ 266.938214][ T7378] Registered IR keymap rc-empty [ 266.961182][ T7378] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 267.009918][ T7378] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 267.086677][ T7378] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 267.132286][ T7378] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input10 [ 267.186471][ T7378] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:19> initialized [ 267.444055][ T9497] vivid-000: reconnect [ 267.785724][ T5728] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 267.919489][ T7379] usb 7-1: USB disconnect, device number 19 [ 267.948673][ T9522] imon:send_packet: packet tx failed (-71) [ 267.984009][ T5728] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 267.998239][ T9522] imon:vfd_write: send packet #0 failed [ 268.023593][ T5728] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 268.053643][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.087073][ T5728] usb 2-1: Product: syz [ 268.104634][ T5728] usb 2-1: Manufacturer: syz [ 268.128087][ T5728] usb 2-1: SerialNumber: syz [ 268.384524][ T5728] usb 2-1: selecting invalid altsetting 1 [ 268.459023][ T5290] 8021q: adding VLAN 0 to HW filter on device eth20 [ 268.588357][ T5728] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 268.588483][ T5728] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 268.765252][ T9546] syz_tun: entered allmulticast mode [ 268.782687][ T9545] syz_tun: left allmulticast mode [ 268.797814][ T7379] usb 2-1: USB disconnect, device number 17 [ 270.980536][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.735'. [ 271.512009][ T9610] syz_tun: entered allmulticast mode [ 271.725348][ T7378] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 271.931615][ T7378] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 271.960733][ T7378] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 271.976886][ T7378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.995076][ T7378] usb 2-1: Product: syz [ 272.005257][ T7378] usb 2-1: Manufacturer: syz [ 272.017341][ T7378] usb 2-1: SerialNumber: syz [ 272.256990][ T7378] usb 2-1: selecting invalid altsetting 1 [ 272.459382][ T7378] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 272.459488][ T7378] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 272.488108][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 272.673377][ T7378] usb 2-1: USB disconnect, device number 18 [ 272.957421][ T7379] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 273.128124][ T7379] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.150556][ T7379] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 273.171692][ T7379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.210363][ T7379] usb 3-1: config 0 descriptor?? [ 273.238539][ T7379] pwc: Askey VC010 type 2 USB webcam detected. [ 273.275575][ T7378] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 273.370658][ T9666] syz_tun: entered allmulticast mode [ 273.455432][ T7378] usb 4-1: Using ep0 maxpacket: 8 [ 273.473748][ T7378] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 273.506190][ T7378] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 273.534547][ T7378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.552004][ T7378] usb 4-1: Product: syz [ 273.564367][ T7378] usb 4-1: Manufacturer: syz [ 273.574016][ T7378] usb 4-1: SerialNumber: syz [ 273.612161][ T7378] usb 4-1: config 0 descriptor?? [ 273.655611][ T7379] pwc: recv_control_msg error -32 req 02 val 2b00 [ 273.688818][ T7378] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 273.710087][ T7379] pwc: recv_control_msg error -32 req 02 val 2700 [ 273.735589][ T7379] pwc: recv_control_msg error -32 req 02 val 2c00 [ 273.742840][ T7378] usb 4-1: setting power ON [ 273.752079][ T7378] dvb-usb: bulk message failed: -22 (2/0) [ 273.764209][ T9673] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 273.770097][ T7379] pwc: recv_control_msg error -32 req 04 val 1000 [ 273.788541][ T7378] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 273.802408][ T7379] pwc: recv_control_msg error -32 req 04 val 1300 [ 273.817419][ T7378] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 273.833227][ T9673] bond1: (slave lo): Enslaving as an active interface with an up link [ 273.836608][ T7378] usb 4-1: media controller created [ 273.877598][ T9673] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 273.901224][ T9657] dvb-usb: bulk message failed: -22 (3/0) [ 273.924447][ T9657] cxusb: i2c rd: len=147 is too big! [ 273.924447][ T9657] [ 273.935561][ T7378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.986981][ T7378] usb 4-1: selecting invalid altsetting 6 [ 274.017751][ T7379] pwc: recv_control_msg error -71 req 02 val 2000 [ 274.037030][ T7379] pwc: recv_control_msg error -71 req 02 val 2100 [ 274.045614][ T7378] usb 4-1: digital interface selection failed (-22) [ 274.082555][ T7379] pwc: recv_control_msg error -71 req 04 val 1500 [ 274.090922][ T7378] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 274.114859][ T7379] pwc: recv_control_msg error -71 req 02 val 2500 [ 274.131502][ T7378] usb 4-1: setting power OFF [ 274.140428][ T7379] pwc: recv_control_msg error -71 req 02 val 2400 [ 274.157066][ T7378] dvb-usb: bulk message failed: -22 (2/0) [ 274.167326][ T7379] pwc: recv_control_msg error -71 req 02 val 2600 [ 274.179890][ T7378] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 274.191356][ T7379] pwc: recv_control_msg error -71 req 02 val 2900 [ 274.206929][ T7379] pwc: recv_control_msg error -71 req 02 val 2800 [ 274.216739][ T7378] (NULL device *): no alternate interface [ 274.240015][ T7379] pwc: recv_control_msg error -71 req 04 val 1100 [ 274.291363][ T7379] pwc: recv_control_msg error -71 req 04 val 1200 [ 274.361388][ T7379] pwc: Registered as video103. [ 274.379654][ T7378] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 274.390300][ T7379] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 274.424760][ T7378] usb 4-1: USB disconnect, device number 12 [ 274.432291][ T7379] usb 3-1: USB disconnect, device number 14 [ 274.835176][ T1225] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 274.920725][ T9706] syz_tun: entered allmulticast mode [ 275.015369][ T1225] usb 2-1: Using ep0 maxpacket: 32 [ 275.032554][ T1225] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 275.051863][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.071640][ T1225] usb 2-1: Product: syz [ 275.080428][ T1225] usb 2-1: Manufacturer: syz [ 275.108912][ T1225] usb 2-1: SerialNumber: syz [ 275.140311][ T1225] usb 2-1: config 0 descriptor?? [ 275.177952][ T1225] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 275.187563][ T5626] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 275.207683][ T7379] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 275.222489][ T1225] dvb-usb: bulk message failed: -22 (4/0) [ 275.242802][ T1225] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 275.267174][ T1225] dvb-usb: bulk message failed: -22 (5/0) [ 275.273391][ T1225] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 275.293297][ T1225] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.308458][ T1225] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 275.328020][ T1225] usb 2-1: media controller created [ 275.369301][ T5626] usb 4-1: Using ep0 maxpacket: 8 [ 275.384317][ T1225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.401873][ T7379] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 275.403005][ T5626] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 275.457256][ T7379] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 275.470066][ T5626] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 275.474993][ T7379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.480965][ T1225] usb 2-1: selecting invalid altsetting 3 [ 275.502004][ T5626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.504999][ T7379] usb 3-1: Product: syz [ 275.525036][ T5626] usb 4-1: Product: syz [ 275.526235][ T7379] usb 3-1: Manufacturer: syz [ 275.529445][ T1225] ttusb2: set interface to alts=3 failed [ 275.547034][ T7379] usb 3-1: SerialNumber: syz [ 275.551643][ T5626] usb 4-1: Manufacturer: syz [ 275.551665][ T5626] usb 4-1: SerialNumber: syz [ 275.571357][ T5626] usb 4-1: config 0 descriptor?? [ 275.603039][ T5626] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 275.632535][ T5626] usb 4-1: setting power ON [ 275.648483][ T5626] dvb-usb: bulk message failed: -22 (2/0) [ 275.674782][ T1225] DVB: Unable to find symbol tda10086_attach() [ 275.689056][ T1225] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 275.699466][ T5626] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.722143][ T1225] dvb-usb: bulk message failed: -22 (4/0) [ 275.730016][ T5626] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 275.745202][ T1225] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 275.765278][ T5626] usb 4-1: media controller created [ 275.772725][ T1225] dvb-usb: bulk message failed: -22 (5/0) [ 275.794776][ T1225] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 275.810130][ T7379] usb 3-1: selecting invalid altsetting 1 [ 275.822125][ T5626] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.834702][ T9708] ttusb2: i2c wr len=147 too high [ 275.848133][ T1225] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 275.858640][ T9708] ttusb2: i2c wr len=79 too high [ 275.887257][ T1225] usb 2-1: USB disconnect, device number 19 [ 275.921732][ T5626] usb 4-1: selecting invalid altsetting 6 [ 275.931400][ T5626] usb 4-1: digital interface selection failed (-22) [ 275.961637][ T5626] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 276.012233][ T7379] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 276.012342][ T7379] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 276.017944][ T5626] usb 4-1: setting power OFF [ 276.068936][ T1225] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 276.091132][ T5626] dvb-usb: bulk message failed: -22 (2/0) [ 276.123003][ T5626] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 276.178993][ T5626] (NULL device *): no alternate interface [ 276.261266][ T5728] usb 3-1: USB disconnect, device number 15 [ 276.286567][ T5626] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 276.344183][ T5626] usb 4-1: USB disconnect, device number 13 [ 276.462206][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 276.727401][ T9745] warning: `syz.6.769' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 277.070572][ T9750] ±ÿþ€: renamed from team_slave_1 (while UP) [ 277.997372][ T5626] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 278.166239][ T5626] usb 1-1: Using ep0 maxpacket: 32 [ 278.196755][ T5626] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 278.218502][ T5626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.238096][ T5626] usb 1-1: Product: syz [ 278.249084][ T5626] usb 1-1: Manufacturer: syz [ 278.259840][ T5626] usb 1-1: SerialNumber: syz [ 278.282662][ T5626] usb 1-1: config 0 descriptor?? [ 278.318432][ T5626] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 278.360245][ T5626] dvb-usb: bulk message failed: -22 (4/0) [ 278.407918][ T5626] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 278.462549][ T5626] dvb-usb: bulk message failed: -22 (5/0) [ 278.494848][ T5626] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 278.551510][ T5626] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.585393][ T5626] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 278.615410][ T5626] usb 1-1: media controller created [ 278.706668][ T5626] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.725713][ T5728] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 278.839402][ T5626] usb 1-1: selecting invalid altsetting 3 [ 278.856981][ T5626] ttusb2: set interface to alts=3 failed [ 278.897447][ T5728] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 278.931674][ T5728] usb 7-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 278.946119][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.961254][ T5626] DVB: Unable to find symbol tda10086_attach() [ 278.968940][ T5728] usb 7-1: Product: syz [ 278.973190][ T5626] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 278.982493][ T5728] usb 7-1: Manufacturer: syz [ 278.989670][ T5728] usb 7-1: SerialNumber: syz [ 278.995366][ T5626] dvb-usb: bulk message failed: -22 (4/0) [ 279.004096][ T5626] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 279.026954][ T5626] dvb-usb: bulk message failed: -22 (5/0) [ 279.033915][ T5626] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 279.047010][ T5626] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 279.099683][ T5626] usb 1-1: USB disconnect, device number 13 [ 279.155087][ T1225] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 279.241903][ T5728] usb 7-1: selecting invalid altsetting 1 [ 279.309248][ T5626] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 279.345111][ T1225] usb 4-1: Using ep0 maxpacket: 8 [ 279.386661][ T1225] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 279.406528][ T1225] usb 4-1: config 0 has no interface number 0 [ 279.415683][ T1225] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 279.427511][ T1225] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 279.440744][ T1225] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.467253][ T5728] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 279.467367][ T5728] dvb_usb_lmedm04 7-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 279.497258][ T1225] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 279.530159][ T1225] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 279.562905][ T1225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.654379][ T1225] usb 4-1: config 0 descriptor?? [ 279.671947][ T5626] usb 7-1: USB disconnect, device number 20 [ 279.729827][ T1225] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 279.896760][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 281.075210][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 281.257295][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 281.297389][ T24] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 281.350879][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.379671][ T24] usb 1-1: Product: syz [ 281.400227][ T24] usb 1-1: Manufacturer: syz [ 281.415694][ T24] usb 1-1: SerialNumber: syz [ 281.448294][ T24] usb 1-1: config 0 descriptor?? [ 281.505638][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 281.560116][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 281.580639][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 281.631263][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 281.670170][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 281.760061][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 281.791516][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 281.827444][ T24] usb 1-1: media controller created [ 281.953846][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.069661][ T24] usb 1-1: selecting invalid altsetting 3 [ 282.092445][ T24] ttusb2: set interface to alts=3 failed [ 282.101323][ T7379] usb 4-1: USB disconnect, device number 14 [ 282.185821][ T7379] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 282.301560][ T24] DVB: Unable to find symbol tda10086_attach() [ 282.326378][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 282.362261][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 282.392765][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 282.434665][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 282.451502][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 282.466859][ T5697] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 282.499583][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 282.539000][ T24] usb 1-1: USB disconnect, device number 14 [ 282.645095][ T5697] usb 7-1: Using ep0 maxpacket: 8 [ 282.680166][ T5697] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 282.724791][ T5697] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.755053][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 282.788559][ T5697] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 282.821438][ T5697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.854386][ T5697] usb 7-1: Product: syz [ 282.869344][ T5697] usb 7-1: Manufacturer: syz [ 282.887797][ T5697] usb 7-1: SerialNumber: syz [ 282.911111][ T5697] usb 7-1: config 0 descriptor?? [ 282.965448][ T5626] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 283.155385][ T5626] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 283.155448][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 283.209581][ T5626] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 283.218357][ T9891] ALSA: mixer_oss: invalid OSS volume '' [ 283.244736][ T5626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.282422][ T5626] usb 4-1: Product: syz [ 283.296246][ T5626] usb 4-1: Manufacturer: syz [ 283.301090][ T5626] usb 4-1: SerialNumber: syz [ 283.351866][ T24] usb 1-1: config 0 has no interfaces? [ 283.368768][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.454978][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.476842][ T24] usb 1-1: config 0 descriptor?? [ 283.540750][ T5626] usb 4-1: selecting invalid altsetting 1 [ 283.656089][ T1225] usb 7-1: USB disconnect, device number 21 [ 283.743866][ T5626] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 283.743977][ T5626] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 283.808909][ T5626] usb 1-1: USB disconnect, device number 15 [ 283.958693][ T1225] usb 4-1: USB disconnect, device number 15 [ 284.755022][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 284.935029][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 284.970695][ T24] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 285.013981][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.049486][ T24] usb 3-1: Product: syz [ 285.060386][ T24] usb 3-1: Manufacturer: syz [ 285.074643][ T24] usb 3-1: SerialNumber: syz [ 285.096932][ T24] usb 3-1: config 0 descriptor?? [ 285.140549][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 285.183165][ T9945] ALSA: mixer_oss: invalid OSS volume '' [ 285.192614][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 285.214642][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 285.255365][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 285.279005][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 285.356579][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.403697][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 285.445105][ T24] usb 3-1: media controller created [ 285.499924][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.562646][ T24] usb 3-1: selecting invalid altsetting 3 [ 285.583755][ T24] ttusb2: set interface to alts=3 failed [ 285.782820][ T9962] dummy0: entered promiscuous mode [ 285.806955][ T9962] erspan0: entered promiscuous mode [ 285.812429][ T24] DVB: Unable to find symbol tda10086_attach() [ 285.829570][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 285.847877][ T9962] hsr1: entered allmulticast mode [ 285.859776][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 285.867979][ T9962] dummy0: entered allmulticast mode [ 285.890580][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 285.901228][ T9962] erspan0: entered allmulticast mode [ 285.941739][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 285.948174][ T5697] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 285.979306][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 286.027267][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 286.081563][ T24] usb 3-1: USB disconnect, device number 16 [ 286.118922][ T5697] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 286.167332][ T5697] usb 7-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 286.204677][ T5697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.235736][ T5697] usb 7-1: Product: syz [ 286.257640][ T5697] usb 7-1: Manufacturer: syz [ 286.266698][ T5697] usb 7-1: SerialNumber: syz [ 286.271554][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 286.386136][ T5626] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 286.502013][ T5697] usb 7-1: selecting invalid altsetting 1 [ 286.578936][ T5626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.619448][ T5626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.663115][ T5626] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 286.691159][ T5626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.705826][ T5697] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 286.705947][ T5697] dvb_usb_lmedm04 7-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 286.729453][ T5626] usb 4-1: config 0 descriptor?? [ 286.729753][ T9989] ALSA: mixer_oss: invalid OSS volume '' [ 286.920313][ T24] usb 7-1: USB disconnect, device number 22 [ 287.183992][ T5626] cp2112 0003:10C4:EA90.000F: item fetching failed at offset 5/7 [ 287.209000][ T5626] cp2112 0003:10C4:EA90.000F: parse failed [ 287.227151][ T5626] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -22 [ 288.035272][ T5697] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 288.206176][ T5697] usb 7-1: Using ep0 maxpacket: 32 [ 288.227421][ T5697] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 288.257305][ T5697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.274997][ T5697] usb 7-1: Product: syz [ 288.284878][ T5697] usb 7-1: Manufacturer: syz [ 288.291554][ T5697] usb 7-1: SerialNumber: syz [ 288.306963][ T5697] usb 7-1: config 0 descriptor?? [ 288.338832][ T5697] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 288.364322][ T5697] dvb-usb: bulk message failed: -22 (4/0) [ 288.384754][ T5697] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 288.428865][ T5697] dvb-usb: bulk message failed: -22 (5/0) [ 288.446307][ T5697] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 288.482226][ T5697] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 288.523365][ T5697] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 288.554328][ T5697] usb 7-1: media controller created [ 288.632691][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.712494][ T5697] usb 7-1: selecting invalid altsetting 3 [ 288.737142][ T5697] ttusb2: set interface to alts=3 failed [ 288.841527][T10048] ALSA: mixer_oss: invalid OSS volume '' [ 288.890418][ T5697] DVB: Unable to find symbol tda10086_attach() [ 288.918034][ T5697] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 288.943051][ T5697] dvb-usb: bulk message failed: -22 (4/0) [ 288.958180][ T5697] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 288.993560][ T5697] dvb-usb: bulk message failed: -22 (5/0) [ 289.021497][ T5697] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 289.076862][ T5697] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 289.180474][ T10] usb 4-1: USB disconnect, device number 16 [ 289.185718][ T5697] usb 7-1: USB disconnect, device number 23 [ 289.246465][T10056] tipc: Started in network mode [ 289.270996][T10056] tipc: Node identity 4, cluster identity 4711 [ 289.313195][T10056] tipc: Node number set to 4 [ 289.424535][ T5697] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 289.687011][ T7379] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 289.856580][ T7379] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 289.890510][ T7379] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 289.928235][ T7379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.965703][ T7379] usb 4-1: Product: syz [ 289.977997][ T7379] usb 4-1: Manufacturer: syz [ 289.994430][ T7379] usb 4-1: SerialNumber: syz [ 290.094999][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 290.169744][T10078] gretap0: entered promiscuous mode [ 290.221240][T10078] macvlan2: entered allmulticast mode [ 290.250796][ T7379] usb 4-1: selecting invalid altsetting 1 [ 290.254775][T10078] gretap0: entered allmulticast mode [ 290.303019][T10078] batman_adv: batadv0: Adding interface: macvlan2 [ 290.329348][T10078] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.426856][T10078] batman_adv: batadv0: Interface activated: macvlan2 [ 290.466105][ T7379] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 290.466213][ T7379] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 290.539795][ T7379] usb 4-1: USB disconnect, device number 17 [ 290.575919][ T5697] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 290.747383][ T5697] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 290.781347][ T5697] usb 3-1: config 0 interface 0 has no altsetting 0 [ 290.811764][ T5697] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 290.836220][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 290.862793][ T5697] usb 3-1: Product: syz [ 290.876819][ T5697] usb 3-1: Manufacturer: syz [ 290.890625][ T5697] usb 3-1: SerialNumber: syz [ 290.913447][ T5697] usb 3-1: config 0 descriptor?? [ 290.945915][ T5697] usb 3-1: selecting invalid altsetting 0 [ 291.005141][ T7379] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 291.166722][ T5697] usb 3-1: USB disconnect, device number 17 [ 291.175805][ T7379] usb 4-1: Using ep0 maxpacket: 8 [ 291.199698][ T7379] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.242750][ T7379] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 291.281310][ T7379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 291.319061][ T7379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 291.353910][ T7379] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.371298][ T7379] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 291.389173][ T7379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 291.411915][ T7379] usb 4-1: Product: syz [ 291.417406][ T7379] usb 4-1: Manufacturer: syz [ 291.429404][ T7379] usb 4-1: SerialNumber: syz [ 291.456324][ T7379] usb 4-1: config 0 descriptor?? [ 291.690122][ T7379] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 291.712513][ T7379] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 291.890670][ T7379] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 291.936593][ T7379] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 291.961224][ T7379] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 292.034642][ T7379] usb 4-1: USB disconnect, device number 18 [ 292.123730][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 292.274381][T10115] tipc: Started in network mode [ 292.288294][T10115] tipc: Node identity 4, cluster identity 4711 [ 292.305443][T10115] tipc: Node number set to 4 [ 292.672744][T10128] syzkaller1: entered promiscuous mode [ 292.685218][T10128] syzkaller1: entered allmulticast mode [ 292.723294][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 292.825061][ T5697] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 293.002401][ T5697] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.041656][ T5697] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 293.085490][ T5697] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.136130][ T5697] usb 7-1: config 0 descriptor?? [ 293.275100][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 293.305047][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 293.320197][ T5290] 8021q: adding VLAN 0 to HW filter on device eth24 [ 293.357223][ T5697] usbhid 7-1:0.0: can't add hid device: -71 [ 293.371156][ T5697] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 293.398935][ T5697] usb 7-1: USB disconnect, device number 24 [ 293.441130][ T10] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 293.467550][ T10] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 293.479739][ T24] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 293.484244][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.498155][ T10] usb 1-1: Product: syz [ 293.502432][ T10] usb 1-1: Manufacturer: syz [ 293.507178][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.508531][ T10] usb 1-1: SerialNumber: syz [ 293.535033][ T24] usb 3-1: Product: syz [ 293.539636][ T24] usb 3-1: Manufacturer: syz [ 293.552903][ T24] usb 3-1: SerialNumber: syz [ 293.569634][ T24] usb 3-1: config 0 descriptor?? [ 293.599111][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 293.643500][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 293.665630][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 293.685424][ T24] usb 3-1: media controller created [ 293.728187][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.781035][ T10] usb 1-1: selecting invalid altsetting 1 [ 293.800981][T10145] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 293.859960][ T24] DVB: Unable to find symbol mt352_attach() [ 293.951613][ T24] DVB: Unable to find symbol nxt6000_attach() [ 293.969930][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 294.000198][ T10] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 294.000312][ T10] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 294.020606][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 294.065640][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 294.076788][ T10] usb 1-1: USB disconnect, device number 16 [ 294.105390][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 294.160259][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 294.192662][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 294.228709][ T24] usb 3-1: USB disconnect, device number 18 [ 294.406268][T10175] tipc: Started in network mode [ 294.446608][T10175] tipc: Node identity 4, cluster identity 4711 [ 294.489461][T10175] tipc: Node number set to 4 [ 294.510368][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 294.584433][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 294.654788][ T5290] 8021q: adding VLAN 0 to HW filter on device eth25 [ 294.725049][ T5626] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 294.917762][ T5626] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 294.943369][ T5626] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 294.974868][ T5626] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.989084][ T5626] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.027885][ T5626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.111931][ T5626] usb 1-1: config 0 descriptor?? [ 295.157757][ T5626] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 295.208140][T10196] capability: warning: `syz.2.878' uses 32-bit capabilities (legacy support in use) [ 295.220037][T10196] program syz.2.878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.405912][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 295.586411][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 295.622680][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.660087][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 295.684628][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.738399][ T10] usb 7-1: config 0 descriptor?? [ 295.769802][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 295.855316][ T5720] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 296.036684][ T5720] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 296.045341][ T5626] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 296.067871][ T5720] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 296.094993][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.121901][ T5720] usb 3-1: Product: syz [ 296.135177][ T5720] usb 3-1: Manufacturer: syz [ 296.148777][ T5720] usb 3-1: SerialNumber: syz [ 296.217631][ T5626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.252789][ T5626] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 296.270668][ T5626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.288133][ T5626] usb 2-1: config 0 descriptor?? [ 296.398367][ T5720] usb 3-1: selecting invalid altsetting 1 [ 296.509647][ T5626] usbhid 2-1:0.0: can't add hid device: -71 [ 296.531232][ T5626] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 296.564650][ T5626] usb 2-1: USB disconnect, device number 20 [ 296.578418][ T10] gspca_vc032x: reg_w err -71 [ 296.595179][ T10] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 296.611492][ T5720] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 296.611608][ T5720] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 296.632628][ T10] usb 7-1: USB disconnect, device number 25 [ 296.837698][ T5720] usb 3-1: USB disconnect, device number 19 [ 297.442080][ T5626] usb 1-1: USB disconnect, device number 17 [ 297.789019][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 297.854012][T10267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.892'. [ 297.954042][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 297.966701][ T5720] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 297.984377][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.016085][ T10] usb 3-1: Product: syz [ 298.027409][ T10] usb 3-1: Manufacturer: syz [ 298.035789][ T5626] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 298.046722][ T10] usb 3-1: SerialNumber: syz [ 298.063653][ T10] usb 3-1: config 0 descriptor?? [ 298.175450][ T5720] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 298.195141][ T5720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.206714][ T5626] usb 1-1: Using ep0 maxpacket: 32 [ 298.212140][ T5720] usb 7-1: Product: syz [ 298.226286][ T5720] usb 7-1: Manufacturer: syz [ 298.243493][ T5720] usb 7-1: SerialNumber: syz [ 298.249327][ T5626] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 298.273737][ T5626] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 298.297708][ T5720] usb 7-1: config 0 descriptor?? [ 298.314513][ T5626] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.350808][ T5720] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 298.360814][ T5626] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 298.398341][ T5626] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 298.413587][ T5626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.420200][ T5720] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.427249][ T10] usb 3-1: USB disconnect, device number 20 [ 298.441630][ T5626] usb 1-1: Product: syz [ 298.459870][ T5626] usb 1-1: Manufacturer: syz [ 298.461230][ T5720] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 298.492846][ T5626] usb 1-1: SerialNumber: syz [ 298.508508][ T5720] usb 7-1: media controller created [ 298.537916][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 298.562155][T10261] dvb-usb: bulk message failed: -22 (7/0) [ 298.585220][ T5626] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input13 [ 298.650015][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.715374][ T5633] Bluetooth: hci0: command 0x0406 tx timeout [ 298.755115][ T5626] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 298.778053][ T5626] (id 0x00) [ 298.804728][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.962295][ T5626] rc_core: IR keymap rc-imon-pad not found [ 299.000509][ T5626] Registered IR keymap rc-empty [ 299.031393][ T5626] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 299.053104][ T5626] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 299.063774][ T5720] DVB: Unable to find symbol mt352_attach() [ 299.085345][ T5626] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 299.134971][ T5626] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input14 [ 299.185090][ T1225] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 299.212619][ T5626] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:18> initialized [ 299.240415][ T5720] DVB: Unable to find symbol nxt6000_attach() [ 299.264244][ T5720] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 299.315642][ T5720] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input15 [ 299.377568][ T1225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.421573][ T5720] dvb-usb: schedule remote query interval to 1000 msecs. [ 299.433039][ T1225] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 299.474423][ T5720] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 299.486126][ T1225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.509983][ T5720] dvb-usb: bulk message failed: -22 (7/0) [ 299.524371][ T5720] dvb-usb: bulk message failed: -22 (7/0) [ 299.555225][ T5626] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 299.584372][ T1225] usb 4-1: config 0 descriptor?? [ 299.586052][ T5720] usb 7-1: USB disconnect, device number 26 [ 299.727987][ T5626] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 299.784081][ T5626] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 299.825184][ T5720] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 299.862344][ T5626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.874175][ T1225] usbhid 4-1:0.0: can't add hid device: -71 [ 299.891302][ T1225] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 299.906209][ T5626] usb 3-1: Product: syz [ 299.911710][T10299] imon:send_packet: packet tx failed (-71) [ 299.918295][ T5713] usb 1-1: USB disconnect, device number 18 [ 299.942447][ T5626] usb 3-1: Manufacturer: syz [ 299.955504][T10299] imon:vfd_write: send packet #0 failed [ 299.964303][ T1225] usb 4-1: USB disconnect, device number 19 [ 299.973156][ T5626] usb 3-1: SerialNumber: syz [ 300.067965][T10287] imon:display_open: could not find interface for minor 0 [ 300.235499][ T5720] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 300.253762][ T5626] usb 3-1: selecting invalid altsetting 1 [ 300.405013][ T5720] usb 7-1: Using ep0 maxpacket: 8 [ 300.421547][ T5720] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.458063][ T5720] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.470765][ T5626] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 300.470880][ T5626] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 300.501213][ T5720] usb 7-1: config 0 interface 0 has no altsetting 0 [ 300.532305][ T5720] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 300.572618][ T5720] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.640828][ T5720] usb 7-1: config 0 descriptor?? [ 300.685192][ T24] usb 3-1: USB disconnect, device number 21 [ 301.046361][ T5626] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 301.152740][ T5720] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 301.163526][ T5720] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 301.190071][ T5720] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 301.209072][ T5720] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 301.227990][ T5626] usb 1-1: Using ep0 maxpacket: 16 [ 301.231465][ T5720] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 301.262684][ T5720] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 301.264103][ T5626] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 301.338660][ T5626] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 301.353637][ T5626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 301.369193][ T5626] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 301.380366][ T5626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.407988][ T5626] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.438934][ T5626] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.478956][ T5720] usb 7-1: USB disconnect, device number 27 [ 301.484347][ T5626] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 301.498673][ T5626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.510558][ T5626] usb 1-1: Product: syz [ 301.518703][ T5626] usb 1-1: Manufacturer: syz [ 301.531550][ T5626] usb 1-1: SerialNumber: syz [ 301.575131][ T5713] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 301.584864][ T5626] usb 1-1: config 0 descriptor?? [ 301.599054][T10317] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 301.621909][ T5626] iuu_phoenix 1-1:0.0: iuu_phoenix converter detected [ 301.652018][ T5626] usb 1-1: iuu_phoenix converter now attached to ttyUSB0 [ 301.735575][ T5713] usb 4-1: device descriptor read/64, error -71 [ 301.837736][ T5626] usb 1-1: USB disconnect, device number 19 [ 301.877415][ T5626] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 301.895872][ T5626] iuu_phoenix 1-1:0.0: device disconnected [ 302.003428][ T5713] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 302.145190][ T5713] usb 4-1: device descriptor read/64, error -71 [ 302.267736][ T5713] usb usb4-port1: attempt power cycle [ 302.645434][ T5713] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 302.699418][ T5713] usb 4-1: device descriptor read/8, error -71 [ 302.927054][ T5626] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 302.957445][ T5713] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 303.008378][ T5713] usb 4-1: device descriptor read/8, error -71 [ 303.134016][ T5713] usb usb4-port1: unable to enumerate USB device [ 303.145040][ T5626] usb 2-1: Using ep0 maxpacket: 32 [ 303.168868][ T5626] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 303.197452][ T5626] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 303.220683][ T5626] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.232122][ T5626] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 303.252449][ T5626] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 303.272162][ T5626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.291233][ T5626] usb 2-1: Product: syz [ 303.301028][ T5626] usb 2-1: Manufacturer: syz [ 303.315185][ T5626] usb 2-1: SerialNumber: syz [ 303.341214][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 303.356785][ T5626] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input16 [ 303.455085][ T5713] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 303.565190][ T5626] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 303.581383][ T5626] (id 0x00) [ 303.630622][ T5713] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 303.651870][ T5713] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 303.674666][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.695007][ T5626] rc_core: IR keymap rc-imon-pad not found [ 303.701975][ T5713] usb 3-1: Product: syz [ 303.710281][ T5626] Registered IR keymap rc-empty [ 303.717375][ T5713] usb 3-1: Manufacturer: syz [ 303.727194][ T5626] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 303.738193][ T5713] usb 3-1: SerialNumber: syz [ 303.745707][ T5626] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 303.797478][ T5626] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 303.858056][ T5626] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input17 [ 303.913556][ T5626] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:21> initialized [ 303.967805][ T5713] usb 3-1: selecting invalid altsetting 1 [ 304.174151][ T5713] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 304.174263][ T5713] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 304.409751][ T10] usb 3-1: USB disconnect, device number 22 [ 304.586426][ T24] usb 2-1: USB disconnect, device number 21 [ 304.593991][T10408] imon:send_packet: packet tx failed (-71) [ 304.627203][T10408] imon:vfd_write: send packet #0 failed [ 304.745077][ T5720] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 304.916857][ T5720] usb 7-1: device descriptor read/64, error -71 [ 305.105132][ T5697] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 305.195403][ T5720] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 305.276038][ T5697] usb 4-1: device descriptor read/64, error -71 [ 305.345577][ T5720] usb 7-1: device descriptor read/64, error -71 [ 305.479290][ T5720] usb usb7-port1: attempt power cycle [ 305.545403][ T5697] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 305.695536][ T5697] usb 4-1: device descriptor read/64, error -71 [ 305.825443][ T5697] usb usb4-port1: attempt power cycle [ 305.859174][ T5720] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 305.908259][ T5720] usb 7-1: device descriptor read/8, error -71 [ 305.995745][ T7378] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 306.145049][ T7378] usb 3-1: device descriptor read/64, error -71 [ 306.165825][ T5720] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 306.187036][ T5697] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 306.226268][ T5697] usb 4-1: device descriptor read/8, error -71 [ 306.235075][ T5720] usb 7-1: device descriptor read/8, error -71 [ 306.346577][ T5290] 8021q: adding VLAN 0 to HW filter on device eth26 [ 306.375351][ T5720] usb usb7-port1: unable to enumerate USB device [ 306.415106][ T7378] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 306.495032][ T5697] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 306.535717][ T5697] usb 4-1: device descriptor read/8, error -71 [ 306.556054][ T5713] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 306.565183][ T7378] usb 3-1: device descriptor read/64, error -71 [ 306.665948][ T5697] usb usb4-port1: unable to enumerate USB device [ 306.685302][ T7378] usb usb3-port1: attempt power cycle [ 306.728764][ T5713] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 306.763353][ T5713] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 306.783135][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.826732][ T5713] usb 1-1: Product: syz [ 306.851340][ T5713] usb 1-1: Manufacturer: syz [ 306.866500][ T5713] usb 1-1: SerialNumber: syz [ 307.045061][ T7378] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 307.086093][ T7378] usb 3-1: device descriptor read/8, error -71 [ 307.139514][ T5713] usb 1-1: selecting invalid altsetting 1 [ 307.176429][ T5713] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 307.176541][ T5713] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 307.280114][ T5713] usb 1-1: USB disconnect, device number 20 [ 307.345046][ T7378] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 307.398038][ T7378] usb 3-1: device descriptor read/8, error -71 [ 307.455708][ T5720] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 307.526487][ T7378] usb usb3-port1: unable to enumerate USB device [ 307.645747][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 307.664780][ T5720] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 307.710127][ T5720] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 307.753447][ T5720] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.805407][ T5720] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 307.852124][ T5720] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 307.898950][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.929448][ T5720] usb 2-1: Product: syz [ 307.947029][ T5720] usb 2-1: Manufacturer: syz [ 307.969833][ T5720] usb 2-1: SerialNumber: syz [ 308.040256][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 308.079705][ T5720] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input18 [ 308.208322][ T5290] 8021q: adding VLAN 0 to HW filter on device eth27 [ 308.275547][ T5720] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 308.319947][ T5720] (id 0x00) [ 308.496151][ T5720] rc_core: IR keymap rc-imon-pad not found [ 308.532794][ T5720] Registered IR keymap rc-empty [ 308.562089][ T5720] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 308.613036][ T5720] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 308.676293][ T5720] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 308.715166][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.6.948'. [ 308.761418][ T5720] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input19 [ 308.853581][ T5720] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:22> initialized [ 308.961818][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 309.045041][ T7378] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 309.085038][ T5713] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 309.186079][ T7378] usb 1-1: device descriptor read/64, error -71 [ 309.315307][ T5713] usb 7-1: Using ep0 maxpacket: 8 [ 309.389538][T10512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.417891][T10476] imon:send_packet: packet tx failed (-71) [ 309.418667][ T5626] usb 2-1: USB disconnect, device number 22 [ 309.446678][T10512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.465218][ T7378] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 309.473837][T10476] imon:vfd_write: send packet #0 failed [ 309.498269][ T5713] usb 7-1: unable to get BOS descriptor or descriptor too short [ 309.542262][ T5713] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 309.575936][ T5713] usb 7-1: can't read configurations, error -71 [ 309.638533][ T7378] usb 1-1: device descriptor read/64, error -71 [ 309.785651][ T7378] usb usb1-port1: attempt power cycle [ 310.146251][ T7378] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 310.208478][ T7378] usb 1-1: device descriptor read/8, error -71 [ 310.465029][ T7378] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 310.525656][ T7378] usb 1-1: device descriptor read/8, error -71 [ 310.532907][T10537] ------------[ cut here ]------------ [ 310.538881][T10537] !RB_EMPTY_ROOT(&prime_fpriv->dmabufs) [ 310.538908][T10537] WARNING: drivers/gpu/drm/drm_prime.c:224 at drm_prime_destroy_file_private+0x4b/0x60, CPU#1: syz.2.955/10537 [ 310.558147][T10537] Modules linked in: [ 310.562790][T10537] CPU: 1 UID: 0 PID: 10537 Comm: syz.2.955 Not tainted syzkaller #0 PREEMPT(full) [ 310.572588][T10537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.583194][T10537] RIP: 0010:drm_prime_destroy_file_private+0x4b/0x60 [ 310.590733][T10537] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 2d ca c6 fc 48 83 3b 00 75 0c e8 82 8c 5b fc 5b e9 4c 83 41 06 cc e8 76 8c 5b fc 90 <0f> 0b 90 5b e9 3c 83 41 06 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 310.610923][T10537] RSP: 0018:ffffc900033afc00 EFLAGS: 00010293 [ 310.618274][T10537] RAX: ffffffff856a355a RBX: ffff88806c2143b0 RCX: ffff888028a00000 [ 310.626939][T10537] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88806c214328 [ 310.635491][T10537] RBP: ffff88806c214278 R08: ffffc900033afb87 R09: 1ffff92000675f70 [ 310.643616][T10537] R10: dffffc0000000000 R11: fffff52000675f71 R12: dffffc0000000000 [ 310.651860][T10537] R13: dead000000000100 R14: 0000000000000000 R15: ffff88806c214288 [ 310.659900][T10537] FS: 0000000000000000(0000) GS:ffff88812538d000(0063) knlGS:0000000056e39480 [ 310.668899][T10537] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 310.675551][T10537] CR2: 000056150fac0008 CR3: 0000000079a70000 CR4: 00000000003526f0 [ 310.683638][T10537] Call Trace: [ 310.686985][T10537] [ 310.689967][T10537] drm_file_free+0x7f1/0xa00 [ 310.694582][T10537] drm_release+0x2de/0x3f0 [ 310.699099][T10537] ? __pfx_drm_release+0x10/0x10 [ 310.704063][T10537] __fput+0x44f/0xa60 [ 310.708150][T10537] task_work_run+0x1d9/0x270 [ 310.712792][T10537] ? __pfx_task_work_run+0x10/0x10 [ 310.718150][T10537] exit_to_user_mode_loop+0xf3/0x4d0 [ 310.723480][T10537] ? rcu_is_watching+0x15/0xb0 [ 310.728328][T10537] ? do_fast_syscall_32+0x33/0x70 [ 310.733390][T10537] __do_fast_syscall_32+0x446/0x6e0 [ 310.738678][T10537] ? do_fast_syscall_32+0x33/0x70 [ 310.743755][T10537] ? lockdep_hardirqs_on+0x7a/0x110 [ 310.749035][T10537] ? asm_int80_emulation+0x1a/0x20 [ 310.754251][T10537] ? do_int80_emulation+0x286/0x530 [ 310.759557][T10537] ? trace_irq_disable+0x3b/0x140 [ 310.764617][T10537] do_fast_syscall_32+0x33/0x70 [ 310.769546][T10537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.775929][T10537] RIP: 0023:0xf7fa701c [ 310.780028][T10537] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 310.799971][T10537] RSP: 002b:00000000f758fb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 310.808508][T10537] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 310.816639][T10537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.824631][T10537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.832823][T10537] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 310.840971][T10537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.849123][T10537] [ 310.852158][T10537] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 310.859450][T10537] CPU: 1 UID: 0 PID: 10537 Comm: syz.2.955 Not tainted syzkaller #0 PREEMPT(full) [ 310.868752][T10537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.878862][T10537] Call Trace: [ 310.882150][T10537] [ 310.885088][T10537] vpanic+0x56c/0xa60 [ 310.889085][T10537] ? __pfx__printk+0x10/0x10 [ 310.893692][T10537] ? __pfx_vpanic+0x10/0x10 [ 310.898429][T10537] ? is_bpf_text_address+0x292/0x2b0 [ 310.903730][T10537] ? is_bpf_text_address+0x26/0x2b0 [ 310.909047][T10537] panic+0xc5/0xd0 [ 310.912876][T10537] ? __pfx_panic+0x10/0x10 [ 310.917330][T10537] __warn+0x315/0x4c0 [ 310.921327][T10537] ? drm_prime_destroy_file_private+0x4b/0x60 [ 310.927413][T10537] ? drm_prime_destroy_file_private+0x4b/0x60 [ 310.933502][T10537] __report_bug+0x29a/0x540 [ 310.938040][T10537] ? drm_prime_destroy_file_private+0x4b/0x60 [ 310.944126][T10537] ? __pfx___report_bug+0x10/0x10 [ 310.949182][T10537] ? drm_file_free+0x78a/0xa00 [ 310.953963][T10537] ? drm_prime_destroy_file_private+0x4b/0x60 [ 310.960134][T10537] report_bug+0x16a/0x220 [ 310.964484][T10537] ? drm_prime_destroy_file_private+0x4b/0x60 [ 310.970567][T10537] ? drm_prime_destroy_file_private+0x4d/0x60 [ 310.976646][T10537] handle_bug+0x9c/0x200 [ 310.980883][T10537] exc_invalid_op+0x1a/0x50 [ 310.985411][T10537] asm_exc_invalid_op+0x1a/0x20 [ 310.990249][T10537] RIP: 0010:drm_prime_destroy_file_private+0x4b/0x60 [ 310.996921][T10537] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 2d ca c6 fc 48 83 3b 00 75 0c e8 82 8c 5b fc 5b e9 4c 83 41 06 cc e8 76 8c 5b fc 90 <0f> 0b 90 5b e9 3c 83 41 06 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 311.016604][T10537] RSP: 0018:ffffc900033afc00 EFLAGS: 00010293 [ 311.022666][T10537] RAX: ffffffff856a355a RBX: ffff88806c2143b0 RCX: ffff888028a00000 [ 311.030624][T10537] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88806c214328 [ 311.038585][T10537] RBP: ffff88806c214278 R08: ffffc900033afb87 R09: 1ffff92000675f70 [ 311.046547][T10537] R10: dffffc0000000000 R11: fffff52000675f71 R12: dffffc0000000000 [ 311.054518][T10537] R13: dead000000000100 R14: 0000000000000000 R15: ffff88806c214288 [ 311.062488][T10537] ? drm_prime_destroy_file_private+0x4a/0x60 [ 311.068563][T10537] drm_file_free+0x7f1/0xa00 [ 311.073163][T10537] drm_release+0x2de/0x3f0 [ 311.077573][T10537] ? __pfx_drm_release+0x10/0x10 [ 311.082502][T10537] __fput+0x44f/0xa60 [ 311.086485][T10537] task_work_run+0x1d9/0x270 [ 311.091073][T10537] ? __pfx_task_work_run+0x10/0x10 [ 311.096183][T10537] exit_to_user_mode_loop+0xf3/0x4d0 [ 311.101456][T10537] ? rcu_is_watching+0x15/0xb0 [ 311.106214][T10537] ? do_fast_syscall_32+0x33/0x70 [ 311.111238][T10537] __do_fast_syscall_32+0x446/0x6e0 [ 311.116443][T10537] ? do_fast_syscall_32+0x33/0x70 [ 311.121464][T10537] ? lockdep_hardirqs_on+0x7a/0x110 [ 311.126657][T10537] ? asm_int80_emulation+0x1a/0x20 [ 311.131756][T10537] ? do_int80_emulation+0x286/0x530 [ 311.136949][T10537] ? trace_irq_disable+0x3b/0x140 [ 311.141979][T10537] do_fast_syscall_32+0x33/0x70 [ 311.146829][T10537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.153179][T10537] RIP: 0023:0xf7fa701c [ 311.157243][T10537] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 311.176838][T10537] RSP: 002b:00000000f758fb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 311.185309][T10537] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 311.193274][T10537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.201244][T10537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.209820][T10537] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.217785][T10537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.226108][T10537] [ 311.229509][T10537] Kernel Offset: disabled [ 311.233823][T10537] Rebooting in 86400 seconds..