last executing test programs: 6m52.780559923s ago: executing program 32 (id=18): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0x10000c, 0x9, 0x600000}, 0x10, 0x0, r0, 0x0, &(0x7f0000000740), 0x0, 0x10, 0xff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f00000000c0)=0x18) migrate_pages(0x0, 0x9, &(0x7f0000000340)=0x3, &(0x7f0000000380)=0x102) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x60001, 0x0) gettid() mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x1000000, 0x0) 6m48.367855467s ago: executing program 33 (id=24): mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_vhci(0x0, 0x7) socket(0x1, 0x2, 0x100) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000100fcff06ee04000000010000000400488014000180100010800c000b8008001e80040001800c00"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) setns(0xffffffffffffffff, 0x24020000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x58) 6m42.595976752s ago: executing program 34 (id=30): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x49800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008890) listen(0xffffffffffffffff, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x3) 6m25.622136808s ago: executing program 35 (id=43): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x3ea, 0xffffffff, 0x40}) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file2\x00', 0x2000, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2000, 0x103) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 6m16.590592613s ago: executing program 5 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 6m14.397179903s ago: executing program 5 (id=60): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0xfffffffd], [0x1], [0x0, 0x0, 0x0, 0x3]}) 6m12.848337958s ago: executing program 5 (id=61): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3], 0x24}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 6m11.500021743s ago: executing program 5 (id=62): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xb}, {0x2, 0xb}}}, 0x24}}, 0x8000) 6m9.521021247s ago: executing program 5 (id=65): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) 6m7.111177601s ago: executing program 5 (id=67): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="370000001000010000000000000000000000000a78000000060a0b04000000000000000002000000500004804c00018011000100666c6f775f6f66666c6f616400000000340002800900010073797a30000000000900010073797a30000000000900010073797a30000000000900010073797a32000000000900010073797a300000000008000a7f61d68f0acb6d69001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x4e21, 0x18, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0xfffffffc}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 5m51.497794032s ago: executing program 36 (id=67): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="370000001000010000000000000000000000000a78000000060a0b04000000000000000002000000500004804c00018011000100666c6f775f6f66666c6f616400000000340002800900010073797a30000000000900010073797a30000000000900010073797a30000000000900010073797a32000000000900010073797a300000000008000a7f61d68f0acb6d69001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x4e21, 0x18, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0xfffffffc}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 5m41.471191298s ago: executing program 37 (id=44): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000a80)={{0x0, 0x5, 0x0, 0x7, 0xfe54, 0x0, 0x200, 0x7f, 0x3, 0x9, 0x9, 0x9, 0x7, 0xa4, 0x8}}) close_range(r0, 0xffffffffffffffff, 0x0) 5m5.505331855s ago: executing program 38 (id=118): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x31, 0x2, 0x3, 0x7f, 0x3f84, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3m50.435229734s ago: executing program 9 (id=78): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000500)={'comedi_test\x00', [0xa, 0x7fe, 0x1, 0x0, 0x0, 0x80000000, 0x8, 0xb, 0xa, 0xfc, 0x2, 0x8, 0xa, 0x4, 0x3, 0x80, 0x1, 0x1a449, 0x3, 0x40000007, 0x100, 0x2, 0xf27, 0x6, 0x2, 0x0, 0x5, 0x7, 0x4, 0x10000, 0x8]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = timerfd_create(0x0, 0x80000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0), 0x4) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000200)=0x7fffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101c0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0xffffffd5, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0xa65, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x401c000, 0x3fe, 0x403, 0x200006, 0x3, 0x9, 0x5, 0x7, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x9, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x6, 0x8, 0x86, 0x3, 0x303c, 0x6, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x7f, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$COMEDI_SETRSUBD(0xffffffffffffffff, 0x6410) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m41.215419262s ago: executing program 1 (id=173): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, 0x0, 0x0) 3m39.755136839s ago: executing program 1 (id=174): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x66a42, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) open(&(0x7f00000001c0)='./file0\x00', 0x48afd, 0x180) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x103000) open$dir(&(0x7f0000000080)='./file0\x00', 0x28080, 0x108) syz_io_uring_setup(0x313c, &(0x7f0000000000)={0x0, 0x4ff, 0x3600, 0x1, 0x372}, 0x0, 0x0) epoll_create(0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3m38.387781316s ago: executing program 1 (id=175): io_uring_setup(0x539c, &(0x7f0000000280)={0x0, 0x93d2, 0x2, 0x45, 0x227}) socket(0x15, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3m36.797907185s ago: executing program 1 (id=176): ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0) 3m35.691065475s ago: executing program 1 (id=177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3m34.930202598s ago: executing program 39 (id=78): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000500)={'comedi_test\x00', [0xa, 0x7fe, 0x1, 0x0, 0x0, 0x80000000, 0x8, 0xb, 0xa, 0xfc, 0x2, 0x8, 0xa, 0x4, 0x3, 0x80, 0x1, 0x1a449, 0x3, 0x40000007, 0x100, 0x2, 0xf27, 0x6, 0x2, 0x0, 0x5, 0x7, 0x4, 0x10000, 0x8]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = timerfd_create(0x0, 0x80000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0), 0x4) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000200)=0x7fffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101c0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0xffffffd5, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0xa65, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x401c000, 0x3fe, 0x403, 0x200006, 0x3, 0x9, 0x5, 0x7, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x9, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x6, 0x8, 0x86, 0x3, 0x303c, 0x6, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x7f, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$COMEDI_SETRSUBD(0xffffffffffffffff, 0x6410) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m34.822229381s ago: executing program 1 (id=180): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0x4000e7a9, 0x80, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x200ffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2161, 0x1, {0x2}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x0, 0x0}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m22.152713881s ago: executing program 6 (id=189): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x3, 0x1, 0x80}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 3m19.180006417s ago: executing program 40 (id=180): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0x4000e7a9, 0x80, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x200ffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2161, 0x1, {0x2}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x0, 0x0}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m18.618041149s ago: executing program 6 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x20000000, 0x0, 0x0, {0x40, 0x4, 0x1800000000, 0x6c1, 0x1000, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0x1440348, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f00000000c0)) 3m18.138206664s ago: executing program 6 (id=194): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffe) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r3, 0x47f6, 0x0, 0x700000000000000, 0x0, 0x0) 3m15.959351024s ago: executing program 6 (id=197): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001a40)=ANY=[@ANYBLOB="00001000ff"], 0x0) 3m14.883106416s ago: executing program 6 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3m12.916793657s ago: executing program 6 (id=200): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000440)=""/200, 0x200000, 0x1000, 0x0, 0x3}, 0x20) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x10}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c00"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "bdab7e9d"}, @main=@item_4={0x3, 0x0, 0xa, "582a6eb3"}]}}, 0x0}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m57.124951067s ago: executing program 41 (id=200): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000440)=""/200, 0x200000, 0x1000, 0x0, 0x3}, 0x20) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x10}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c00"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "bdab7e9d"}, @main=@item_4={0x3, 0x0, 0xa, "582a6eb3"}]}}, 0x0}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m1.302697444s ago: executing program 3 (id=290): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0}) 1m56.460550399s ago: executing program 3 (id=298): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e00), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000940)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/114, 0x72, 0x0, 0x3e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x12}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}, @release={0x40046306, 0x6}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x2}, @dead_binder_done, @request_death], 0x0, 0x0, 0x0}) 1m54.054426359s ago: executing program 3 (id=300): fsopen(&(0x7f0000000140)='ext3\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x600}, 0x800, 0x0, 0x1, 0x8, 0x40}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) shutdown(0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="9e", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200005, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f00000002c0)=0xa4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 1m51.787384567s ago: executing program 3 (id=304): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) close(0x3) 1m49.985187568s ago: executing program 3 (id=307): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x1c, &(0x7f0000001240)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0}) 1m45.617659779s ago: executing program 3 (id=313): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, 0x0) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) read$eventfd(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)={0xfffffffffffffffd}) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m35.409857024s ago: executing program 2 (id=328): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) 1m34.479436069s ago: executing program 2 (id=330): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2f01023f3201"], 0x138) 1m32.973631181s ago: executing program 2 (id=333): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 1m30.664869137s ago: executing program 2 (id=337): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80015b12, 0x0) 1m29.487178665s ago: executing program 42 (id=313): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, 0x0) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) read$eventfd(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)={0xfffffffffffffffd}) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m28.794092964s ago: executing program 2 (id=340): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x66a42, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) open(&(0x7f00000001c0)='./file0\x00', 0x48afd, 0x180) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x103000) open$dir(&(0x7f0000000080)='./file0\x00', 0x28080, 0x108) syz_io_uring_setup(0x313c, &(0x7f0000000000)={0x0, 0x4ff, 0x3600, 0x1, 0x372}, 0x0, 0x0) epoll_create(0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m28.18764084s ago: executing program 2 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) iopl(0x3) r2 = syz_open_dev$audion(0x0, 0x589, 0x100) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x3c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="40980700080211c946b75e1ace76421e10387a48000000ffffffffffffd0291dc586e9980002008d0001002d1a02000a0500000000000000f10009001a000000010002000000027206030303030303dd26d11954aea0b8bc708b033f4cfe1b613b6f2e8748ba5b3d7450bf3e514ff28cadff31894d33"], 0x76) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000100000602020202027601058b960c1218"], 0x33) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000042c0)=[{{&(0x7f0000000400)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac1414aaac14"], 0x30}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 1m12.464833323s ago: executing program 43 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) iopl(0x3) r2 = syz_open_dev$audion(0x0, 0x589, 0x100) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x3c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="40980700080211c946b75e1ace76421e10387a48000000ffffffffffffd0291dc586e9980002008d0001002d1a02000a0500000000000000f10009001a000000010002000000027206030303030303dd26d11954aea0b8bc708b033f4cfe1b613b6f2e8748ba5b3d7450bf3e514ff28cadff31894d33"], 0x76) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000100000602020202027601058b960c1218"], 0x33) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000042c0)=[{{&(0x7f0000000400)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac1414aaac14"], 0x30}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 18.920562879s ago: executing program 8 (id=416): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) 17.997542997s ago: executing program 8 (id=418): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x3, @loopback}, 0x1c) 16.260643532s ago: executing program 7 (id=419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd05000700880000000600"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 15.78589345s ago: executing program 8 (id=421): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 15.064542237s ago: executing program 7 (id=422): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) 14.772568166s ago: executing program 0 (id=423): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 12.751178439s ago: executing program 4 (id=425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x7c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000940)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/114, 0x72, 0x0, 0x3e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x12}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}, @release={0x40046306, 0x6}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x2}, @dead_binder_done], 0x0, 0x0, 0x0}) 11.548925441s ago: executing program 4 (id=426): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'vxcan1\x00', {0x1000}, 0x40}) 10.743213636s ago: executing program 8 (id=427): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @local}, 0x10) syz_emit_ethernet(0xb6, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0x4}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) 10.323642912s ago: executing program 4 (id=428): socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f00000002c0), 0x0}, 0x20) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou']) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8040) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000400)={0x40, 0xa, 0x2e, "ef1d913a420deae55063f7a4e30bb5004f5eda533be52e64c623a065f6c2aa2eba3b2431275a8725bb5678ad5b19"}, 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 10.184059564s ago: executing program 7 (id=429): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x3, @loopback}, 0x1c) 9.920486594s ago: executing program 0 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd0500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 8.980698544s ago: executing program 0 (id=431): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) 8.759728483s ago: executing program 8 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) lsm_get_self_attr(0x66, &(0x7f0000001400)={0x0, 0x0, 0x111, 0xf1, ""/241}, &(0x7f0000000040)=0x111, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000d00)={0x1, 0x0, [{0x488, 0x0, 0xffffffffffffff01}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f00000002c0), 0x0, 0x4004800) getpid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000004380), 0x0, 0x200000c0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 6.776709593s ago: executing program 7 (id=433): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, &(0x7f0000000640)={0x44, &(0x7f0000000240)={0x20, 0x16, 0x5, "33c1eda299"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.153727364s ago: executing program 0 (id=434): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {0x0}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f0000000000)=""/103, 0x67}, {&(0x7f0000000080)=""/128, 0x80}], 0x8}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 5.655219428s ago: executing program 4 (id=435): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x70, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000940)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/114, 0x72, 0x0, 0x3e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x12}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}, @release={0x40046306, 0x6}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) 5.331112237s ago: executing program 0 (id=436): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.526104389s ago: executing program 4 (id=437): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'vxcan1\x00', {0x1000}, 0x40}) 2.634991527s ago: executing program 4 (id=438): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.51050546s ago: executing program 8 (id=439): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x20048000}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_open_dev$video4linux(0x0, 0x3, 0x68c42) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "9204ed15b82f9286", "9cf36baca5e0dea959e6562ad90dd7fd", "0ac1c07f", "ccc1f789eeef906d"}, 0x28) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x8080) r5 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x2001, 0x40000334}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000001640)={0x5, 0x3, 0x81, 0x8, 0x2, 0x2}) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000200)={0x1, 0xd9, 0x2, &(0x7f0000000040)={0x3, "810556c721393f4084cc9efc7ddb01702fb9a7f77d040b00"}}) 1.995236724s ago: executing program 7 (id=440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd0500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 838.983583ms ago: executing program 7 (id=441): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @local}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x21, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) 0s ago: executing program 0 (id=442): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x3, @loopback}, 0x1c) kernel console output (not intermixed with test programs): command tx timeout [ 401.728179][ T6565] veth0_macvtap: entered promiscuous mode [ 401.788159][ T6565] veth1_macvtap: entered promiscuous mode [ 402.136333][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.193227][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.338416][ T197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.372805][ T6672] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 402.419597][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.506855][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.516012][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.558546][ T6672] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.629712][ T6632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.719324][ T6672] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 402.893873][ T6632] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.928221][ T6672] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 403.768034][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.775410][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.866816][ T5791] Bluetooth: hci3: command tx timeout [ 403.879927][ T6767] fuse: Bad value for 'fd' [ 404.011056][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.018706][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.027276][ T6735] bridge_slave_0: entered allmulticast mode [ 404.035894][ T6735] bridge_slave_0: entered promiscuous mode [ 404.092250][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.099775][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.739416][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.747127][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.754924][ T6735] bridge_slave_1: entered allmulticast mode [ 404.764809][ T6735] bridge_slave_1: entered promiscuous mode [ 405.452047][ T197] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.677350][ T6735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.781906][ T197] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.878785][ T5791] Bluetooth: hci3: command tx timeout [ 405.905993][ T6672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.925515][ T6735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.011092][ T197] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.323624][ T197] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.552954][ T6735] team0: Port device team_slave_0 added [ 406.588176][ T42] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 406.684901][ T6672] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.712242][ T6735] team0: Port device team_slave_1 added [ 406.867013][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 406.901977][ T42] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.911484][ T42] usb 7-1: config 0 has no interface number 0 [ 406.918128][ T42] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.929766][ T42] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.939898][ T42] usb 7-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 406.949298][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.229284][ T42] usb 7-1: config 0 descriptor?? [ 407.646881][ T1876] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.654448][ T1876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.751043][ T42] usbhid 7-1:0.1: can't add hid device: -71 [ 407.758034][ T42] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 407.771563][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.778977][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.810947][ T6735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.889493][ T42] usb 7-1: USB disconnect, device number 8 [ 407.940811][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.949071][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.975650][ T6735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.009764][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.017525][ T4830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.113401][ T197] bridge_slave_1: left allmulticast mode [ 408.121857][ T197] bridge_slave_1: left promiscuous mode [ 408.128700][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.182033][ T197] bridge_slave_0: left allmulticast mode [ 408.188113][ T197] bridge_slave_0: left promiscuous mode [ 408.194694][ T197] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.724165][ T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.763929][ T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.789364][ T197] bond0 (unregistering): Released all slaves [ 409.174781][ T6632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.202380][ T6735] hsr_slave_0: entered promiscuous mode [ 409.213691][ T6735] hsr_slave_1: entered promiscuous mode [ 409.223143][ T6735] debugfs: 'hsr0' already exists in 'hsr' [ 409.230908][ T6735] Cannot create hsr debugfs directory [ 409.467366][ T42] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 409.641822][ T197] hsr_slave_0: left promiscuous mode [ 409.672322][ T197] hsr_slave_1: left promiscuous mode [ 409.680791][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.688842][ T197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.704693][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.713747][ T197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.748454][ T197] veth1_macvtap: left promiscuous mode [ 409.753029][ T42] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 409.754275][ T197] veth0_macvtap: left promiscuous mode [ 409.769373][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.771183][ T197] veth1_vlan: left promiscuous mode [ 409.777886][ T42] usb 7-1: Product: syz [ 409.783275][ T197] veth0_vlan: left promiscuous mode [ 409.787273][ T42] usb 7-1: Manufacturer: syz [ 409.787374][ T42] usb 7-1: SerialNumber: syz [ 409.835374][ T42] usb 7-1: config 0 descriptor?? [ 409.865699][ T42] hub 7-1:0.0: bad descriptor, ignoring hub [ 409.872099][ T42] hub 7-1:0.0: probe with driver hub failed with error -5 [ 410.107237][ T42] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 410.127628][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 410.147538][ T42] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 410.157728][ T42] usb 7-1: media controller created [ 410.222579][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 410.464676][ T42] DVB: Unable to find symbol dib7000p_attach() [ 410.471250][ T42] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 410.603228][ T197] team0 (unregistering): Port device team_slave_1 removed [ 410.646645][ T197] team0 (unregistering): Port device team_slave_0 removed [ 410.670314][ T6805] i2c i2c-1: Invalid block size returned: 239 [ 410.677142][ T42] rc_core: IR keymap rc-dib0700-rc5 not found [ 410.683476][ T42] Registered IR keymap rc-empty [ 410.689882][ T42] dvb-usb: could not initialize remote control. [ 410.696376][ T42] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 410.963007][ T42] usb 7-1: USB disconnect, device number 9 [ 411.169887][ T6672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.552880][ T42] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 411.821873][ T197] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.015958][ T197] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.249088][ T197] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.382227][ T197] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.201465][ T197] bridge_slave_1: left allmulticast mode [ 413.209524][ T197] bridge_slave_1: left promiscuous mode [ 413.217624][ T197] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.312258][ T197] bridge_slave_0: left allmulticast mode [ 413.321588][ T197] bridge_slave_0: left promiscuous mode [ 413.329890][ T197] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.671944][ T6832] fuse: Invalid rootmode [ 413.976382][ T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.993977][ T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.050947][ T197] bond0 (unregistering): Released all slaves [ 414.510827][ T197] hsr_slave_0: left promiscuous mode [ 414.576406][ T197] hsr_slave_1: left promiscuous mode [ 414.584515][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.592506][ T197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.651520][ T197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.660635][ T197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.728724][ T197] veth1_macvtap: left promiscuous mode [ 414.734521][ T197] veth0_macvtap: left promiscuous mode [ 414.740764][ T197] veth1_vlan: left promiscuous mode [ 414.746494][ T197] veth0_vlan: left promiscuous mode [ 415.699826][ T197] team0 (unregistering): Port device team_slave_1 removed [ 415.786114][ T197] team0 (unregistering): Port device team_slave_0 removed [ 416.186934][ T6672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.338932][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.348572][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.358416][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.378538][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.502044][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.645184][ T6632] veth0_vlan: entered promiscuous mode [ 416.785621][ T6632] veth1_vlan: entered promiscuous mode [ 416.823608][ T5848] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 416.848477][ T6735] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 416.962240][ T6735] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 417.028330][ T6672] veth0_vlan: entered promiscuous mode [ 417.091755][ T5848] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 417.102091][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.110637][ T5848] usb 7-1: Product: syz [ 417.115913][ T5848] usb 7-1: Manufacturer: syz [ 417.121128][ T5848] usb 7-1: SerialNumber: syz [ 417.161524][ T5848] usb 7-1: config 0 descriptor?? [ 417.182672][ T6735] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 417.228720][ T5848] hub 7-1:0.0: bad descriptor, ignoring hub [ 417.234892][ T5848] hub 7-1:0.0: probe with driver hub failed with error -5 [ 417.379482][ T6735] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 417.447226][ T6672] veth1_vlan: entered promiscuous mode [ 417.509377][ T5848] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 417.638404][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 417.694149][ T6632] veth0_macvtap: entered promiscuous mode [ 417.754130][ T5848] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 417.769811][ T5848] usb 7-1: media controller created [ 417.864912][ T6672] veth0_macvtap: entered promiscuous mode [ 417.902279][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.938213][ T6632] veth1_macvtap: entered promiscuous mode [ 418.040024][ T6672] veth1_macvtap: entered promiscuous mode [ 418.065798][ T6858] i2c i2c-1: Invalid block size returned: 239 [ 418.248335][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.410986][ T6672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.453387][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.577572][ T5848] DVB: Unable to find symbol dib7000p_attach() [ 418.583971][ T5848] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 418.619048][ T5791] Bluetooth: hci1: command tx timeout [ 418.687923][ T6672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.705376][ T1876] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.770536][ T1876] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.854220][ T1876] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.929425][ T6570] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.021031][ T6570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.086794][ T6570] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.095925][ T6570] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.227344][ T6570] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.237150][ T5848] rc_core: IR keymap rc-dib0700-rc5 not found [ 419.243414][ T5848] Registered IR keymap rc-empty [ 419.249761][ T5848] dvb-usb: could not initialize remote control. [ 419.256280][ T5848] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 419.266767][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.267034][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.485971][ T6853] chnl_net:caif_netlink_parms(): no params data found [ 419.567109][ T5848] usb 7-1: USB disconnect, device number 10 [ 419.773185][ T6735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.165003][ T5848] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 420.195635][ T6735] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.332963][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.340663][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.512156][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.519865][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.680600][ T5791] Bluetooth: hci1: command tx timeout [ 421.223053][ T5076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.402255][ T5076] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.580112][ T5076] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.680728][ T6882] fuse: Invalid rootmode [ 422.023028][ T5076] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.091661][ T6853] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.099413][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.107398][ T6853] bridge_slave_0: entered allmulticast mode [ 422.117920][ T6853] bridge_slave_0: entered promiscuous mode [ 422.285372][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.293457][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.301584][ T6853] bridge_slave_1: entered allmulticast mode [ 422.311480][ T6853] bridge_slave_1: entered promiscuous mode [ 422.758357][ T5791] Bluetooth: hci1: command tx timeout [ 422.870411][ T5076] bridge_slave_1: left allmulticast mode [ 422.876740][ T5076] bridge_slave_1: left promiscuous mode [ 422.883371][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.913470][ T5076] bridge_slave_0: left allmulticast mode [ 422.924207][ T5076] bridge_slave_0: left promiscuous mode [ 422.931186][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.426509][ T5076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.445568][ T5076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.472111][ T5076] bond0 (unregistering): Released all slaves [ 423.535853][ T6853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.655407][ T6853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.841450][ T5076] hsr_slave_0: left promiscuous mode [ 423.851364][ T5076] hsr_slave_1: left promiscuous mode [ 423.862846][ T5076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.871844][ T5076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.890213][ T5076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.898404][ T5076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.940893][ T5076] veth1_macvtap: left promiscuous mode [ 423.947467][ T5076] veth0_macvtap: left promiscuous mode [ 423.953380][ T5076] veth1_vlan: left promiscuous mode [ 423.959239][ T5076] veth0_vlan: left promiscuous mode [ 424.273636][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 424.582316][ T5076] team0 (unregistering): Port device team_slave_1 removed [ 424.651844][ T5076] team0 (unregistering): Port device team_slave_0 removed [ 424.836766][ T5791] Bluetooth: hci1: command tx timeout [ 424.996889][ T24] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 425.007625][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.015889][ T24] usb 7-1: Product: syz [ 425.021347][ T24] usb 7-1: Manufacturer: syz [ 425.027246][ T24] usb 7-1: SerialNumber: syz [ 425.059282][ T24] usb 7-1: config 0 descriptor?? [ 425.072899][ T24] hub 7-1:0.0: bad descriptor, ignoring hub [ 425.079263][ T24] hub 7-1:0.0: probe with driver hub failed with error -5 [ 425.273684][ T6853] team0: Port device team_slave_0 added [ 425.296719][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 425.328997][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 425.331624][ T6735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.378597][ T6853] team0: Port device team_slave_1 added [ 425.423399][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 425.432527][ T24] usb 7-1: media controller created [ 425.565059][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.667185][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.674367][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.700890][ T6853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.832053][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.839709][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.866295][ T6853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.936712][ T6911] i2c i2c-1: Invalid block size returned: 239 [ 426.153771][ T24] DVB: Unable to find symbol dib7000p_attach() [ 426.164017][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 426.464164][ T6853] hsr_slave_0: entered promiscuous mode [ 426.475198][ T6853] hsr_slave_1: entered promiscuous mode [ 426.484557][ T6853] debugfs: 'hsr0' already exists in 'hsr' [ 426.490627][ T6853] Cannot create hsr debugfs directory [ 426.577074][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 426.583364][ T24] Registered IR keymap rc-empty [ 426.589631][ T24] dvb-usb: could not initialize remote control. [ 426.596055][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 426.739046][ T24] usb 7-1: USB disconnect, device number 11 [ 427.130524][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 428.445138][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.453333][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.618545][ T6935] fuse: Invalid rootmode [ 428.675289][ T6735] veth0_vlan: entered promiscuous mode [ 428.695318][ T1876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.703836][ T1876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.885878][ T6735] veth1_vlan: entered promiscuous mode [ 428.939334][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.947676][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.289611][ T6853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 429.352293][ T1876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.360617][ T1876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.405733][ T6735] veth0_macvtap: entered promiscuous mode [ 429.448320][ T6853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 429.550021][ T6735] veth1_macvtap: entered promiscuous mode [ 429.608867][ T6853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 429.689637][ T6853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 429.905236][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.047116][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.150035][ T14] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.197495][ T14] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.280653][ T14] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.354797][ T14] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.371595][ T6853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.907012][ T11] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 432.011239][ T6853] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.112943][ T6570] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.120713][ T6570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.198108][ T11] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 432.207553][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.215680][ T11] usb 7-1: Product: syz [ 432.220177][ T11] usb 7-1: Manufacturer: syz [ 432.224887][ T11] usb 7-1: SerialNumber: syz [ 432.263225][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.271059][ T6570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.334763][ T11] usb 7-1: config 0 descriptor?? [ 432.394763][ T11] hub 7-1:0.0: bad descriptor, ignoring hub [ 432.401764][ T11] hub 7-1:0.0: probe with driver hub failed with error -5 [ 432.556797][ T11] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 432.662100][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 432.748262][ T11] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 432.757352][ T11] usb 7-1: media controller created [ 432.852659][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.124396][ T6954] i2c i2c-1: Invalid block size returned: 239 [ 433.480549][ T11] DVB: Unable to find symbol dib7000p_attach() [ 433.487201][ T11] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 434.113847][ T11] rc_core: IR keymap rc-dib0700-rc5 not found [ 434.120359][ T11] Registered IR keymap rc-empty [ 434.126102][ T11] dvb-usb: could not initialize remote control. [ 434.132866][ T11] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 434.300114][ T11] usb 7-1: USB disconnect, device number 12 [ 434.687845][ T11] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 439.944877][ T6853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.467511][ T6853] veth0_vlan: entered promiscuous mode [ 440.581919][ T6853] veth1_vlan: entered promiscuous mode [ 440.941810][ T6853] veth0_macvtap: entered promiscuous mode [ 441.045360][ T6853] veth1_macvtap: entered promiscuous mode [ 441.325089][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.486083][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.552061][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.610658][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.685429][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.800043][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.958798][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.966927][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.137304][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.145670][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.898370][ T7032] fuse: Bad value for 'rootmode' [ 447.165648][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 447.175447][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 447.187083][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 447.265922][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 447.279474][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 449.556944][ T5086] Bluetooth: hci2: command tx timeout [ 450.107159][ T7040] chnl_net:caif_netlink_parms(): no params data found [ 451.498604][ T5858] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 451.637181][ T5086] Bluetooth: hci2: command tx timeout [ 451.727620][ T5858] usb 7-1: Using ep0 maxpacket: 32 [ 451.782359][ T5858] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 451.792738][ T5858] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 451.807330][ T5858] usb 7-1: config 0 interface 0 has no altsetting 0 [ 451.901671][ T5858] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 451.911104][ T5858] usb 7-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 451.919622][ T5858] usb 7-1: Product: syz [ 451.923980][ T5858] usb 7-1: Manufacturer: syz [ 451.933268][ T5858] usb 7-1: SerialNumber: syz [ 452.085025][ T5858] usb 7-1: config 0 descriptor?? [ 452.577897][ T5858] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 452.688968][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.696736][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.704661][ T7040] bridge_slave_0: entered allmulticast mode [ 452.714776][ T7040] bridge_slave_0: entered promiscuous mode [ 453.002586][ T5858] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 453.012825][ T5858] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 453.068724][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.080227][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.088232][ T7040] bridge_slave_1: entered allmulticast mode [ 453.097585][ T7040] bridge_slave_1: entered promiscuous mode [ 453.248579][ T5858] usb 7-1: USB disconnect, device number 13 [ 453.816831][ T5086] Bluetooth: hci2: command tx timeout [ 453.848681][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.148170][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.504087][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.512304][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.620333][ T7040] team0: Port device team_slave_0 added [ 455.646357][ T7040] team0: Port device team_slave_1 added [ 455.876829][ T5086] Bluetooth: hci2: command tx timeout [ 455.961283][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.969815][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.417224][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.424393][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.455132][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.608436][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.615524][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.647115][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.395537][ T7040] hsr_slave_0: entered promiscuous mode [ 457.407342][ T7040] hsr_slave_1: entered promiscuous mode [ 457.415499][ T7040] debugfs: 'hsr0' already exists in 'hsr' [ 457.421795][ T7040] Cannot create hsr debugfs directory [ 459.000703][ T5858] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 459.266781][ T5858] usb 7-1: Using ep0 maxpacket: 8 [ 459.310084][ T5858] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 459.318562][ T5858] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.329068][ T5858] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 459.339263][ T5858] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 459.349440][ T5858] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.362757][ T5858] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 459.372124][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.898306][ T7040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 459.974922][ T5858] usb 7-1: usb_control_msg returned -32 [ 459.984752][ T5858] usbtmc 7-1:16.0: can't read capabilities [ 460.042178][ T7040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 460.181288][ T7040] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 460.298277][ T7040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 460.645460][ T5858] usb 7-1: USB disconnect, device number 14 [ 462.144956][ T7122] fuse: Unknown parameter 'use00000000000000000000' [ 463.348659][ T7040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.559807][ T5848] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 463.629995][ T7040] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.865974][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.873490][ T5076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.983460][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.990946][ T5076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.758473][ T5848] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 464.767129][ T5848] usb 1-1: config 0 has no interface number 0 [ 464.773456][ T5848] usb 1-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 465.380542][ T5848] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 465.390107][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.398969][ T5848] usb 1-1: Product: syz [ 465.403400][ T5848] usb 1-1: Manufacturer: syz [ 465.408429][ T5848] usb 1-1: SerialNumber: syz [ 465.646880][ T915] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 465.916859][ T915] usb 9-1: Using ep0 maxpacket: 32 [ 465.986789][ T915] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.997141][ T915] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 466.007318][ T915] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 466.016803][ T915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.221708][ T915] usb 9-1: config 0 descriptor?? [ 466.273385][ T5791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 466.288453][ T5791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 466.328108][ T5791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 466.360714][ T5791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 466.377995][ T5848] usb 1-1: config 0 descriptor?? [ 466.387739][ T5791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 467.614593][ T5848] usb 1-1: can't set config #0, error -71 [ 468.082538][ T7040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.226728][ T5848] usb 1-1: USB disconnect, device number 3 [ 468.529867][ T5791] Bluetooth: hci5: command tx timeout [ 468.624081][ T7146] chnl_net:caif_netlink_parms(): no params data found [ 469.075700][ T5858] usb 9-1: USB disconnect, device number 2 [ 469.301732][ T7040] veth0_vlan: entered promiscuous mode [ 469.576877][ T7040] veth1_vlan: entered promiscuous mode [ 469.836895][ T7166] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 469.856730][ T7166] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 470.074010][ T7040] veth0_macvtap: entered promiscuous mode [ 470.113919][ T7178] fuse: Bad value for 'fd' [ 470.277248][ T7040] veth1_macvtap: entered promiscuous mode [ 470.601303][ T5791] Bluetooth: hci5: command tx timeout [ 470.863504][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.093422][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.241623][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.501543][ T1153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.571387][ T1153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.672409][ T1153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.609604][ T915] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 472.676526][ T5791] Bluetooth: hci5: command tx timeout [ 472.949798][ T915] usb 9-1: Using ep0 maxpacket: 16 [ 473.039082][ T915] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 473.047867][ T915] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 473.056549][ T915] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 473.064913][ T915] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 473.073583][ T915] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 473.082865][ T915] usb 9-1: config 0 has no interface number 0 [ 473.089236][ T915] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 473.100555][ T915] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 473.110683][ T915] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 473.120765][ T915] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.137823][ T915] usb 9-1: config 0 interface 125 has no altsetting 0 [ 473.144781][ T915] usb 9-1: config 0 interface 125 has no altsetting 2 [ 473.250205][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.259580][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.267628][ T7146] bridge_slave_0: entered allmulticast mode [ 473.277762][ T7146] bridge_slave_0: entered promiscuous mode [ 473.448931][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.458061][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.465843][ T7146] bridge_slave_1: entered allmulticast mode [ 473.475291][ T7146] bridge_slave_1: entered promiscuous mode [ 473.613224][ T915] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 473.622800][ T915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.631147][ T915] usb 9-1: Product: syz [ 473.635422][ T915] usb 9-1: Manufacturer: syz [ 473.644216][ T915] usb 9-1: SerialNumber: syz [ 473.882832][ T915] usb 9-1: config 0 descriptor?? [ 473.991394][ T915] usb 9-1: selecting invalid altsetting 2 [ 474.219882][ T7146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.291457][ T7146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.301993][ T5858] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 474.563965][ T5858] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 474.572890][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.655856][ T5858] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 474.669536][ T5858] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 474.679189][ T5858] usb 1-1: Manufacturer: syz [ 474.778667][ T5791] Bluetooth: hci5: command tx timeout [ 474.836054][ T5858] usb 1-1: config 0 descriptor?? [ 474.893979][ T7146] team0: Port device team_slave_0 added [ 474.924087][ T7146] team0: Port device team_slave_1 added [ 474.957831][ T915] usb 9-1: USB disconnect, device number 3 [ 475.394864][ T5858] rc_core: IR keymap rc-hauppauge not found [ 475.402476][ T5858] Registered IR keymap rc-empty [ 475.410208][ T5858] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 475.423492][ T5858] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 475.511048][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.518460][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.544855][ T7146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.757621][ C0] igorplugusb 1-1:0.0: receive overflow invalid: 210 [ 475.872969][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.880516][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.911230][ T7146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.218789][ T5848] usb 1-1: USB disconnect, device number 4 [ 476.456481][ T5858] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 476.687992][ T5858] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 476.696934][ T5858] usb 9-1: config 0 has no interface number 0 [ 476.703270][ T5858] usb 9-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 476.883046][ T5858] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 476.892484][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.900969][ T5858] usb 9-1: Product: syz [ 476.905245][ T5858] usb 9-1: Manufacturer: syz [ 476.910082][ T5858] usb 9-1: SerialNumber: syz [ 477.157839][ T7146] hsr_slave_0: entered promiscuous mode [ 477.169137][ T7146] hsr_slave_1: entered promiscuous mode [ 477.178041][ T7146] debugfs: 'hsr0' already exists in 'hsr' [ 477.183898][ T7146] Cannot create hsr debugfs directory [ 477.204829][ T5858] usb 9-1: config 0 descriptor?? [ 477.217868][ T5858] asix 9-1:0.251: probe with driver asix failed with error -22 [ 479.721374][ T5858] usb 9-1: USB disconnect, device number 4 [ 480.040292][ T7146] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.261171][ T7146] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.393780][ T7146] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.558382][ T7146] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 480.623402][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.630455][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.991759][ T5848] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 481.608853][ T5848] usb 1-1: Using ep0 maxpacket: 32 [ 481.648600][ T5848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.659084][ T5848] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 481.668519][ T5848] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 481.677898][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.429391][ T5848] usb 1-1: config 0 descriptor?? [ 482.612255][ T7146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.848477][ T7146] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.433684][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.441245][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.555352][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.565250][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.846074][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.853624][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.943721][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.952526][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.847859][ T5086] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 484.866695][ T5086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 484.878851][ T5086] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 484.915786][ T5086] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 484.927836][ T5086] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 484.976919][ T793] usb 1-1: USB disconnect, device number 5 [ 486.150094][ T7252] input: syz0 as /devices/virtual/input/input12 [ 486.648569][ T915] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 486.899925][ T915] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 486.909364][ T915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.917775][ T915] usb 3-1: Product: syz [ 486.922078][ T915] usb 3-1: Manufacturer: syz [ 486.927117][ T915] usb 3-1: SerialNumber: syz [ 487.022677][ T5086] Bluetooth: hci7: command tx timeout [ 487.080161][ T915] usb 3-1: config 0 descriptor?? [ 487.119661][ T915] hub 3-1:0.0: bad descriptor, ignoring hub [ 487.125956][ T915] hub 3-1:0.0: probe with driver hub failed with error -5 [ 487.505722][ T915] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 487.581849][ T915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 487.721214][ T915] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 487.730265][ T915] usb 3-1: media controller created [ 487.819490][ T915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.041005][ T915] DVB: Unable to find symbol dib7000p_attach() [ 488.052285][ T915] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 488.085992][ T7262] i2c i2c-1: Invalid block size returned: 239 [ 488.456500][ T5858] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 488.755038][ T5858] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 488.764533][ T5858] usb 9-1: config 0 has no interface number 0 [ 488.772814][ T5858] usb 9-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 488.973159][ T5858] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 488.982730][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.991060][ T5858] usb 9-1: Product: syz [ 488.995336][ T5858] usb 9-1: Manufacturer: syz [ 489.005514][ T5858] usb 9-1: SerialNumber: syz [ 489.091678][ T5086] Bluetooth: hci7: command tx timeout [ 489.188933][ T5858] usb 9-1: config 0 descriptor?? [ 489.343756][ T5858] asix 9-1:0.251: probe with driver asix failed with error -22 [ 489.689428][ T915] rc_core: IR keymap rc-dib0700-rc5 not found [ 489.695680][ T915] Registered IR keymap rc-empty [ 489.702348][ T915] dvb-usb: could not initialize remote control. [ 489.708829][ T915] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 489.995436][ T915] usb 3-1: USB disconnect, device number 4 [ 490.469022][ T7246] chnl_net:caif_netlink_parms(): no params data found [ 490.624067][ T915] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 490.665693][ T7146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.184534][ T5086] Bluetooth: hci7: command tx timeout [ 491.540844][ T7146] veth0_vlan: entered promiscuous mode [ 491.555545][ T5858] usb 9-1: USB disconnect, device number 5 [ 491.951857][ T7146] veth1_vlan: entered promiscuous mode [ 491.999091][ T4903] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.595565][ T4903] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.795100][ T7292] sctp: [Deprecated]: syz.2.221 (pid 7292) Use of int in max_burst socket option. [ 492.795100][ T7292] Use struct sctp_assoc_value instead [ 492.816417][ T7146] veth0_macvtap: entered promiscuous mode [ 492.942097][ T4903] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.228085][ T4903] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.328979][ T5086] Bluetooth: hci7: command tx timeout [ 493.405055][ T7146] veth1_macvtap: entered promiscuous mode [ 494.274366][ T4903] bridge_slave_1: left allmulticast mode [ 494.280438][ T4903] bridge_slave_1: left promiscuous mode [ 494.287485][ T4903] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.451293][ T4903] bridge_slave_0: left allmulticast mode [ 494.459041][ T4903] bridge_slave_0: left promiscuous mode [ 494.465404][ T4903] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.478755][ T7297] binder: 7296:7297 ioctl c0306201 0 returned -14 [ 494.946287][ T4903] dvmrp0 (unregistering): left allmulticast mode [ 495.070714][ T4903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.188219][ T4903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.281527][ T4903] bond0 (unregistering): Released all slaves [ 495.771639][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.289076][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.296782][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.304438][ T7246] bridge_slave_0: entered allmulticast mode [ 496.313474][ T7246] bridge_slave_0: entered promiscuous mode [ 496.332260][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.714971][ T6570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.777326][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.791720][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.799636][ T7246] bridge_slave_1: entered allmulticast mode [ 496.808479][ T7246] bridge_slave_1: entered promiscuous mode [ 496.896585][ T5858] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 496.908500][ T6570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.057028][ T4903] hsr_slave_0: left promiscuous mode [ 497.146061][ T4903] hsr_slave_1: left promiscuous mode [ 497.154406][ T4903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.163051][ T4903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.370241][ T4903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.378375][ T4903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.427662][ T5858] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 497.436877][ T5858] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 497.447589][ T5858] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 497.456964][ T5858] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 497.468338][ T5858] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 497.589385][ T5854] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 497.633590][ T4903] veth1_macvtap: left promiscuous mode [ 497.639657][ T4903] veth0_macvtap: left promiscuous mode [ 497.645460][ T4903] veth1_vlan: left promiscuous mode [ 497.651096][ T4903] veth0_vlan: left promiscuous mode [ 498.073153][ T5854] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 498.082956][ T5854] usb 9-1: config 0 has no interface number 0 [ 498.090753][ T5854] usb 9-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 498.107303][ T915] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 498.124823][ T5858] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 498.134292][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 498.142831][ T5858] usb 1-1: Product: syz [ 498.147227][ T5858] usb 1-1: Manufacturer: syz [ 498.173518][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 498.261786][ T5858] cdc_wdm 1-1:1.0: skipping garbage [ 498.267338][ T5858] cdc_wdm 1-1:1.0: skipping garbage [ 498.279997][ T5854] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 498.292314][ T5854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.300808][ T5854] usb 9-1: Product: syz [ 498.305196][ T5854] usb 9-1: Manufacturer: syz [ 498.310185][ T5854] usb 9-1: SerialNumber: syz [ 498.358028][ T5858] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 498.364199][ T5858] cdc_wdm 1-1:1.0: Unknown control protocol [ 498.453694][ T5854] usb 9-1: config 0 descriptor?? [ 498.483366][ T5854] asix 9-1:0.251: probe with driver asix failed with error -22 [ 498.514008][ T915] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 498.550738][ T915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.563850][ T915] usb 3-1: Product: syz [ 498.568412][ T915] usb 3-1: Manufacturer: syz [ 498.573131][ T915] usb 3-1: SerialNumber: syz [ 498.584869][ T915] usb 3-1: config 0 descriptor?? [ 498.606058][ T915] hub 3-1:0.0: bad descriptor, ignoring hub [ 498.612329][ T915] hub 3-1:0.0: probe with driver hub failed with error -5 [ 498.673297][ T5854] usb 1-1: USB disconnect, device number 6 [ 498.902067][ T915] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 498.965935][ T915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 499.055346][ T915] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 499.065441][ T915] usb 3-1: media controller created [ 499.207248][ T915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.739247][ T7318] i2c i2c-1: Invalid block size returned: 239 [ 499.986908][ T4903] team0 (unregistering): Port device team_slave_1 removed [ 500.127341][ T4903] team0 (unregistering): Port device team_slave_0 removed [ 500.289230][ T5854] usb 9-1: USB disconnect, device number 6 [ 500.807022][ T915] DVB: Unable to find symbol dib7000p_attach() [ 500.813420][ T915] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 500.958307][ T6570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.374937][ T3949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.482161][ T7246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.755401][ T7246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.867793][ T4903] IPVS: stop unused estimator thread 0... [ 502.110297][ T5858] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 502.263450][ T915] rc_core: IR keymap rc-dib0700-rc5 not found [ 502.269969][ T915] Registered IR keymap rc-empty [ 502.275767][ T915] dvb-usb: could not initialize remote control. [ 502.284223][ T915] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 502.366630][ T5858] usb 1-1: device descriptor read/64, error -71 [ 502.523455][ T915] usb 3-1: USB disconnect, device number 5 [ 502.656530][ T5858] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 502.907160][ T5858] usb 1-1: device descriptor read/64, error -71 [ 503.038859][ T5858] usb usb1-port1: attempt power cycle [ 503.060221][ T7338] binder: 7337:7338 ioctl c0306201 0 returned -14 [ 503.111438][ T915] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 503.446560][ T5858] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 503.547324][ T5858] usb 1-1: device descriptor read/8, error -71 [ 503.768957][ T7246] team0: Port device team_slave_0 added [ 503.836851][ T5858] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 503.918569][ T5858] usb 1-1: device descriptor read/8, error -71 [ 504.056437][ T5858] usb usb1-port1: unable to enumerate USB device [ 504.140329][ T7246] team0: Port device team_slave_1 added [ 505.456007][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.463286][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.492853][ T7246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.501811][ T5858] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 505.594746][ T915] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 505.775736][ T5858] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 505.785297][ T5858] usb 9-1: config 0 has no interface number 0 [ 505.797696][ T5858] usb 9-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 505.872802][ T915] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 505.882538][ T915] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 505.898714][ T915] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 505.909355][ T915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 505.920605][ T915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 506.008840][ T5858] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 506.018395][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.026683][ T5858] usb 9-1: Product: syz [ 506.031091][ T5858] usb 9-1: Manufacturer: syz [ 506.035811][ T5858] usb 9-1: SerialNumber: syz [ 506.154532][ T915] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 506.164854][ T915] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 506.173413][ T915] usb 1-1: Product: syz [ 506.177841][ T915] usb 1-1: Manufacturer: syz [ 506.231499][ T5858] usb 9-1: config 0 descriptor?? [ 506.257614][ T5858] asix 9-1:0.251: probe with driver asix failed with error -22 [ 506.364729][ T915] cdc_wdm 1-1:1.0: skipping garbage [ 506.370642][ T915] cdc_wdm 1-1:1.0: skipping garbage [ 506.472520][ T915] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 506.478833][ T915] cdc_wdm 1-1:1.0: Unknown control protocol [ 506.850368][ T5848] usb 1-1: USB disconnect, device number 11 [ 507.052395][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.059966][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.086453][ T7246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.280373][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 508.569717][ T5858] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 508.834509][ T915] usb 9-1: USB disconnect, device number 7 [ 508.925922][ T5858] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 508.935987][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.945084][ T5858] usb 3-1: Product: syz [ 508.949476][ T5858] usb 3-1: Manufacturer: syz [ 508.954182][ T5858] usb 3-1: SerialNumber: syz [ 509.095864][ T5858] usb 3-1: config 0 descriptor?? [ 509.140796][ T5858] hub 3-1:0.0: bad descriptor, ignoring hub [ 509.147329][ T5858] hub 3-1:0.0: probe with driver hub failed with error -5 [ 509.393365][ T5858] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 509.450762][ T5858] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 509.522635][ T5858] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 509.531687][ T5858] usb 3-1: media controller created [ 509.667743][ T915] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 509.741753][ T5858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 510.019024][ T915] usb 1-1: Using ep0 maxpacket: 16 [ 510.070631][ T7384] binder: 7383:7384 ioctl c0306201 0 returned -14 [ 510.100685][ T915] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.109037][ T915] usb 1-1: config 0 has no interface number 0 [ 510.115267][ T915] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.126685][ T915] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.136802][ T915] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 510.146320][ T915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.334715][ T5858] DVB: Unable to find symbol dib7000p_attach() [ 510.341317][ T5858] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 510.371394][ T915] usb 1-1: config 0 descriptor?? [ 510.453872][ T7246] hsr_slave_0: entered promiscuous mode [ 510.463298][ T7246] hsr_slave_1: entered promiscuous mode [ 510.471638][ T7246] debugfs: 'hsr0' already exists in 'hsr' [ 510.477769][ T7246] Cannot create hsr debugfs directory [ 510.802953][ T915] holtek_mouse 0003:04D9:A081.0002: unknown main item tag 0x0 [ 510.818425][ T915] holtek_mouse 0003:04D9:A081.0002: unknown main item tag 0x0 [ 510.828128][ T915] holtek_mouse 0003:04D9:A081.0002: unknown main item tag 0x0 [ 510.835784][ T915] holtek_mouse 0003:04D9:A081.0002: unknown main item tag 0x0 [ 510.843630][ T915] holtek_mouse 0003:04D9:A081.0002: unknown main item tag 0x0 [ 510.851373][ T915] holtek_mouse 0003:04D9:A081.0002: unknown main item tag 0x0 [ 510.859309][ T915] holtek_mouse 0003:04D9:A081.0002: unknown main item tag 0x0 [ 510.867262][ T915] holtek_mouse 0003:04D9:A081.0002: unknown main item tag 0x0 [ 511.194750][ T915] holtek_mouse 0003:04D9:A081.0002: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.0-1/input1 [ 511.468090][ T915] usb 1-1: USB disconnect, device number 12 [ 512.156661][ T7393] fido_id[7393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 513.046808][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.054880][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.126606][ T5858] rc_core: IR keymap rc-dib0700-rc5 not found [ 513.132819][ T5858] Registered IR keymap rc-empty [ 513.138814][ T5858] dvb-usb: could not initialize remote control. [ 513.145139][ T5858] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 513.298897][ T5858] usb 3-1: USB disconnect, device number 6 [ 513.712796][ T5858] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 513.764164][ T7325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.773306][ T7325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.665662][ T7246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 514.696408][ T5848] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 514.857708][ T7246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 515.020528][ T7246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 515.232431][ T7246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 516.043955][ T5848] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.054214][ T5848] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.067825][ T5848] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 516.077938][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.567950][ T915] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 516.757309][ T5854] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 516.841482][ T915] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 516.857164][ T915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.865358][ T915] usb 1-1: Product: syz [ 516.871432][ T915] usb 1-1: Manufacturer: syz [ 516.876403][ T915] usb 1-1: SerialNumber: syz [ 516.917275][ T7246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.023927][ T5854] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 517.032748][ T5854] usb 4-1: config 0 has no interface number 0 [ 517.039193][ T5854] usb 4-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 517.088253][ T915] usb 1-1: config 0 descriptor?? [ 517.151493][ T7246] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.179703][ T915] hub 1-1:0.0: bad descriptor, ignoring hub [ 517.186323][ T915] hub 1-1:0.0: probe with driver hub failed with error -5 [ 517.407729][ T5854] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 517.417251][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.425616][ T5854] usb 4-1: Product: syz [ 517.430611][ T5854] usb 4-1: Manufacturer: syz [ 517.435421][ T5854] usb 4-1: SerialNumber: syz [ 517.574375][ T3974] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.581868][ T3974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.633565][ T915] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 517.768855][ T915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.866583][ T5854] usb 4-1: config 0 descriptor?? [ 517.908354][ T3974] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.915915][ T3974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.069533][ T915] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 518.092070][ T915] usb 1-1: media controller created [ 518.133810][ T7430] i2c i2c-1: Invalid block size returned: 239 [ 518.162478][ T5854] asix 4-1:0.251: probe with driver asix failed with error -22 [ 518.378973][ T915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.163364][ T5848] usb 3-1: usb_control_msg returned -71 [ 519.169548][ T5848] usbtmc 3-1:16.0: can't read capabilities [ 520.009929][ T915] DVB: Unable to find symbol dib7000p_attach() [ 520.017410][ T915] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 520.439246][ T5848] usb 3-1: USB disconnect, device number 7 [ 520.733009][ T5847] usb 4-1: USB disconnect, device number 3 [ 521.236883][ T915] rc_core: IR keymap rc-dib0700-rc5 not found [ 521.243188][ T915] Registered IR keymap rc-empty [ 521.249158][ T915] dvb-usb: could not initialize remote control. [ 521.262933][ T915] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 521.517820][ T915] usb 1-1: USB disconnect, device number 13 [ 521.634131][ T7456] comedi comedi3: multiq3: I/O port conflict (0xcf7,16) [ 521.889540][ T915] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 522.695696][ T7246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.639944][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 525.757096][ T5847] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 525.999632][ T5847] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 526.008126][ T5847] usb 1-1: config 0 has no interface number 0 [ 526.086270][ T5847] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 526.095887][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.104235][ T5847] usb 1-1: Product: syz [ 526.108744][ T5847] usb 1-1: Manufacturer: syz [ 526.113497][ T5847] usb 1-1: SerialNumber: syz [ 526.249635][ T5847] usb 1-1: config 0 descriptor?? [ 526.734220][ T5847] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 526.744623][ T5847] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 526.755268][ T5847] asix 1-1:0.251: probe with driver asix failed with error -5 [ 527.518963][ T7246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.772676][ T5847] usb 1-1: USB disconnect, device number 14 [ 531.532346][ T7522] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 531.651601][ T7522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 532.092525][ T7522] macvlan2: entered promiscuous mode [ 532.098250][ T7522] macvlan2: entered allmulticast mode [ 532.104911][ T7522] bond1: entered allmulticast mode [ 532.121210][ T7522] bond1: entered promiscuous mode [ 532.128734][ T7522] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 532.143116][ T7522] team0: Port device macvlan2 added [ 532.427305][ T7526] bond1: (slave ip6gretap1): making interface the new active one [ 532.435222][ T7526] ip6gretap1: entered promiscuous mode [ 532.444649][ T7526] ip6gretap1: entered allmulticast mode [ 532.455004][ T7526] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 532.628578][ T7246] veth0_vlan: entered promiscuous mode [ 532.803159][ T7246] veth1_vlan: entered promiscuous mode [ 533.319388][ T7246] veth0_macvtap: entered promiscuous mode [ 533.401520][ T7246] veth1_macvtap: entered promiscuous mode [ 533.744470][ T5848] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 533.772774][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.925769][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.084397][ T3949] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.203955][ T3949] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.272769][ T3949] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.371647][ T3949] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.693064][ T5848] usb 9-1: Using ep0 maxpacket: 16 [ 534.808142][ T5847] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 534.900967][ T5848] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 534.909447][ T5848] usb 9-1: config 0 has no interface number 0 [ 534.915774][ T5848] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.927548][ T5848] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.937734][ T5848] usb 9-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 534.947162][ T5848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.134341][ T5847] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 535.142984][ T5847] usb 4-1: config 0 has no interface number 0 [ 535.269273][ T5847] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 535.279110][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.294470][ T5847] usb 4-1: Product: syz [ 535.301128][ T5847] usb 4-1: Manufacturer: syz [ 535.305976][ T5847] usb 4-1: SerialNumber: syz [ 535.419091][ T5848] usb 9-1: config 0 descriptor?? [ 535.475632][ T5847] usb 4-1: config 0 descriptor?? [ 536.047806][ T5847] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 536.058393][ T5847] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 536.070465][ T5847] asix 4-1:0.251: probe with driver asix failed with error -5 [ 536.178235][ T5848] holtek_mouse 0003:04D9:A081.0003: unknown main item tag 0x0 [ 536.186065][ T5848] holtek_mouse 0003:04D9:A081.0003: unknown main item tag 0x0 [ 536.194133][ T5848] holtek_mouse 0003:04D9:A081.0003: unknown main item tag 0x0 [ 536.202033][ T5848] holtek_mouse 0003:04D9:A081.0003: unknown main item tag 0x0 [ 536.217849][ T5848] holtek_mouse 0003:04D9:A081.0003: unknown main item tag 0x0 [ 536.225635][ T5848] holtek_mouse 0003:04D9:A081.0003: unknown main item tag 0x0 [ 536.233570][ T5848] holtek_mouse 0003:04D9:A081.0003: unknown main item tag 0x0 [ 536.242331][ T5848] holtek_mouse 0003:04D9:A081.0003: unknown main item tag 0x0 [ 537.225041][ T5848] holtek_mouse 0003:04D9:A081.0003: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.8-1/input1 [ 537.711295][ T5848] usb 9-1: USB disconnect, device number 8 [ 538.083276][ T5847] usb 4-1: USB disconnect, device number 4 [ 538.214156][ T7556] fido_id[7556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 539.158639][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 540.066678][ T5847] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 540.376558][ T5847] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 540.385953][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.394373][ T5847] usb 4-1: Product: syz [ 540.398989][ T5847] usb 4-1: Manufacturer: syz [ 540.409442][ T5847] usb 4-1: SerialNumber: syz [ 540.615395][ T5847] usb 4-1: config 0 descriptor?? [ 540.683126][ T5847] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 541.485652][ T5847] gspca_sunplus: reg_r err -32 [ 542.100331][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.108526][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 543.816596][ T5854] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 544.112571][ T5854] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 544.121499][ T5854] usb 9-1: config 0 has no interface number 0 [ 544.273718][ T5854] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 544.284744][ T5854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.299156][ T5854] usb 9-1: Product: syz [ 544.303461][ T5854] usb 9-1: Manufacturer: syz [ 544.310653][ T5854] usb 9-1: SerialNumber: syz [ 544.569288][ T5854] usb 9-1: config 0 descriptor?? [ 545.636552][ T5854] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 545.647821][ T5854] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 545.658922][ T5854] asix 9-1:0.251: probe with driver asix failed with error -5 [ 546.046828][ T5847] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 546.126913][ T5847] usb 4-1: USB disconnect, device number 5 [ 546.828316][ T5086] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 546.919396][ T5086] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 546.933427][ T5086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 547.028935][ T5086] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 547.041497][ T5086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 548.056771][ T5848] usb 9-1: USB disconnect, device number 9 [ 549.187277][ T5791] Bluetooth: hci6: command tx timeout [ 549.602015][ T3932] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.021151][ T3932] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.226926][ T3932] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.637883][ T3932] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.810165][ T7641] netlink: 'syz.2.306': attribute type 1 has an invalid length. [ 550.988878][ T7641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.145667][ T7644] macvlan2: entered promiscuous mode [ 551.151492][ T7644] macvlan2: entered allmulticast mode [ 551.170237][ T7644] bond1: entered allmulticast mode [ 551.175608][ T7644] bond1: entered promiscuous mode [ 551.183731][ T7644] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 551.200846][ T7644] team0: Port device macvlan2 added [ 551.252522][ T5791] Bluetooth: hci6: command tx timeout [ 551.440822][ T793] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 551.760955][ T793] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 551.773096][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.782657][ T793] usb 4-1: Product: syz [ 551.787248][ T793] usb 4-1: Manufacturer: syz [ 551.792045][ T793] usb 4-1: SerialNumber: syz [ 552.001799][ T793] usb 4-1: config 0 descriptor?? [ 552.230048][ T793] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 552.668524][ T3932] bridge_slave_1: left allmulticast mode [ 552.674508][ T3932] bridge_slave_1: left promiscuous mode [ 552.681477][ T3932] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.940929][ T3932] bridge_slave_0: left allmulticast mode [ 552.947844][ T3932] bridge_slave_0: left promiscuous mode [ 552.954658][ T3932] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.247351][ T793] gspca_sunplus: reg_r err -32 [ 553.316460][ T5791] Bluetooth: hci6: command tx timeout [ 553.673727][ T7659] input: syz0 as /devices/virtual/input/input17 [ 553.757126][ T5854] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 554.089361][ T5854] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 554.089500][ T5854] usb 1-1: config 0 has no interface number 0 [ 554.202416][ T5854] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 554.202577][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.202700][ T5854] usb 1-1: Product: syz [ 554.202800][ T5854] usb 1-1: Manufacturer: syz [ 554.202901][ T5854] usb 1-1: SerialNumber: syz [ 554.224424][ T5854] usb 1-1: config 0 descriptor?? [ 554.544482][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.614357][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.631415][ T3932] bond0 (unregistering): Released all slaves [ 554.713085][ T7606] chnl_net:caif_netlink_parms(): no params data found [ 554.746729][ T5854] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 554.746882][ T5854] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 554.747846][ T5854] asix 1-1:0.251: probe with driver asix failed with error -5 [ 555.440265][ T5791] Bluetooth: hci6: command tx timeout [ 556.145046][ T3932] hsr_slave_0: left promiscuous mode [ 556.183092][ T3932] hsr_slave_1: left promiscuous mode [ 556.194247][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.202173][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.317998][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.325624][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.557646][ T3932] veth1_macvtap: left promiscuous mode [ 556.563632][ T3932] veth0_macvtap: left promiscuous mode [ 556.570320][ T3932] veth1_vlan: left promiscuous mode [ 556.575905][ T3932] veth0_vlan: left promiscuous mode [ 556.728034][ T5847] usb 1-1: USB disconnect, device number 15 [ 558.627290][ T793] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 558.883626][ T793] usb 4-1: USB disconnect, device number 6 [ 559.687857][ T3932] team0 (unregistering): Port device team_slave_1 removed [ 559.841061][ T3932] team0 (unregistering): Port device team_slave_0 removed [ 560.170509][ T7698] netlink: 'syz.8.320': attribute type 1 has an invalid length. [ 560.506645][ T7698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 560.603368][ T7699] macvlan2: entered promiscuous mode [ 560.609058][ T7699] macvlan2: entered allmulticast mode [ 560.615587][ T7699] bond1: entered allmulticast mode [ 560.621013][ T7699] bond1: entered promiscuous mode [ 560.628146][ T7699] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 560.642229][ T7699] team0: Port device macvlan2 added [ 560.693249][ T7702] binder: BINDER_SET_CONTEXT_MGR already set [ 560.699727][ T7702] binder: 7701:7702 ioctl 4018620d 800002c0 returned -16 [ 560.767523][ T7702] binder: 7701:7702 ioctl c0306201 0 returned -14 [ 561.746726][ T5847] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 561.845396][ T3932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.001446][ T5847] usb 3-1: config index 0 descriptor too short (expected 61256, got 72) [ 562.016706][ T5847] usb 3-1: config 1 has an invalid interface number: 0 but max is -1 [ 562.027033][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.037519][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 562.046755][ T5847] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 562.224685][ T5847] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.235825][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 562.244184][ T5847] usb 3-1: SerialNumber: syz [ 562.356857][ T5847] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 562.364924][ T5847] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 562.371796][ T5847] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 562.507827][ T3932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.645191][ T5847] usb 3-1: USB disconnect, device number 8 [ 562.749151][ T7606] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.757089][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.764885][ T7606] bridge_slave_0: entered allmulticast mode [ 562.774727][ T7606] bridge_slave_0: entered promiscuous mode [ 562.850253][ T3932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.995318][ T7606] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.005988][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.014225][ T7606] bridge_slave_1: entered allmulticast mode [ 563.024287][ T7606] bridge_slave_1: entered promiscuous mode [ 563.066382][ T3932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.526545][ T5847] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 563.744687][ T5847] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 563.759270][ T5847] usb 9-1: config 0 has no interface number 0 [ 563.808091][ T5847] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 563.817751][ T5847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.828840][ T5847] usb 9-1: Product: syz [ 563.833140][ T5847] usb 9-1: Manufacturer: syz [ 563.838135][ T5847] usb 9-1: SerialNumber: syz [ 563.995531][ T5847] usb 9-1: config 0 descriptor?? [ 564.313006][ T3932] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.432144][ T7606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.553284][ T5847] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 564.568810][ T5847] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 564.585984][ T5847] asix 9-1:0.251: probe with driver asix failed with error -5 [ 564.752688][ T3932] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.923699][ T7606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.088683][ T3932] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.441994][ T3932] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.746987][ T7606] team0: Port device team_slave_0 added [ 565.810914][ T7606] team0: Port device team_slave_1 added [ 566.890215][ T5847] usb 9-1: USB disconnect, device number 10 [ 567.261296][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.268951][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.295594][ T7606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.433744][ T3932] bridge_slave_1: left allmulticast mode [ 567.448164][ T3932] bridge_slave_1: left promiscuous mode [ 567.454648][ T3932] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.550974][ T3932] bridge_slave_0: left allmulticast mode [ 567.559876][ T3932] bridge_slave_0: left promiscuous mode [ 567.566784][ T3932] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.667802][ T3932] bridge_slave_1: left allmulticast mode [ 567.673616][ T3932] bridge_slave_1: left promiscuous mode [ 567.680155][ T3932] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.727171][ T3932] bridge_slave_0: left allmulticast mode [ 567.733059][ T3932] bridge_slave_0: left promiscuous mode [ 567.739646][ T3932] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.108821][ T7753] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 568.283029][ T7751] binder: 7749:7751 ioctl c0306201 0 returned -14 [ 568.478136][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.558400][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.609465][ T3932] bond0 (unregistering): Released all slaves [ 568.978014][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.064795][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.113225][ T3932] bond0 (unregistering): Released all slaves [ 569.222812][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.230238][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.257033][ T7606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.364616][ T7753] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 569.718291][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 569.844411][ T7606] hsr_slave_0: entered promiscuous mode [ 569.853619][ T7606] hsr_slave_1: entered promiscuous mode [ 571.487914][ T3932] hsr_slave_0: left promiscuous mode [ 571.515048][ T3932] hsr_slave_1: left promiscuous mode [ 571.523214][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.538456][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.599317][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.607471][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.765646][ T3932] hsr_slave_0: left promiscuous mode [ 571.817125][ T3932] hsr_slave_1: left promiscuous mode [ 571.825719][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.833475][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.914589][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.923264][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.168403][ T3932] veth1_macvtap: left promiscuous mode [ 572.174380][ T3932] veth0_macvtap: left promiscuous mode [ 572.180701][ T3932] veth1_vlan: left promiscuous mode [ 572.186448][ T3932] veth0_vlan: left promiscuous mode [ 572.265021][ T3932] veth1_macvtap: left promiscuous mode [ 572.271030][ T3932] veth0_macvtap: left promiscuous mode [ 572.277007][ T3932] veth1_vlan: left promiscuous mode [ 572.282432][ T3932] veth0_vlan: left promiscuous mode [ 573.049585][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 573.062739][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 573.084431][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 573.107851][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.117942][ T793] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 573.131041][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 573.627885][ T7781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.696708][ T3932] team0 (unregistering): Port device team_slave_1 removed [ 573.728834][ T3932] team0 (unregistering): Port device team_slave_0 removed [ 573.972707][ T793] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 573.981286][ T793] usb 9-1: config 0 has no interface number 0 [ 574.315709][ T7781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.375496][ T793] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 574.384914][ T793] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.393419][ T793] usb 9-1: Product: syz [ 574.399622][ T793] usb 9-1: Manufacturer: syz [ 574.404435][ T793] usb 9-1: SerialNumber: syz [ 574.719024][ T793] usb 9-1: config 0 descriptor?? [ 575.317450][ T5791] Bluetooth: hci0: command tx timeout [ 575.345763][ T793] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 575.356356][ T793] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 575.367212][ T793] asix 9-1:0.251: probe with driver asix failed with error -5 [ 575.684996][ T3932] team0 (unregistering): Port device team_slave_1 removed [ 575.822205][ T3932] team0 (unregistering): Port device team_slave_0 removed [ 576.829044][ T793] usb 9-1: USB disconnect, device number 11 [ 577.403272][ T5791] Bluetooth: hci0: command tx timeout [ 577.485939][ T7777] chnl_net:caif_netlink_parms(): no params data found [ 577.652561][ T7794] binder: 7791:7794 ioctl c0306201 0 returned -14 [ 578.521171][ T7606] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 578.583319][ T7606] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 578.708615][ T7606] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 578.847532][ T7606] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 578.948218][ T7803] netlink: 'syz.8.346': attribute type 1 has an invalid length. [ 579.096923][ T7803] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.276899][ T7809] macvlan3: entered promiscuous mode [ 579.282359][ T7809] macvlan3: entered allmulticast mode [ 579.289169][ T7809] bond2: entered allmulticast mode [ 579.294415][ T7809] bond2: entered promiscuous mode [ 579.301589][ T7809] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 579.324021][ T7809] team0: Port device macvlan3 added [ 579.477073][ T793] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 579.478543][ T5791] Bluetooth: hci0: command tx timeout [ 579.758595][ T7777] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.766012][ T7777] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.774118][ T7777] bridge_slave_0: entered allmulticast mode [ 579.782765][ T7777] bridge_slave_0: entered promiscuous mode [ 579.871218][ T7777] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.880291][ T7777] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.888168][ T7777] bridge_slave_1: entered allmulticast mode [ 579.897196][ T7777] bridge_slave_1: entered promiscuous mode [ 580.381664][ T7777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.450289][ T7606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.502617][ T793] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.512904][ T793] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.526498][ T793] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 580.535800][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.590555][ T7777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.800361][ T7606] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.978593][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.986501][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.018982][ T7777] team0: Port device team_slave_0 added [ 581.153689][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.161259][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.198116][ T7777] team0: Port device team_slave_1 added [ 581.387481][ T7813] Bluetooth: MGMT ver 1.23 [ 581.469556][ T7777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.478395][ T7777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.504902][ T7777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.588616][ T5791] Bluetooth: hci0: command tx timeout [ 581.617899][ T7777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.625068][ T7777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.651606][ T7777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.909891][ T793] usb 1-1: usb_control_msg returned -32 [ 581.915805][ T793] usbtmc 1-1:16.0: can't read capabilities [ 582.218167][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.8.351'. [ 582.689380][ T7777] hsr_slave_0: entered promiscuous mode [ 582.703195][ T7777] hsr_slave_1: entered promiscuous mode [ 582.712582][ T7777] debugfs: 'hsr0' already exists in 'hsr' [ 582.718803][ T7777] Cannot create hsr debugfs directory [ 583.463934][ T5858] usb 1-1: USB disconnect, device number 16 [ 584.672436][ T5858] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 584.892376][ T5858] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 584.901492][ T5858] usb 1-1: config 0 has no interface number 0 [ 584.984535][ T5858] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 584.995172][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.003565][ T5858] usb 1-1: Product: syz [ 585.007969][ T5858] usb 1-1: Manufacturer: syz [ 585.012703][ T5858] usb 1-1: SerialNumber: syz [ 585.178501][ T5858] usb 1-1: config 0 descriptor?? [ 585.986680][ T5858] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 585.997352][ T5858] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 586.010351][ T5858] asix 1-1:0.251: probe with driver asix failed with error -32 [ 586.184447][ T7777] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 586.445537][ T7777] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 586.747893][ T7777] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 587.020935][ T7606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.058593][ T7777] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 587.644275][ T5858] usb 1-1: USB disconnect, device number 17 [ 587.798118][ T7836] netlink: 'syz.8.357': attribute type 1 has an invalid length. [ 587.898480][ T7836] 8021q: adding VLAN 0 to HW filter on device bond3 [ 588.179750][ T7836] macvlan4: entered promiscuous mode [ 588.185222][ T7836] macvlan4: entered allmulticast mode [ 588.191981][ T7836] bond3: entered allmulticast mode [ 588.197694][ T7836] bond3: entered promiscuous mode [ 588.205646][ T7836] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 588.264674][ T7836] team0: Port device macvlan4 added [ 589.378477][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 589.389701][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 589.398642][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 589.417183][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 589.428445][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 589.647648][ T7777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.217253][ T5791] Bluetooth: hci5: command 0x0406 tx timeout [ 590.267073][ T7777] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.388773][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.396524][ T5076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.597040][ T5848] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 591.036006][ T7777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 591.047689][ T7777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 591.477785][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.485160][ T5076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.537200][ T5086] Bluetooth: hci4: command tx timeout [ 591.663338][ T5848] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 591.673729][ T5848] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.687231][ T5848] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 591.696675][ T5848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.839970][ T7846] chnl_net:caif_netlink_parms(): no params data found [ 592.063518][ T7866] dvmrp0: entered allmulticast mode [ 593.278756][ T5848] usb 9-1: usb_control_msg returned -32 [ 593.284678][ T5848] usbtmc 9-1:16.0: can't read capabilities [ 593.556737][ T5086] Bluetooth: hci4: command tx timeout [ 594.408399][ T7606] veth0_vlan: entered promiscuous mode [ 594.505653][ T7777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.766991][ T5847] usb 9-1: USB disconnect, device number 12 [ 595.382750][ T7606] veth1_vlan: entered promiscuous mode [ 595.439380][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.446951][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.454643][ T7846] bridge_slave_0: entered allmulticast mode [ 595.463423][ T7846] bridge_slave_0: entered promiscuous mode [ 595.620171][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.628150][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.635781][ T7846] bridge_slave_1: entered allmulticast mode [ 595.645511][ T7846] bridge_slave_1: entered promiscuous mode [ 595.649302][ T5086] Bluetooth: hci4: command tx timeout [ 596.177128][ T7846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.299197][ T7846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.831820][ T7846] team0: Port device team_slave_0 added [ 596.945579][ T7846] team0: Port device team_slave_1 added [ 597.014569][ T7606] veth0_macvtap: entered promiscuous mode [ 597.292627][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.300232][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.328178][ T7846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.429048][ T5847] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 597.495744][ T7777] veth0_vlan: entered promiscuous mode [ 597.622258][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.629568][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.661267][ T7846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.703733][ T7777] veth1_vlan: entered promiscuous mode [ 597.717441][ T5086] Bluetooth: hci4: command tx timeout [ 597.904900][ T5847] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 597.913557][ T5847] usb 1-1: config 0 has no interface number 0 [ 598.109271][ T7777] veth0_macvtap: entered promiscuous mode [ 598.177482][ T5847] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 598.186849][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.194962][ T5847] usb 1-1: Product: syz [ 598.200655][ T5847] usb 1-1: Manufacturer: syz [ 598.205377][ T5847] usb 1-1: SerialNumber: syz [ 598.229144][ T7777] veth1_macvtap: entered promiscuous mode [ 598.381499][ T5847] usb 1-1: config 0 descriptor?? [ 598.884779][ T7846] hsr_slave_0: entered promiscuous mode [ 598.895672][ T7846] hsr_slave_1: entered promiscuous mode [ 598.904871][ T7846] debugfs: 'hsr0' already exists in 'hsr' [ 598.910953][ T7846] Cannot create hsr debugfs directory [ 598.924984][ T7606] veth1_macvtap: entered promiscuous mode [ 599.051122][ T5847] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 599.061938][ T5847] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 599.075323][ T5847] asix 1-1:0.251: probe with driver asix failed with error -32 [ 599.178016][ T7777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.254514][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.277954][ T7777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.358480][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.088673][ T3602] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.118191][ T7907] netlink: 'syz.8.368': attribute type 1 has an invalid length. [ 600.199277][ T7907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 600.327864][ T3602] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.462808][ T7907] macvlan5: entered promiscuous mode [ 600.468589][ T7907] macvlan5: entered allmulticast mode [ 600.475138][ T7907] bond4: entered allmulticast mode [ 600.480783][ T7907] bond4: entered promiscuous mode [ 600.488030][ T7907] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 600.502222][ T7907] team0: Port device macvlan5 added [ 600.547716][ T5858] usb 1-1: USB disconnect, device number 18 [ 600.657575][ T3602] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.730564][ T3602] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.781882][ T3602] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.857042][ T3602] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.906849][ T3602] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.915810][ T3602] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.434712][ T7916] dvmrp0: entered allmulticast mode [ 603.018577][ T7846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 603.133964][ T7846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 603.243211][ T7846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 603.418125][ T7846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 603.504942][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.511844][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 605.280492][ T7846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.564746][ T7846] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.146706][ T7846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 606.160148][ T7846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.207235][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.214770][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.820563][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.828278][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.867030][ T5847] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 608.156527][ T5847] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 608.164991][ T5847] usb 1-1: config 0 has no interface number 0 [ 608.253483][ T5847] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 608.263101][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.271707][ T5847] usb 1-1: Product: syz [ 608.275986][ T5847] usb 1-1: Manufacturer: syz [ 608.282281][ T5847] usb 1-1: SerialNumber: syz [ 608.453392][ T5847] usb 1-1: config 0 descriptor?? [ 609.162417][ T5847] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 609.173089][ T5847] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 609.185997][ T5847] asix 1-1:0.251: probe with driver asix failed with error -32 [ 609.278405][ T7976] netlink: 'syz.8.377': attribute type 1 has an invalid length. [ 609.448417][ T7976] 8021q: adding VLAN 0 to HW filter on device bond5 [ 609.762487][ T7980] macvlan6: entered promiscuous mode [ 609.768234][ T7980] macvlan6: entered allmulticast mode [ 610.532668][ T5847] usb 1-1: USB disconnect, device number 19 [ 611.643068][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.651234][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.884802][ T5791] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 611.904126][ T5791] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 611.919742][ T5791] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 611.948575][ T5791] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 611.967778][ T5791] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 612.176411][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.189947][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.371926][ T4369] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.603962][ T4369] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.908696][ T7846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.153994][ T5086] Bluetooth: hci7: command tx timeout [ 614.375987][ T4369] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.671877][ T4369] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.039210][ T7990] chnl_net:caif_netlink_parms(): no params data found [ 616.197174][ T5086] Bluetooth: hci7: command tx timeout [ 616.205737][ T4369] bridge_slave_1: left allmulticast mode [ 616.212180][ T4369] bridge_slave_1: left promiscuous mode [ 616.218770][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.371656][ T4369] bridge_slave_0: left allmulticast mode [ 616.377684][ T4369] bridge_slave_0: left promiscuous mode [ 616.391463][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.664856][ T5858] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 616.882698][ T5858] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 616.893215][ T5858] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.914305][ T5858] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 616.926784][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.291281][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.355508][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.395065][ T5858] usb 1-1: usb_control_msg returned -32 [ 617.402146][ T5858] usbtmc 1-1:16.0: can't read capabilities [ 617.464684][ T5858] usb 1-1: USB disconnect, device number 20 [ 617.482251][ T4369] bond0 (unregistering): Released all slaves [ 617.519014][ T8028] netlink: 'syz.8.386': attribute type 1 has an invalid length. [ 617.688924][ T8028] 8021q: adding VLAN 0 to HW filter on device bond6 [ 617.811836][ T8032] dvmrp0: entered allmulticast mode [ 617.950069][ T8029] macvlan7: entered promiscuous mode [ 617.955533][ T8029] macvlan7: entered allmulticast mode [ 617.962507][ T8029] bond6: entered allmulticast mode [ 617.967909][ T8029] bond6: entered promiscuous mode [ 617.974985][ T8029] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 617.989180][ T8029] team0: Port device macvlan7 added [ 618.276490][ T5086] Bluetooth: hci7: command tx timeout [ 618.927007][ T4369] hsr_slave_0: left promiscuous mode [ 618.985447][ T4369] hsr_slave_1: left promiscuous mode [ 618.993535][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.002617][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.208005][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.215550][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.413704][ T4369] veth1_macvtap: left promiscuous mode [ 619.419620][ T4369] veth0_macvtap: left promiscuous mode [ 619.425383][ T4369] veth1_vlan: left promiscuous mode [ 619.431034][ T4369] veth0_vlan: left promiscuous mode [ 620.427160][ T5086] Bluetooth: hci7: command tx timeout [ 621.233434][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 621.264090][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 622.741102][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.748716][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.756621][ T7990] bridge_slave_0: entered allmulticast mode [ 622.765303][ T7990] bridge_slave_0: entered promiscuous mode [ 622.976290][ T7846] veth0_vlan: entered promiscuous mode [ 622.998606][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.007663][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.015293][ T7990] bridge_slave_1: entered allmulticast mode [ 623.024785][ T7990] bridge_slave_1: entered promiscuous mode [ 623.134062][ T7846] veth1_vlan: entered promiscuous mode [ 623.617534][ T7990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.786393][ T7990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.222680][ T5858] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 624.335565][ T7846] veth0_macvtap: entered promiscuous mode [ 624.383871][ T7990] team0: Port device team_slave_0 added [ 624.491950][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.503422][ T5858] usb 9-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 624.512828][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.540097][ T7846] veth1_macvtap: entered promiscuous mode [ 624.745172][ T7990] team0: Port device team_slave_1 added [ 624.784433][ T5858] usb 9-1: config 0 descriptor?? [ 624.857521][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.224905][ T5858] hid_mf 0003:0079:1846.0004: item fetching failed at offset 5/7 [ 625.311931][ T5858] hid_mf 0003:0079:1846.0004: HID parse failed. [ 625.319061][ T5858] hid_mf 0003:0079:1846.0004: probe with driver hid_mf failed with error -22 [ 625.517900][ T5858] usb 9-1: USB disconnect, device number 13 [ 625.930788][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.944493][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.951949][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.979246][ T7990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.127786][ T1005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.168194][ T1005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.193072][ T1005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.237054][ T1005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.651757][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.659002][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.685344][ T7990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.176628][ T5854] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 627.386472][ T5854] usb 8-1: Using ep0 maxpacket: 16 [ 627.429051][ T5854] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.441016][ T5854] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 627.561482][ T5854] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 627.571325][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.579934][ T5854] usb 8-1: Product: syz [ 627.584218][ T5854] usb 8-1: Manufacturer: syz [ 627.589189][ T5854] usb 8-1: SerialNumber: syz [ 627.766961][ T5854] usb 8-1: config 0 descriptor?? [ 629.583619][ T7990] hsr_slave_0: entered promiscuous mode [ 629.597859][ T7990] hsr_slave_1: entered promiscuous mode [ 630.138462][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.8.401'. [ 630.676740][ T5854] usb 8-1: USB disconnect, device number 2 [ 632.266737][ T5858] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 632.514889][ T5858] usb 1-1: Using ep0 maxpacket: 8 [ 632.719033][ T5858] usb 1-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 632.728569][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.736851][ T5858] usb 1-1: Product: syz [ 632.741131][ T5858] usb 1-1: Manufacturer: syz [ 632.745831][ T5858] usb 1-1: SerialNumber: syz [ 632.837162][ T5858] usb 1-1: config 0 descriptor?? [ 632.947860][ T5858] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 633.193514][ T7990] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 633.226616][ T7990] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 633.271997][ T7990] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 633.313259][ T7990] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 633.507919][ T5858] gspca_sonixj: reg_w1 err -110 [ 633.513190][ T5858] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 633.627697][ T5858] usb 1-1: USB disconnect, device number 21 [ 636.357285][ T5854] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 636.536671][ T5847] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 636.582528][ T5854] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 636.591887][ T5854] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.602501][ T5854] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 636.611778][ T5854] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.623052][ T5854] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.821032][ T5847] usb 8-1: Using ep0 maxpacket: 16 [ 636.895085][ T5847] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 636.904541][ T5847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.913218][ T5847] usb 8-1: Product: syz [ 636.917874][ T5847] usb 8-1: Manufacturer: syz [ 636.922600][ T5847] usb 8-1: SerialNumber: syz [ 636.983823][ T5854] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 636.993341][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 637.002005][ T5854] usb 1-1: Product: syz [ 637.006536][ T5854] usb 1-1: Manufacturer: syz [ 637.065118][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.113829][ T5847] usb 8-1: config 0 descriptor?? [ 637.168275][ T5854] cdc_wdm 1-1:1.0: skipping garbage [ 637.181016][ T5854] cdc_wdm 1-1:1.0: skipping garbage [ 637.234133][ T5854] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 637.241457][ T5854] cdc_wdm 1-1:1.0: Unknown control protocol [ 637.347375][ T7990] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.456820][ T1876] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.464448][ T1876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.833061][ T8138] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 637.922519][ T7990] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 637.933624][ T7990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 638.061038][ T1876] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.068739][ T1876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.706958][ T5854] usb 1-1: USB disconnect, device number 22 [ 640.092453][ T5854] usb 8-1: USB disconnect, device number 3 [ 640.915787][ T8165] comedi comedi0: dmm32at: I/O port conflict (0x3,16) [ 641.087501][ T5854] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 641.341799][ T5854] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 641.351759][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.360124][ T5854] usb 1-1: Product: syz [ 641.364401][ T5854] usb 1-1: Manufacturer: syz [ 641.373978][ T5854] usb 1-1: SerialNumber: syz [ 641.542822][ T5854] usb 1-1: config 0 descriptor?? [ 641.614606][ T5854] hub 1-1:0.0: bad descriptor, ignoring hub [ 641.620885][ T5854] hub 1-1:0.0: probe with driver hub failed with error -5 [ 641.918982][ T5854] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 641.970584][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 642.067319][ T5854] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 642.076282][ T5854] usb 1-1: media controller created [ 642.184046][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 642.470065][ T8177] i2c i2c-1: Invalid block size returned: 239 [ 643.045854][ T5854] DVB: Unable to find symbol dib7000p_attach() [ 643.052877][ T5854] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 643.996977][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.005031][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.585009][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.658297][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.666859][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.931541][ T5854] rc_core: IR keymap rc-dib0700-rc5 not found [ 644.938031][ T5854] Registered IR keymap rc-empty [ 644.943781][ T5854] dvb-usb: could not initialize remote control. [ 644.950360][ T5854] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 645.287691][ T5854] usb 1-1: USB disconnect, device number 23 [ 645.730361][ T5848] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 645.934101][ T5854] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 646.377795][ T5848] usb 9-1: Using ep0 maxpacket: 16 [ 646.752231][ T5848] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 646.761799][ T5848] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.770316][ T5848] usb 9-1: Product: syz [ 646.774694][ T5848] usb 9-1: Manufacturer: syz [ 646.779559][ T5848] usb 9-1: SerialNumber: syz [ 647.239490][ T5854] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 647.485749][ T5854] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 647.488646][ T5848] usb 9-1: config 0 descriptor?? [ 647.495422][ T5854] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.510099][ T5854] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 647.527691][ T5854] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.541790][ T5854] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.743332][ T5854] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 647.753198][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 647.761812][ T5854] usb 8-1: Product: syz [ 647.766356][ T5854] usb 8-1: Manufacturer: syz [ 647.796546][ T5854] cdc_wdm 8-1:1.0: skipping garbage [ 647.801999][ T5854] cdc_wdm 8-1:1.0: skipping garbage [ 647.812249][ T5854] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 647.831321][ T5854] cdc_wdm 8-1:1.0: Unknown control protocol [ 648.442972][ T8216] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 649.552821][ T5854] usb 9-1: USB disconnect, device number 14 [ 650.158209][ T5854] usb 8-1: USB disconnect, device number 4 [ 650.977868][ T7990] veth0_vlan: entered promiscuous mode [ 651.226003][ T7990] veth1_vlan: entered promiscuous mode [ 651.861575][ T7990] veth0_macvtap: entered promiscuous mode [ 651.997022][ T5847] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 652.012547][ T7990] veth1_macvtap: entered promiscuous mode [ 652.318737][ T5847] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 652.334384][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.344587][ T5847] usb 5-1: Product: syz [ 652.348987][ T5847] usb 5-1: Manufacturer: syz [ 652.353694][ T5847] usb 5-1: SerialNumber: syz [ 652.376911][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.479366][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.599558][ T5847] usb 5-1: config 0 descriptor?? [ 652.680312][ T1876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.693294][ T5847] hub 5-1:0.0: bad descriptor, ignoring hub [ 652.699703][ T5847] hub 5-1:0.0: probe with driver hub failed with error -5 [ 652.860545][ T3602] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.960385][ T5847] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 653.028450][ T3602] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.063804][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 653.117799][ T5847] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 653.126666][ T5847] usb 5-1: media controller created [ 653.205583][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.485213][ T3602] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.531793][ T8245] i2c i2c-1: Invalid block size returned: 239 [ 654.978961][ T5854] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 655.280657][ T5854] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 655.289316][ T5854] usb 8-1: config 0 has no interface number 0 [ 655.354940][ T5854] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 655.365326][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.374086][ T5854] usb 8-1: Product: syz [ 655.378644][ T5854] usb 8-1: Manufacturer: syz [ 655.383438][ T5854] usb 8-1: SerialNumber: syz [ 655.558860][ T5854] usb 8-1: config 0 descriptor?? [ 655.714923][ T5847] DVB: Unable to find symbol dib7000p_attach() [ 655.721811][ T5847] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 656.370266][ T5847] rc_core: IR keymap rc-dib0700-rc5 not found [ 656.376856][ T5847] Registered IR keymap rc-empty [ 656.382888][ T5847] dvb-usb: could not initialize remote control. [ 656.389455][ T5847] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 656.401676][ T5854] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 656.412394][ T5854] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 656.434322][ T5854] asix 8-1:0.251: probe with driver asix failed with error -32 [ 656.490457][ T5858] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 656.659126][ T5847] usb 5-1: USB disconnect, device number 8 [ 656.696816][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 656.863194][ T5858] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 656.873234][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.881570][ T5858] usb 1-1: Product: syz [ 656.885926][ T5858] usb 1-1: Manufacturer: syz [ 656.890849][ T5858] usb 1-1: SerialNumber: syz [ 657.227208][ T5858] usb 1-1: config 0 descriptor?? [ 657.503309][ T5847] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 658.378127][ T5858] usb 8-1: USB disconnect, device number 5 [ 658.557902][ T5847] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 658.799001][ T5847] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 658.808179][ T5847] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 658.818659][ T5847] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 658.827901][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 658.839344][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 658.886812][ T5858] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 659.077916][ T5858] usb 9-1: Using ep0 maxpacket: 32 [ 659.102075][ T5847] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 659.113848][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 659.122207][ T5847] usb 5-1: Product: syz [ 659.126743][ T5847] usb 5-1: Manufacturer: syz [ 659.150251][ T5858] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 659.161576][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.284515][ T5858] usb 9-1: config 0 descriptor?? [ 659.375766][ T5847] cdc_wdm 5-1:1.0: skipping garbage [ 659.381711][ T5847] cdc_wdm 5-1:1.0: skipping garbage [ 659.387526][ T5847] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 659.542304][ T5858] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 659.654225][ T5858] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 659.783687][ T5858] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 659.791779][ T5858] usb 9-1: media controller created [ 659.952227][ T5858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 660.298311][ T5847] usb 1-1: USB disconnect, device number 24 [ 660.875228][ T8286] ===================================================== [ 660.882670][ T8286] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 660.890301][ T8286] _copy_to_user+0xcc/0x120 [ 660.895031][ T8286] i2cdev_ioctl_smbus+0x586/0x660 [ 660.900418][ T8286] compat_i2cdev_ioctl+0x48f/0xb40 [ 660.905754][ T8286] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 660.911670][ T8286] ia32_sys_call+0x25d9/0x4340 [ 660.916807][ T8286] __do_fast_syscall_32+0x154/0x330 [ 660.922269][ T8286] do_fast_syscall_32+0x38/0x80 [ 660.930382][ T8286] do_SYSENTER_32+0x1f/0x30 [ 660.935140][ T8286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 660.946252][ T8286] [ 660.948704][ T8286] Uninit was stored to memory at: [ 660.953989][ T8286] __i2c_smbus_xfer+0x24ce/0x2eb0 [ 660.959499][ T8286] i2c_smbus_xfer+0x2cd/0x460 [ 660.964359][ T8286] i2cdev_ioctl_smbus+0x4a1/0x660 [ 660.969884][ T8286] compat_i2cdev_ioctl+0x48f/0xb40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 660.975287][ T8286] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 660.981205][ T8286] ia32_sys_call+0x25d9/0x4340 [ 660.987964][ T8286] __do_fast_syscall_32+0x154/0x330 [ 660.993432][ T8286] do_fast_syscall_32+0x38/0x80 [ 660.998665][ T8286] do_SYSENTER_32+0x1f/0x30 [ 661.003463][ T8286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 661.010265][ T8286] [ 661.012690][ T8286] Local variable msgbuf1.i created at: [ 661.019913][ T8286] __i2c_smbus_xfer+0x830/0x2eb0 [ 661.025078][ T8286] i2c_smbus_xfer+0x2cd/0x460 [ 661.031687][ T8286] [ 661.034115][ T8286] Byte 0 of 1 is uninitialized [ 661.039673][ T8286] Memory access of size 1 starts at ffff88811b303c76 [ 661.046745][ T8286] Data copied to user address 0000000080000040 [ 661.053021][ T8286] [ 661.055545][ T8286] CPU: 1 UID: 0 PID: 8286 Comm: syz.8.439 Tainted: G L syzkaller #0 PREEMPT(none) [ 661.066656][ T8286] Tainted: [L]=SOFTLOCKUP [ 661.071040][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 661.082140][ T8286] ===================================================== [ 661.089348][ T8286] Disabling lock debugging due to kernel taint [ 661.095636][ T8286] Kernel panic - not syncing: kmsan.panic set ... [ 661.102322][ T8286] CPU: 1 UID: 0 PID: 8286 Comm: syz.8.439 Tainted: G B L syzkaller #0 PREEMPT(none) [ 661.113343][ T8286] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 661.119033][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 661.129369][ T8286] Call Trace: [ 661.132795][ T8286] [ 661.135845][ T8286] __dump_stack+0x26/0x30 [ 661.140402][ T8286] dump_stack_lvl+0x50/0x1c0 [ 661.145203][ T8286] ? dump_stack+0x12/0x25 [ 661.149733][ T8286] dump_stack+0x1e/0x25 [ 661.154010][ T8286] vpanic+0x435/0xd30 [ 661.158142][ T8286] panic+0x15d/0x160 [ 661.162292][ T8286] kmsan_report+0x31c/0x320 [ 661.167041][ T8286] ? kmsan_internal_check_memory+0x1e1/0x230 [ 661.173160][ T8286] ? kmsan_copy_to_user+0xf1/0x190 [ 661.178424][ T8286] ? _copy_to_user+0xcc/0x120 [ 661.183311][ T8286] ? i2cdev_ioctl_smbus+0x586/0x660 [ 661.188737][ T8286] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 661.194285][ T8286] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 661.200228][ T8286] ? ia32_sys_call+0x25d9/0x4340 [ 661.205432][ T8286] ? __do_fast_syscall_32+0x154/0x330 [ 661.211053][ T8286] ? do_fast_syscall_32+0x38/0x80 [ 661.216230][ T8286] ? do_SYSENTER_32+0x1f/0x30 [ 661.221118][ T8286] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 661.227850][ T8286] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 661.233285][ T8286] ? __i2c_transfer+0x1179/0x3110 [ 661.238480][ T8286] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 661.245056][ T8286] ? kmsan_get_metadata+0xfb/0x160 [ 661.250406][ T8286] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 661.256484][ T8286] ? __i2c_smbus_xfer+0x1e54/0x2eb0 [ 661.261910][ T8286] ? kmsan_get_metadata+0xfb/0x160 [ 661.267289][ T8286] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 661.273387][ T8286] kmsan_internal_check_memory+0x1e1/0x230 [ 661.279481][ T8286] kmsan_copy_to_user+0xf1/0x190 [ 661.284660][ T8286] _copy_to_user+0xcc/0x120 [ 661.289412][ T8286] i2cdev_ioctl_smbus+0x586/0x660 [ 661.294725][ T8286] compat_i2cdev_ioctl+0x48f/0xb40 [ 661.300110][ T8286] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 661.305988][ T8286] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 661.311794][ T8286] ? kmsan_get_metadata+0xfb/0x160 [ 661.317171][ T8286] ? kmsan_get_metadata+0xfb/0x160 [ 661.322557][ T8286] ia32_sys_call+0x25d9/0x4340 [ 661.327606][ T8286] __do_fast_syscall_32+0x154/0x330 [ 661.333080][ T8286] do_fast_syscall_32+0x38/0x80 [ 661.338193][ T8286] do_SYSENTER_32+0x1f/0x30 [ 661.342941][ T8286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 661.349522][ T8286] RIP: 0023:0xf7fd5539 [ 661.353727][ T8286] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 661.373480][ T8286] RSP: 002b:00000000f548455c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 661.382152][ T8286] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000720 [ 661.390402][ T8286] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.398519][ T8286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 661.406588][ T8286] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 661.414738][ T8286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 661.422924][ T8286] [ 661.426784][ T8286] Kernel Offset: disabled [ 661.431194][ T8286] Rebooting in 86400 seconds..