last executing test programs: 2m3.780121054s ago: executing program 0 (id=4676): clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b8b87c0}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_nanosleep(0x0, 0x1, &(0x7f0000000200)={0x6553f101, 0x17c841c0}, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000200)={0x6553f101, 0x2f9fc5c0}, 0x0) 2m3.6468577s ago: executing program 0 (id=4678): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 2m3.638363137s ago: executing program 0 (id=4679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x4, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1000001, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 2m3.550954261s ago: executing program 0 (id=4680): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000001080), 0x2) nanosleep(&(0x7f00000010c0)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000001100)=""/4096, 0x1000) writev(r0, &(0x7f0000002100)=[{&(0x7f0000002140)="02fa", 0x2}, {&(0x7f0000002180)="0200", 0x2}, {&(0x7f00000021c0)="0200", 0x2}], 0x3) writev(r0, &(0x7f0000002200)=[{&(0x7f0000002240)="02fa", 0x2}, {&(0x7f0000002280)="0200", 0x2}, {&(0x7f00000022c0)="0200", 0x2}], 0x3) 2m1.102649976s ago: executing program 32 (id=4635): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @loopback}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00'/74, 0x41) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 1m55.499185728s ago: executing program 33 (id=4650): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @loopback}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00\x00\x00\x00\x00', 0x41) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/129, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 1m52.893984745s ago: executing program 6 (id=4698): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40b0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r4, 0x84, 0xb, 0xfffffffffffffffe, &(0x7f0000000040)=0x41) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m52.832313922s ago: executing program 6 (id=4704): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040720c0d0000010102030109022e0001010080320904000004ffffff0007050102000200070581020002000705020200020007058202000200"], 0x0) nanosleep(&(0x7f0000000040)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl(r1, 0x8914, &(0x7f0000000080)="63616e300000000000000000000000000100"/40) syz_usb_ep_write(r0, 0x82, 0x10, &(0x7f0000000100)='AAAAAAAAAAAAAAAA') 1m50.549461838s ago: executing program 6 (id=4712): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80), 0x0, 0x0) 1m50.470644498s ago: executing program 6 (id=4713): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="01008000800000000000000200004000"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 1m48.031683725s ago: executing program 34 (id=4680): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000001080), 0x2) nanosleep(&(0x7f00000010c0)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000001100)=""/4096, 0x1000) writev(r0, &(0x7f0000002100)=[{&(0x7f0000002140)="02fa", 0x2}, {&(0x7f0000002180)="0200", 0x2}, {&(0x7f00000021c0)="0200", 0x2}], 0x3) writev(r0, &(0x7f0000002200)=[{&(0x7f0000002240)="02fa", 0x2}, {&(0x7f0000002280)="0200", 0x2}, {&(0x7f00000022c0)="0200", 0x2}], 0x3) 1m42.19138063s ago: executing program 5 (id=4742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8924, &(0x7f0000000700)={'wlan0\x00', @ifru_addrs=@generic={0x1, "08021100"}}) ioctl$sock_ifreq(r3, 0x8914, &(0x7f0000000700)={'wlan0\x00', @ifru_flags=0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, &(0x7f0000000340)) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000340)=@mgmt_frame=@beacon={{{}, {}, @device_a, @device_b, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x1, 0x0, 0x0, 0x1}}}, 0x4f) 1m40.935945056s ago: executing program 5 (id=4748): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x2}, @in=@multicast2}, {@in=@empty, 0x4, 0x2b}, @in=@loopback, {0x1000, 0x0, 0x0, 0x200000000000, 0xfffffffffffffffd, 0x1}, {0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x4}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10}}, 0xf0}}, 0x40b0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r3, 0x84, 0xb, 0xfffffffffffffffe, &(0x7f0000000040)=0x41) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m40.663251613s ago: executing program 5 (id=4750): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback}}, 0x24) listen(r0, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback}}, 0x24) sendto$rxrpc(r1, &(0x7f0000000100)="01020304", 0x4, 0x8000, 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f0000000200), 0x4, 0x0, 0x0, 0x0) 1m39.629199177s ago: executing program 5 (id=4752): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000314050000000000000000000900020072786530000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000a00)={0xc, 0x8, 0xfa00, {&(0x7f0000000b00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000c00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000d00)={0xc, 0x8, 0xfa00, {&(0x7f0000000e00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r3}}, 0x120) nanosleep(&(0x7f0000001000)={0x5}, 0x0) 1m38.648097436s ago: executing program 5 (id=4764): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220005007e05000006030000000000000000000005010905a1010901a10005091901290315002501950375018102950175058101c0c0"], 0x111c) 1m34.863328872s ago: executing program 35 (id=4713): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="01008000800000000000000200004000"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 1m32.821020767s ago: executing program 7 (id=4777): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075d, 0xcd7}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 1m32.718134454s ago: executing program 7 (id=4778): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1m32.704828248s ago: executing program 7 (id=4779): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x48, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3a, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x26, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc4111"}}}}}}, 0x0) readv(r0, 0x0, 0x0) 1m32.650044957s ago: executing program 7 (id=4780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x4, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1000001, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1m32.510673022s ago: executing program 7 (id=4781): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, 0x0, 0x2e8}}], 0x1, 0x0) 1m32.385585785s ago: executing program 7 (id=4783): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x1111, @loopback}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r1, &(0x7f0000000100)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00', 0x41) nanosleep(&(0x7f0000000180)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f00000001c0)="01008000800000000000000200004000", 0x10) write(r2, &(0x7f0000000200)='\x00'/16, 0x10) write(r2, &(0x7f0000000240)='\x00'/16, 0x10) write(r2, &(0x7f0000000280)='\x00'/16, 0x10) nanosleep(&(0x7f00000002c0)={0x0, 0x1dcd6500}, 0x0) 1m29.864902551s ago: executing program 5 (id=4787): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) nanosleep(&(0x7f0000000000)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000001000)=""/1, 0x1) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000110)="0200", 0x2}, {&(0x7f0000000120)="0200", 0x2}], 0x3) 1m17.360545355s ago: executing program 36 (id=4783): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x1111, @loopback}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r1, &(0x7f0000000100)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00', 0x41) nanosleep(&(0x7f0000000180)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f00000001c0)="01008000800000000000000200004000", 0x10) write(r2, &(0x7f0000000200)='\x00'/16, 0x10) write(r2, &(0x7f0000000240)='\x00'/16, 0x10) write(r2, &(0x7f0000000280)='\x00'/16, 0x10) nanosleep(&(0x7f00000002c0)={0x0, 0x1dcd6500}, 0x0) 1m14.471502997s ago: executing program 37 (id=4787): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) nanosleep(&(0x7f0000000000)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000001000)=""/1, 0x1) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000110)="0200", 0x2}, {&(0x7f0000000120)="0200", 0x2}], 0x3) 1m6.294372879s ago: executing program 3 (id=4852): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1m6.172876724s ago: executing program 3 (id=4854): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m4.641836539s ago: executing program 3 (id=4862): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x1b, 0x4, @tid=r1}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x0, &(0x7f0000000140)={{}, {0x2}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m4.526718171s ago: executing program 3 (id=4863): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}}, 0x20}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1m4.060975854s ago: executing program 3 (id=4865): openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 1m3.967634555s ago: executing program 3 (id=4867): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000001000)=""/4096, 0x1000) writev(r0, &(0x7f0000002000)=[{&(0x7f0000002100)="02fa", 0x2}, {&(0x7f0000002200)="0200", 0x2}, {&(0x7f0000002300)="0200", 0x2}], 0x3) read(r0, &(0x7f0000003000)=""/4096, 0x1000) writev(r0, &(0x7f0000004000)=[{&(0x7f0000004100)="02fa", 0x2}, {&(0x7f0000004200)="0200", 0x2}, {&(0x7f0000004300)="0200", 0x2}], 0x3) 1m3.847266582s ago: executing program 8 (id=4868): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e20, 0xe46, @mcast1, 0x3}}}, 0xa0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1m3.752719488s ago: executing program 8 (id=4869): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e80200000000000029"], 0x2e8}}], 0x1, 0x0) 1m3.6900436s ago: executing program 8 (id=4870): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @empty}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x45) (async) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="01008000800000000000000200004000"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 1m2.662496664s ago: executing program 8 (id=4872): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getlink={0x20, 0x12, 0x301, 0x1}, 0x20}}, 0x0) 1m2.430371846s ago: executing program 8 (id=4873): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x1043}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e87, @rand_addr=0x64010101}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r3, 0x10}}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e87, @rand_addr=0x64010101}, 0x10) sendto$inet(r4, &(0x7f0000000380)='\x00'/20, 0x14, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x10000000}, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000003c0)={0x1}, 0x8) close(r4) nanosleep(&(0x7f0000000400)={0x0, 0x10000000}, 0x0) 1m1.257002758s ago: executing program 8 (id=4876): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000100)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0), 0x2) nanosleep(&(0x7f0000000200)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2) 48.906413943s ago: executing program 38 (id=4867): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000001000)=""/4096, 0x1000) writev(r0, &(0x7f0000002000)=[{&(0x7f0000002100)="02fa", 0x2}, {&(0x7f0000002200)="0200", 0x2}, {&(0x7f0000002300)="0200", 0x2}], 0x3) read(r0, &(0x7f0000003000)=""/4096, 0x1000) writev(r0, &(0x7f0000004000)=[{&(0x7f0000004100)="02fa", 0x2}, {&(0x7f0000004200)="0200", 0x2}, {&(0x7f0000004300)="0200", 0x2}], 0x3) 45.306906516s ago: executing program 39 (id=4876): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000100)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0), 0x2) nanosleep(&(0x7f0000000200)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2) 13.07813676s ago: executing program 1 (id=4955): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x3000000}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./uverbs0\x00', 0x81b6, 0xe7c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./uverbs0\x00', 0x2, 0x0) ioctl(r1, 0xc0181b01, &(0x7f0000000400)="58000000050004000000000000000000000000000000000000000000010000002000000000000000010000000000000000000000000000000200800001000000000200000000007f0300080001000000000300000000007f") 13.077164561s ago: executing program 0 (id=4902): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x0, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0xf}, r2, 0x3e8}}, 0x48) 13.076125996s ago: executing program 0 (id=4957): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) nanosleep(&(0x7f0000000200)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) nanosleep(&(0x7f0000000240)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2) 13.045932157s ago: executing program 1 (id=4958): r0 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x6553f100}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) timerfd_settime(r0, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) read(r0, &(0x7f0000000400)=""/8, 0x8) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x1, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x2, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x3, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x4, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x5, 0x0, 0x10}) timerfd_settime(r0, 0x1, &(0x7f0000000300)={{}, {0x6553f101, 0x3b9a06b0}}, 0x0) read(r0, &(0x7f0000000400)=""/8, 0x8) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0xb, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0xc, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0xd, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0xe, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0xf, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x10, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x11, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x12, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x13, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x14, 0x0, 0x10}) 12.866335919s ago: executing program 1 (id=4961): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000314050000000000000000000900020072786530000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000900)={0x15, 0x110, 0xfa00, {r3, 0x3e8, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000a00)={0xc, 0x8, 0xfa00, {&(0x7f0000000b00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000c00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000d00)={0xc, 0x8, 0xfa00, {&(0x7f0000000e00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r3}}, 0x120) nanosleep(&(0x7f0000001000)={0x0, 0x10000000}, 0x0) 11.984358153s ago: executing program 1 (id=4964): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080fa09040001040000000007058102400000070582024000000705010240000007050202400000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000300)={0xc0, 0x1, 0x20, '\x00'/32}, &(0x7f000000020c)={0x0, 0xa, 0x1}, &(0x7f0000000216)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) nanosleep(&(0x7f0000000400)={0x3}, 0x0) 11.835156516s ago: executing program 9 (id=4965): r0 = syz_usb_connect(0x2, 0x69, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400000000000000000000109025700020100803209040000000e0100000d240100011e00000000000101082402010002000009240302010100010009040100010e0200000e2401011700810002000000010009240c01000000000007058102000200"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x20, 0x81, 0x1a, "0000010100"/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x20, 0x81, 0x1a, "0000010100"/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x20, 0x81, 0x1a, "0000010100"/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x20, 0x81, 0x1a, "0000010100"/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x20, 0x81, 0x1a, "0000010100"/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000400)={0x2}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000500), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000600)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000700)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000800)=0x1) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000900)='\x00'/16) 10.550758122s ago: executing program 4 (id=4969): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff405e0491021401010203010902200001010080fa0904000002ff5d81000705810300000407050203000004"], 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) syz_usb_disconnect(r0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) 8.836713995s ago: executing program 1 (id=4975): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000003140500000000000000000009000200727865300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @empty}, {0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000a00)={0xc, 0x8, 0xfa00, {&(0x7f0000000b00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000c00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000d00)={0xc, 0x8, 0xfa00, {&(0x7f0000000e00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r3}}, 0x120) nanosleep(&(0x7f0000001000)={0x5}, 0x0) 7.897583041s ago: executing program 1 (id=4978): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x17, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010905a10105091901290815002501950875018102c0"}}, 0x12f) nanosleep(&(0x7f0000000300)={0x1}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x3, '0\x00\x00'}}, 0x9) 7.81700187s ago: executing program 9 (id=4979): r0 = syz_usb_connect(0x3, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40f30c75930001010203010902350001010080fa0904000005ff0000000705810200020007058202000200070501020002000705020200020007050302000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000800)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000c00)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000e00)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000001000)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000001500)={0x1}, 0x0) 6.88840492s ago: executing program 4 (id=4981): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2100000008000000080000006400000000040000ffffffff000000000000000000000000000000000000000000000000ffffffff00"/88], 0x50) 6.705600634s ago: executing program 4 (id=4982): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x20, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010905a1010901a10005091901290315002501950375018102950175058101"}}, 0x138) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 5.998324109s ago: executing program 2 (id=4983): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x4, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1000001, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 5.747461797s ago: executing program 2 (id=4984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 5.699002308s ago: executing program 4 (id=4985): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401aeb00280001010203010902190001010080fa0904000001ffffff0007058202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x10, &(0x7f0000000700)={0x40, 0x2, 0x2, "1111"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x1}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x10, &(0x7f0000000700)={0x40, 0x2, 0x2, "1111"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x1}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x10, &(0x7f0000000700)={0x40, 0x2, 0x2, "1111"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x82, 0x4, &(0x7f0000000500)="33950000") r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2) read(r1, &(0x7f0000000400)=""/4096, 0x1000) 5.363015894s ago: executing program 2 (id=4986): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca0810010001000000010902200001010080fa0904000002ff0000000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000100)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000200)='AAAAAAAAAAAAAAAA') nanosleep(&(0x7f0000000300)={0x2}, 0x0) 4.589985678s ago: executing program 9 (id=4987): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 4.43499033s ago: executing program 9 (id=4988): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x13, 0x5, 0x54c, 0x306, 0x0, 0x0, "05010901a101090115002501750195018102c0"}}, 0x12b) clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x1}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x1}, 0x0) 3.437640986s ago: executing program 9 (id=4989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.576895592s ago: executing program 4 (id=4990): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback}}, 0x24) listen(r0, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="01020304", 0x4}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom$rxrpc(r0, &(0x7f0000000500), 0x4, 0x0, 0x0, 0x0) 1.678786725s ago: executing program 9 (id=4991): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000003140500000000000000000009000200727865300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @empty}, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000a00)={0xc, 0x8, 0xfa00, {&(0x7f0000000b00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000c00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000d00)={0xc, 0x8, 0xfa00, {&(0x7f0000000e00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r3}}, 0x120) nanosleep(&(0x7f0000001000)={0x5}, 0x0) 1.300886628s ago: executing program 2 (id=4992): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000540008001c00010000000000000000000000000000000000000000001800000034000200"/156], 0x9c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xa}, {0x1, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002080)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x14}, {0x1, 0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000003080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x101}, {0xa, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000004080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x102}, {0xa, 0x2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000005040)={&(0x7f0000005080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x103}, {0xa, 0x3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000006040)={&(0x7f0000006080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x104}, {0xa, 0x4}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000007040)={&(0x7f0000007080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x105}, {0xa, 0x5}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000008040)={&(0x7f0000008080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x106}, {0xa, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009000)={0x0, 0x0, &(0x7f0000009040)={&(0x7f0000009080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x107}, {0xa, 0x7}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000a000)={0x0, 0x0, &(0x7f000000a040)={&(0x7f000000a080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x108}, {0xa, 0x8}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f000000b040)={&(0x7f000000b080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x109}, {0xa, 0x9}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000c000)={0x0, 0x0, &(0x7f000000c040)={&(0x7f000000c080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x10a}, {0xa, 0xa}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) 158.127178ms ago: executing program 4 (id=4993): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x7c, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x7c, &(0x7f0000000400)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x7c, &(0x7f0000000600)={0xc0, 0x0, 0x8, "ffffffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000700)={0x3}, 0x0) 133.29294ms ago: executing program 2 (id=4994): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x4, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1000001, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 0s ago: executing program 2 (id=4995): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl(r1, 0x8914, &(0x7f0000000200)="757362300000000000000000000000000100"/40) kernel console output (not intermixed with test programs): d cc 0x0c23 length: 249 > 4 [ 1329.600773][T23220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1329.776293][T17931] wiimote 0005:057E:0306.0041: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 1329.786151][T17931] wiimote 0005:057E:0306.0041: New device registered [ 1329.796215][T23279] wiimote 0005:057E:0306.0041: Device removed [ 1329.876378][T23282] fido_id[23282]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1330.067749][T23278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.075195][T23278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.082846][T23278] bridge_slave_0: entered allmulticast mode [ 1330.091574][T23278] bridge_slave_0: entered promiscuous mode [ 1330.098477][T23278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.099061][T23278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.100247][T23278] bridge_slave_1: entered allmulticast mode [ 1330.105144][T23278] bridge_slave_1: entered promiscuous mode [ 1330.138775][T12407] Bluetooth: hci2: command tx timeout [ 1330.152834][T23278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.159777][T23278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.195784][T23278] team0: Port device team_slave_0 added [ 1330.202844][T23278] team0: Port device team_slave_1 added [ 1330.231256][T23278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.231310][T23278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.231357][T23278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.236968][T23278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.237019][T23278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.237095][T23278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.346490][T23278] hsr_slave_0: entered promiscuous mode [ 1330.349614][T23278] hsr_slave_1: entered promiscuous mode [ 1330.352003][T23278] debugfs: 'hsr0' already exists in 'hsr' [ 1330.352063][T23278] Cannot create hsr debugfs directory [ 1330.592203][T23278] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1330.602261][T23278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1330.605665][T23278] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1330.621188][T23278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1330.623686][T23278] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1330.636606][T23278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1330.648277][T23278] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1330.662069][T23278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1330.690835][T23278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.690978][T23278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.691279][T23278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.691392][T23278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.780847][T23278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.796678][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.805393][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.823160][T23278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.836185][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.836421][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.859727][T17931] wiimote 0005:057E:0306.0041: detected device: Nintendo Wii Remote (Gen 1) [ 1330.874286][T19730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.874400][T19730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.908257][T17931] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0041/input/input130 [ 1330.949861][T17931] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0041/input/input131 [ 1331.008878][T16091] misc userio: Buffer overflowed, userio client isn't keeping up [ 1331.053783][T17931] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0041/input/input129 [ 1331.171208][T23278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.262310][T23278] veth0_vlan: entered promiscuous mode [ 1331.284750][T23278] veth1_vlan: entered promiscuous mode [ 1331.295916][T23298] syzkaller0: entered promiscuous mode [ 1331.295973][T23298] syzkaller0: entered allmulticast mode [ 1331.354393][T23278] veth0_macvtap: entered promiscuous mode [ 1331.369928][T23278] veth1_macvtap: entered promiscuous mode [ 1331.394201][T23278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.416857][T23278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.448745][T19721] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.448812][T19721] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.448868][T19721] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.448908][T19721] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.661170][T12407] Bluetooth: hci6: command tx timeout [ 1331.697618][T19730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.697669][T19730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.807306][T19730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.807358][T19730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.979899][ T834] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1332.130958][ T834] usb 6-1: not running at top speed; connect to a high speed hub [ 1332.131017][ T834] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1332.153777][ T834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.162111][ T834] usb 6-1: Product: syz [ 1332.162141][ T834] usb 6-1: Manufacturer: syz [ 1332.162159][ T834] usb 6-1: SerialNumber: syz [ 1332.209102][ T9084] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1332.219418][T12407] Bluetooth: hci2: command tx timeout [ 1332.371419][ T9084] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice= 1.00 [ 1332.387159][ T9084] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.395786][ T9084] usb 7-1: Product: syz [ 1332.400348][ T9084] usb 7-1: Manufacturer: syz [ 1332.405119][ T9084] usb 7-1: SerialNumber: syz [ 1332.458158][T23316] syz_tun: entered promiscuous mode [ 1332.467681][T23316] vlan0: entered promiscuous mode [ 1332.954656][ C1] usb 6-1: received EP1 urb->status = -71 [ 1332.969613][ T834] input: as /devices/platform/dummy_hcd.5/usb6/6-1/input/input132 [ 1333.035004][ T834] usb 6-1: USB disconnect, device number 4 [ 1333.097269][T22914] udevd[22914]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1333.595524][T23327] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4709'. [ 1333.628739][ T9084] peak_usb 7-1:1.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1333.628906][ T9084] peak_usb 7-1:1.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1333.725983][ T9084] peak_usb 7-1:1.0: probe with driver peak_usb failed with error -71 [ 1333.736492][ T834] wiimote 0005:057E:0306.0042: hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 1333.746652][T12407] Bluetooth: hci6: command tx timeout [ 1333.761973][ T9084] usb 7-1: USB disconnect, device number 2 [ 1333.794661][ T834] wiimote 0005:057E:0306.0042: New device registered [ 1334.369062][T16091] misc userio: Buffer overflowed, userio client isn't keeping up [ 1334.544057][T23331] wiimote 0005:057E:0306.0042: Device removed [ 1334.859013][ T834] wiimote 0005:057E:0306.0042: detected device: Nintendo Wii Remote (Gen 1) [ 1334.870100][ T834] sysfs: cannot create duplicate filename '/class/power_supply/wiimote_battery_syz0' [ 1334.870167][ T834] CPU: 1 UID: 0 PID: 834 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1334.870226][ T834] Tainted: [L]=SOFTLOCKUP [ 1334.870256][ T834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1334.870313][ T834] Workqueue: events wiimote_init_worker [ 1334.870456][ T834] Call Trace: [ 1334.870481][ T834] [ 1334.870506][ T834] dump_stack_lvl+0xe8/0x150 [ 1334.870611][ T834] sysfs_warn_dup+0x8e/0xa0 [ 1334.870713][ T834] sysfs_do_create_link_sd+0xc0/0x110 [ 1334.870850][ T834] device_add_class_symlinks+0x1cf/0x240 [ 1334.870968][ T834] device_add+0x467/0xb80 [ 1334.871071][ T834] __power_supply_register+0xb88/0xf60 [ 1334.871163][ T834] ? __pfx___power_supply_register+0x10/0x10 [ 1334.871244][ T834] ? trace_kmalloc+0x2a/0xf0 [ 1334.871369][ T834] wiimod_battery_probe+0x202/0x3a0 [ 1334.871448][ T834] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 1334.871543][ T834] ? input_ff_create_memless+0x2e4/0x600 [ 1334.871645][ T834] wiimote_init_worker+0x20c9/0x2f00 [ 1334.871788][ T834] ? __pfx_wiimote_init_worker+0x10/0x10 [ 1334.871920][ T834] ? do_raw_spin_lock+0x12b/0x2f0 [ 1334.872035][ T834] ? lock_acquire+0x115/0x350 [ 1334.872130][ T834] ? rcu_is_watching+0x16/0xb0 [ 1334.872223][ T834] ? process_scheduled_works+0x97a/0x1630 [ 1334.872314][ T834] process_scheduled_works+0xc3d/0x1630 [ 1334.872480][ T834] ? __pfx_process_scheduled_works+0x10/0x10 [ 1334.872585][ T834] ? assign_work+0x3cf/0x5d0 [ 1334.872686][ T834] worker_thread+0xa47/0xfb0 [ 1334.872855][ T834] kthread+0x38b/0x480 [ 1334.872927][ T834] ? __pfx_worker_thread+0x10/0x10 [ 1334.873015][ T834] ? __pfx_kthread+0x10/0x10 [ 1334.873088][ T834] ret_from_fork+0x514/0xb70 [ 1334.873180][ T834] ? __pfx_ret_from_fork+0x10/0x10 [ 1334.873283][ T834] ? __switch_to+0xc89/0x1420 [ 1334.873387][ T834] ? __pfx_kthread+0x10/0x10 [ 1334.873456][ T834] ret_from_fork_asm+0x1a/0x30 [ 1334.873595][ T834] [ 1334.906896][ T834] wiimote 0005:057E:0306.0042: cannot register battery device [ 1335.819025][T12407] Bluetooth: hci6: command tx timeout [ 1336.873326][T23220] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1336.888733][T23220] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1336.898044][T23220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1336.906518][T23220] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1336.914525][T23220] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1337.290425][T23357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.290620][T23357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.293154][T23357] bridge_slave_0: entered allmulticast mode [ 1337.311982][T23357] bridge_slave_0: entered promiscuous mode [ 1337.323191][T23357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.323610][T23357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.324011][T23357] bridge_slave_1: entered allmulticast mode [ 1337.380238][T23357] bridge_slave_1: entered promiscuous mode [ 1337.467788][T23357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1337.485485][T23357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1337.529511][T23357] team0: Port device team_slave_0 added [ 1337.535847][T23357] team0: Port device team_slave_1 added [ 1337.563173][T23357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.563228][T23357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.563258][T23357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.571562][T23357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.571613][T23357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.571688][T23357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.691417][T23357] hsr_slave_0: entered promiscuous mode [ 1337.694105][T23357] hsr_slave_1: entered promiscuous mode [ 1337.695993][T23357] debugfs: 'hsr0' already exists in 'hsr' [ 1337.696052][T23357] Cannot create hsr debugfs directory [ 1337.905809][T23357] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1337.912776][T12407] Bluetooth: hci6: command tx timeout [ 1337.922658][T23357] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1337.931499][T23357] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1337.944156][T23357] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1337.952010][T23357] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1337.962423][T23357] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1337.971072][T23357] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1337.985490][T23357] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1338.020073][T23357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.020389][T23357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.021232][T23357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.021535][T23357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.120791][T23357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.136917][T19735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.145461][T19735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.162303][T23357] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.178241][T19741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.178502][T19741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.198117][T19730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.198475][T19730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.285132][T23357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.340377][T23357] veth0_vlan: entered promiscuous mode [ 1338.353875][T23357] veth1_vlan: entered promiscuous mode [ 1338.388453][T23357] veth0_macvtap: entered promiscuous mode [ 1338.398564][T23357] veth1_macvtap: entered promiscuous mode [ 1338.419104][T23357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.430683][T23357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.507451][ T9568] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.528914][T18299] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.529008][T18299] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.529060][T18299] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.599298][T16091] misc userio: Buffer overflowed, userio client isn't keeping up [ 1338.690230][ T9568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.698400][ T9568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.736314][T19730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.744861][T19730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.967604][T23383] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4721'. [ 1339.022742][T12407] Bluetooth: hci7: command tx timeout [ 1339.193575][T23388] netlink: 'syz.7.4722': attribute type 2 has an invalid length. [ 1339.221746][T23386] netlink: 'syz.7.4722': attribute type 4 has an invalid length. [ 1339.232930][T23386] netlink: 'syz.7.4722': attribute type 2 has an invalid length. [ 1339.232987][T23386] netlink: 'syz.7.4722': attribute type 4 has an invalid length. [ 1339.239925][T23386] netlink: 'syz.7.4722': attribute type 11 has an invalid length. [ 1339.239989][T23386] netlink: 'syz.7.4722': attribute type 4 has an invalid length. [ 1340.500913][T16091] input: PS/2 Generic Mouse as /devices/serio8/input/input127 [ 1340.729148][T16091] psmouse serio8: Failed to enable mouse on [ 1341.098863][T12407] Bluetooth: hci7: command tx timeout [ 1341.205648][T23412] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4732'. [ 1341.783676][T19730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1341.783748][T19730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.926750][T19730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1341.926815][T19730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.031553][T19730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1342.031625][T19730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.160430][T19730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1342.160490][T19730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.045726][T19730] bond0 (unregistering): Released all slaves [ 1343.096296][T23459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.184670][T12407] Bluetooth: hci7: command tx timeout [ 1343.325804][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1343.494776][T19730] IPVS: stopping master sync thread 18409 ... [ 1344.129881][T19730] hsr_slave_0: left promiscuous mode [ 1344.151073][T19730] hsr_slave_1: left promiscuous mode [ 1344.217273][T19730] veth1_macvtap: left promiscuous mode [ 1344.228181][T19730] veth0_macvtap: left promiscuous mode [ 1344.234212][T19730] veth1_vlan: left promiscuous mode [ 1344.240073][T19730] veth0_vlan: left promiscuous mode [ 1344.935199][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1345.268120][T12407] Bluetooth: hci7: command tx timeout [ 1345.339220][T19730] IPVS: stop unused estimator thread 0... [ 1345.883330][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1346.196539][T23539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1346.249594][ T9] wiimote 0005:057E:0306.0043: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 1346.250502][ T9] wiimote 0005:057E:0306.0043: New device registered [ 1346.256829][T23541] wiimote 0005:057E:0306.0043: Device removed [ 1346.364659][T23544] fido_id[23544]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1346.584355][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1347.258983][ T9] wiimote 0005:057E:0306.0043: detected device: Nintendo Wii Remote (Gen 1) [ 1347.307263][ T9] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0043/input/input135 [ 1347.333293][ T9] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0043/input/input136 [ 1347.358477][ T9] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0043/input/input134 [ 1348.838089][T23575] netlink: 'syz.7.4772': attribute type 16 has an invalid length. [ 1349.994952][T23220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1350.010625][T23220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1350.018082][T23220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1350.031545][T23220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1350.039795][T23220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1350.371746][T23580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.372188][T23580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.372552][T23580] bridge_slave_0: entered allmulticast mode [ 1350.378126][T23580] bridge_slave_0: entered promiscuous mode [ 1350.396381][T23580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.396824][T23580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.397941][T23580] bridge_slave_1: entered allmulticast mode [ 1350.417765][T23580] bridge_slave_1: entered promiscuous mode [ 1350.459666][T23580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.467069][T23580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.506183][T23580] team0: Port device team_slave_0 added [ 1350.512977][T23580] team0: Port device team_slave_1 added [ 1350.555635][T23580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.555690][T23580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.555721][T23580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.562523][T23580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.562574][T23580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.562635][T23580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.706450][T23580] hsr_slave_0: entered promiscuous mode [ 1350.709261][T23580] hsr_slave_1: entered promiscuous mode [ 1350.711379][T23580] debugfs: 'hsr0' already exists in 'hsr' [ 1350.711425][T23580] Cannot create hsr debugfs directory [ 1350.976644][T23580] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1350.988180][T23580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1350.991821][T23580] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1351.007752][T23580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1351.011062][T23580] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1351.030641][T23580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1351.039138][T23580] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1351.052800][T23580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1351.083187][T23580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.083572][T23580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.084299][T23580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.084604][T23580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.168493][T23580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.186619][T19721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.194607][T19721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.214999][T23580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.227829][T19741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.227955][T19741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.252420][T18299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.252559][T18299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.357949][T23580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1351.402464][T23580] veth0_vlan: entered promiscuous mode [ 1351.414886][T23580] veth1_vlan: entered promiscuous mode [ 1351.459926][T23580] veth0_macvtap: entered promiscuous mode [ 1351.471561][T23580] veth1_macvtap: entered promiscuous mode [ 1351.492237][T23580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1351.501700][T23580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1351.590868][T19735] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.602214][T19735] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.612182][T19735] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.679793][T18299] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.737625][T19735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.747255][T19735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.789620][T19730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.789733][T19730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.128850][ T9084] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1352.138828][T12407] Bluetooth: hci0: command tx timeout [ 1352.197390][T23611] syzkaller0: entered promiscuous mode [ 1352.197454][T23611] syzkaller0: entered allmulticast mode [ 1352.278818][ T9084] usb 9-1: device descriptor read/64, error -71 [ 1352.529093][ T9084] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1352.679207][ T9084] usb 9-1: device descriptor read/64, error -71 [ 1352.794360][ T9084] usb usb9-port1: attempt power cycle [ 1353.151013][ T9084] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1353.182797][ T9084] usb 9-1: device descriptor read/8, error -71 [ 1353.451190][ T9084] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1353.483756][ T9084] usb 9-1: device descriptor read/8, error -71 [ 1353.589324][ T9084] usb usb9-port1: unable to enumerate USB device [ 1354.238799][T12407] Bluetooth: hci0: command tx timeout [ 1355.271135][T10634] psmouse serio9: Failed to reset mouse on : -5 [ 1355.634366][ T9084] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1355.831979][ T9084] usb 9-1: not running at top speed; connect to a high speed hub [ 1355.832044][ T9084] usb 9-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.00 [ 1355.836771][ T9084] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.319509][T12407] Bluetooth: hci0: command tx timeout [ 1357.752634][ T9084] usb 9-1: 2:1: cannot get freq at ep 0x82 [ 1357.929806][ T9084] usb 9-1: USB disconnect, device number 6 [ 1358.022271][T23649] syzkaller0: entered promiscuous mode [ 1358.029838][T23649] syzkaller0: entered allmulticast mode [ 1358.038811][T10634] misc userio: Buffer overflowed, userio client isn't keeping up [ 1358.381941][T12407] Bluetooth: hci0: command tx timeout [ 1361.459091][T10634] misc userio: Buffer overflowed, userio client isn't keeping up [ 1361.661171][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.667727][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.319031][ T9084] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1364.479544][ T9084] usb 9-1: New USB device found, idVendor=695c, idProduct=3829, bcdDevice= 1.00 [ 1364.495966][ T9084] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.504468][ T9084] usb 9-1: Product: syz [ 1364.504492][ T9084] usb 9-1: Manufacturer: syz [ 1364.504510][ T9084] usb 9-1: SerialNumber: syz [ 1364.529631][ T9084] opera: start downloading fpga firmware dvb-usb-opera1-fpga-01.fw [ 1364.540300][ T9084] usb 9-1: Direct firmware load for dvb-usb-opera1-fpga-01.fw failed with error -2 [ 1364.540350][ T9084] usb 9-1: Falling back to sysfs fallback for: dvb-usb-opera1-fpga-01.fw [ 1364.838768][T10634] misc userio: Buffer overflowed, userio client isn't keeping up [ 1367.522015][T23220] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1367.535398][T23220] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1367.542910][T23220] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1367.552493][T23220] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1367.560750][T23220] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1367.855304][T23776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.855765][T23776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.856826][T23776] bridge_slave_0: entered allmulticast mode [ 1367.871795][T23776] bridge_slave_0: entered promiscuous mode [ 1367.883570][T23776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.883763][T23776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.885949][T23776] bridge_slave_1: entered allmulticast mode [ 1367.895829][T23776] bridge_slave_1: entered promiscuous mode [ 1367.974817][T23776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.994147][T23776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.051345][T23776] team0: Port device team_slave_0 added [ 1368.058054][T23776] team0: Port device team_slave_1 added [ 1368.097747][T23776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.097785][T23776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.102802][T23776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.111132][T23776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.111198][T23776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.111282][T23776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.198797][T10634] misc userio: Buffer overflowed, userio client isn't keeping up [ 1368.234012][T23776] hsr_slave_0: entered promiscuous mode [ 1368.236727][T23776] hsr_slave_1: entered promiscuous mode [ 1368.239263][T23776] debugfs: 'hsr0' already exists in 'hsr' [ 1368.239325][T23776] Cannot create hsr debugfs directory [ 1368.463878][T23776] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1368.474637][T23776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1368.483873][T23776] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1368.494213][T23776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1368.496554][T23776] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1368.512866][T23776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1368.515869][T23776] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1368.531586][T23776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1368.616138][T23776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.642233][T23776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.656091][T19721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.656354][T19721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.675425][T19721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.675751][T19721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.771712][T23776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.820667][T23776] veth0_vlan: entered promiscuous mode [ 1368.838167][T23776] veth1_vlan: entered promiscuous mode [ 1368.933789][T23776] veth0_macvtap: entered promiscuous mode [ 1368.974333][T23776] veth1_macvtap: entered promiscuous mode [ 1369.031456][T23776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1369.053559][T23776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1369.079206][T19735] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.088097][T19735] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.099302][T19735] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.109105][T19730] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.294407][T19730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.294456][T19730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.367052][ T9568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.367093][ T9568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.659431][T23220] Bluetooth: hci8: command tx timeout [ 1370.428151][T12407] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1370.450807][T12407] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1370.465839][T12407] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1370.474561][T12407] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1370.484199][T12407] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1371.217986][T23833] syzkaller0: entered promiscuous mode [ 1371.218050][T23833] syzkaller0: entered allmulticast mode [ 1371.249346][T23814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.256968][T23814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.266445][T23814] bridge_slave_0: entered allmulticast mode [ 1371.275912][T23814] bridge_slave_0: entered promiscuous mode [ 1371.285889][T23814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.293936][T23814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.303193][T23814] bridge_slave_1: entered allmulticast mode [ 1371.311790][T23814] bridge_slave_1: entered promiscuous mode [ 1371.375378][T23814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1371.388033][T23814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1371.448409][T23814] team0: Port device team_slave_0 added [ 1371.458296][T23814] team0: Port device team_slave_1 added [ 1371.743514][T23220] Bluetooth: hci8: command tx timeout [ 1371.940187][ T4949] nvme nvme0: I/O tag 0 (0000) type 4 opcode 0x7f (Fabrics Cmd) QID 0 timeout [ 1371.947079][T23083] nvme nvme0: Connect command failed, error wo/DNR bit: 881 [ 1371.947858][T23083] nvme nvme0: failed to connect queue: 0 ret=881 [ 1372.361280][T10634] misc userio: Buffer overflowed, userio client isn't keeping up [ 1372.498729][T19782] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1372.558208][T23220] Bluetooth: hci9: command tx timeout [ 1372.642260][T23126] nvme nvme0: failed to connect socket: -512 [ 1372.651820][T19782] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1372.759155][T19782] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.767393][T19782] usb 10-1: Product: syz [ 1372.772218][T19782] usb 10-1: Manufacturer: syz [ 1372.780768][T19782] usb 10-1: SerialNumber: syz [ 1372.919317][T10636] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1372.964851][T23341] nvme nvme0: failed to connect socket: -512 [ 1373.262102][T23619] nvme nvme0: failed to connect socket: -512 [ 1373.820140][T23220] Bluetooth: hci8: command tx timeout [ 1374.272751][T10634] input: PS/2 Generic Mouse as /devices/serio9/input/input138 [ 1374.529918][T10634] psmouse serio9: Failed to enable mouse on [ 1374.633594][T23220] Bluetooth: hci9: command tx timeout [ 1375.914952][T23220] Bluetooth: hci8: command tx timeout [ 1376.623931][T10636] usb 10-1: Service connection timeout for: 262 [ 1376.626915][T10636] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1376.689944][T10636] ath9k_htc: Failed to initialize the device [ 1376.709945][T23220] Bluetooth: hci9: command tx timeout [ 1376.764399][T10636] usb 10-1: ath9k_htc: USB layer deinitialized [ 1376.914043][T23311] usb 10-1: USB disconnect, device number 2 [ 1377.484691][T23311] wiimote 0005:057E:0306.0044: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 1377.497580][T23311] wiimote 0005:057E:0306.0044: New device registered [ 1377.511548][T23882] wiimote 0005:057E:0306.0044: Device removed [ 1377.616629][T23884] fido_id[23884]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1378.539252][T23311] wiimote 0005:057E:0306.0044: detected device: Nintendo Wii Remote (Gen 1) [ 1378.652438][T23311] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0044/input/input140 [ 1378.665926][T23311] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0044/input/input141 [ 1378.686852][T23311] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0044/input/input139 [ 1378.780542][T23220] Bluetooth: hci9: command tx timeout [ 1380.550640][T23814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.557896][T23814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1380.585005][T23814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1380.600504][T23814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1380.607589][T23814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1380.621832][T23814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1380.875011][T23814] hsr_slave_0: entered promiscuous mode [ 1380.877582][T23814] hsr_slave_1: entered promiscuous mode [ 1380.881080][T23814] debugfs: 'hsr0' already exists in 'hsr' [ 1380.881104][T23814] Cannot create hsr debugfs directory [ 1381.149577][T10636] psmouse serio10: Failed to reset mouse on : -5 [ 1381.156521][T19735] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.375666][T19735] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.548231][T19735] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.661830][T19735] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.775204][T23814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.964080][T23932] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 1382.205989][T23814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.866378][T19735] bond1 (unregistering): (slave geneve3): Releasing active interface [ 1382.936072][T19735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.961050][T19735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1382.974465][T19735] bond0 (unregistering): Released all slaves [ 1382.992253][T19735] bond1 (unregistering): Released all slaves [ 1383.013400][T19735] bond2 (unregistering): Released all slaves [ 1383.037352][T19735] bond3 (unregistering): Released all slaves [ 1383.068408][T19735] bond4 (unregistering): Released all slaves [ 1383.332607][T23814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.422483][T19735] tipc: Left network mode [ 1383.451615][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1383.718344][T23814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.133287][T10636] misc userio: Buffer overflowed, userio client isn't keeping up [ 1384.284947][T23814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1384.311584][T23814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1384.368401][T23814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1384.388367][T23814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1384.397169][T23814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1384.417305][T23814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1384.448332][T19735] hsr_slave_0: left promiscuous mode [ 1384.455814][T19735] hsr_slave_1: left promiscuous mode [ 1384.461933][T19735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1384.461986][T19735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.478249][T19735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1384.478300][T19735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.508358][T19735] veth1_macvtap: left promiscuous mode [ 1384.508422][T19735] veth0_macvtap: left promiscuous mode [ 1384.509694][T19735] veth1_vlan: left promiscuous mode [ 1384.509893][T19735] veth0_vlan: left promiscuous mode [ 1384.957794][T19735] team0 (unregistering): Port device team_slave_1 removed [ 1384.973687][T19735] team0 (unregistering): Port device team_slave_0 removed [ 1385.136158][T23814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1385.150995][T23814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1385.161069][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1385.389470][T23814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.452928][T23814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1385.483884][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.484080][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1385.486533][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.486643][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1385.640602][T19735] IPVS: stop unused estimator thread 0... [ 1385.804665][T23814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.996462][T23814] veth0_vlan: entered promiscuous mode [ 1386.027425][T23814] veth1_vlan: entered promiscuous mode [ 1386.330564][T19735] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.401181][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1386.456863][T23814] veth0_macvtap: entered promiscuous mode [ 1386.472333][T23814] veth1_macvtap: entered promiscuous mode [ 1386.496520][T23814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1386.520856][T23814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1386.648191][T19735] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.866246][T19735] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.041200][T19735] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.151741][ T9568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.151781][ T9568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.441189][T19740] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.459090][T19721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.459237][T19721] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.459359][T19721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.500884][T10636] misc userio: Buffer overflowed, userio client isn't keeping up [ 1387.592716][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.592773][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.890896][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1388.273450][T19735] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.443127][T12407] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1388.465992][T12407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1388.484051][T12407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1388.504819][T12407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1388.513772][T12407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1388.823843][T19735] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.134884][T19735] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.444786][T19735] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.974533][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1390.100538][T24087] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 1390.143235][T24087] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:4094x2160 (0x38414761, 8, 0, 0, 0) [ 1390.167962][T24087] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:1802x2160 (0x31384142, 8, 0, 0, 0) [ 1390.212748][T24049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.213204][T24049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.213622][T24049] bridge_slave_0: entered allmulticast mode [ 1390.218486][T24049] bridge_slave_0: entered promiscuous mode [ 1390.255399][T24049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.255868][T24049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.256345][T24049] bridge_slave_1: entered allmulticast mode [ 1390.277712][T24049] bridge_slave_1: entered promiscuous mode [ 1390.558487][T19735] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.620785][T23220] Bluetooth: hci2: command tx timeout [ 1390.679208][T24049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.737471][T24049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.763667][T24096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1390.859555][T10636] misc userio: Buffer overflowed, userio client isn't keeping up [ 1390.877572][T24097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1390.922640][T19735] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.942927][T24096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1390.973032][T24049] team0: Port device team_slave_0 added [ 1390.983646][T24049] team0: Port device team_slave_1 added [ 1391.096184][T19735] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.152281][T24049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.159478][T24049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.185989][T24049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.199080][T24049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1391.206162][T24049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.234224][T24049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1391.323159][T19735] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.351273][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1391.393054][T24049] hsr_slave_0: entered promiscuous mode [ 1391.402001][T24049] hsr_slave_1: entered promiscuous mode [ 1391.408722][T24049] debugfs: 'hsr0' already exists in 'hsr' [ 1391.414623][T24049] Cannot create hsr debugfs directory [ 1391.680846][T19735] bridge_slave_1: left allmulticast mode [ 1391.680907][T19735] bridge_slave_1: left promiscuous mode [ 1391.681489][T19735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.714878][T19735] bridge_slave_0: left allmulticast mode [ 1391.714956][T19735] bridge_slave_0: left promiscuous mode [ 1391.715551][T19735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.789476][T19735] bridge_slave_1: left allmulticast mode [ 1391.789541][T19735] bridge_slave_1: left promiscuous mode [ 1391.790133][T19735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.841691][T19735] bridge_slave_0: left allmulticast mode [ 1391.841756][T19735] bridge_slave_0: left promiscuous mode [ 1391.843862][T19735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.882287][T19735] bridge_slave_1: left allmulticast mode [ 1391.882352][T19735] bridge_slave_1: left promiscuous mode [ 1391.882979][T19735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.917933][T19735] bridge_slave_0: left allmulticast mode [ 1391.925984][T19735] bridge_slave_0: left promiscuous mode [ 1391.935959][T19735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.960033][T19735] veth0: left allmulticast mode [ 1391.960095][T19735] veth0: left promiscuous mode [ 1391.960865][T19735] bridge0: port 3(veth0) entered disabled state [ 1391.987856][T19735] bridge_slave_1: left allmulticast mode [ 1391.987921][T19735] bridge_slave_1: left promiscuous mode [ 1391.988557][T19735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.012581][T19735] bridge_slave_0: left allmulticast mode [ 1392.012640][T19735] bridge_slave_0: left promiscuous mode [ 1392.013487][T19735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.100639][T19782] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1392.259998][T19782] usb 10-1: Using ep0 maxpacket: 8 [ 1392.261918][T19782] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1392.264957][T19782] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 1392.265038][T19782] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 1392.265100][T19782] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1392.265160][T19782] usb 10-1: config 250 has no interface number 0 [ 1392.265230][T19782] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1392.265276][T19782] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1392.265359][T19782] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 1392.265457][T19782] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1392.265558][T19782] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1392.265633][T19782] usb 10-1: config 250 interface 228 has no altsetting 0 [ 1392.279951][T19782] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1392.280033][T19782] usb 10-1: Product: syz [ 1392.280075][T19782] usb 10-1: SerialNumber: syz [ 1392.404312][T19782] hub 10-1:250.228: bad descriptor, ignoring hub [ 1392.404369][T19782] hub 10-1:250.228: probe with driver hub failed with error -5 [ 1392.547693][T19735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.561623][T19735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.572307][T19735] bond0 (unregistering): Released all slaves [ 1392.607483][T19782] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1392.708992][T23220] Bluetooth: hci2: command tx timeout [ 1392.784117][T19735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.804506][T19735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.816117][T19735] bond0 (unregistering): Released all slaves [ 1393.009681][T19735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.024055][T19735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.034727][T19735] bond0 (unregistering): Released all slaves [ 1393.286877][T19735] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.301362][T19735] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.316315][T19735] .` (unregistering): Released all slaves [ 1393.329387][T19735] bond0 (unregistering): Released all slaves [ 1393.363663][T19735] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1393.382018][T19735] bond1 (unregistering): Released all slaves [ 1393.965507][T19782] usb 10-1: USB disconnect, device number 3 [ 1393.977501][T19782] usblp0: removed [ 1394.006177][T24049] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.041068][T19735] tipc: Left network mode [ 1394.175820][T24049] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.229095][T10636] misc userio: Buffer overflowed, userio client isn't keeping up [ 1394.351250][T24049] .`: (slave netdevsim1): Releasing backup interface [ 1394.367991][T24049] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.510905][T24049] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.784754][T23220] Bluetooth: hci2: command tx timeout [ 1394.925154][ T5283] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1395.061361][T24049] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1395.072128][T24049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1395.080901][T24049] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1395.089728][T24049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1395.121860][T24049] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1395.137980][T24049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1395.149658][T24049] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1395.191359][T24049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1395.370896][T19735] hsr_slave_0: left promiscuous mode [ 1395.377348][T19735] hsr_slave_1: left promiscuous mode [ 1395.379635][T19735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.379668][T19735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.405982][T19735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1395.406042][T19735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.480359][T19735] hsr_slave_0: left promiscuous mode [ 1395.486005][T19735] hsr_slave_1: left promiscuous mode [ 1395.493934][T19735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.493984][T19735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.513997][T19735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1395.514052][T19735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.545507][T19735] hsr_slave_0: left promiscuous mode [ 1395.552898][T19735] hsr_slave_1: left promiscuous mode [ 1395.560946][T19735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.569485][T19735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.586356][T19735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1395.594098][T19735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.608077][T19735] hsr_slave_0: left promiscuous mode [ 1395.615186][T19735] hsr_slave_1: left promiscuous mode [ 1395.622692][T19735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.630350][T19735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.638555][T19735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1395.646843][T19735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.702009][T19735] veth1_macvtap: left promiscuous mode [ 1395.707677][T19735] veth0_macvtap: left promiscuous mode [ 1395.713745][T19735] veth1_vlan: left promiscuous mode [ 1395.719197][T19735] veth0_vlan: left promiscuous mode [ 1395.726077][T19735] veth1_macvtap: left promiscuous mode [ 1395.732455][T19735] veth0_macvtap: left promiscuous mode [ 1395.738218][T19735] veth1_vlan: left promiscuous mode [ 1395.743804][T19735] veth0_vlan: left promiscuous mode [ 1395.756372][T19735] veth1_macvtap: left promiscuous mode [ 1395.762568][T19735] veth0_macvtap: left promiscuous mode [ 1395.768255][T19735] veth1_vlan: left promiscuous mode [ 1395.774939][T19735] veth0_vlan: left promiscuous mode [ 1395.782223][T19735] veth1_macvtap: left promiscuous mode [ 1395.787955][T19735] veth0_macvtap: left promiscuous mode [ 1395.794847][T19735] veth1_vlan: left allmulticast mode [ 1395.800783][T19735] veth1_vlan: left promiscuous mode [ 1395.807376][T19735] veth0_vlan: left promiscuous mode [ 1395.997596][T12407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1396.024664][T12407] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1396.037869][T12407] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1396.045906][T12407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1396.053704][T12407] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1396.649208][T10635] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1396.706868][T19735] team0 (unregistering): Port device team_slave_1 removed [ 1396.731234][T19735] team0 (unregistering): Port device team_slave_0 removed [ 1396.800997][T10635] usb 10-1: not running at top speed; connect to a high speed hub [ 1396.801058][T10635] usb 10-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice= 0.00 [ 1396.804095][T10635] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1396.804193][T10635] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1396.809829][T10635] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.809857][T10635] usb 10-1: Product: syz [ 1396.809874][T10635] usb 10-1: Manufacturer: syz [ 1396.809890][T10635] usb 10-1: SerialNumber: syz [ 1396.861125][T23220] Bluetooth: hci2: command tx timeout [ 1396.879493][T24157] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1396.879612][T24157] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1397.094069][T24157] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1397.095697][T24157] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1397.121088][T10635] asix 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1397.121678][T10635] asix 10-1:1.0: probe with driver asix failed with error -61 [ 1397.247329][T19735] team0 (unregistering): Port device team_slave_1 removed [ 1397.265244][T10635] usb 10-1: USB disconnect, device number 4 [ 1397.304581][T19735] team0 (unregistering): Port device team_slave_0 removed [ 1397.721379][T19735] team0 (unregistering): Port device team_slave_1 removed [ 1397.738191][T19735] team0 (unregistering): Port device team_slave_0 removed [ 1398.107333][T19735] team0 (unregistering): Port device team_slave_1 removed [ 1398.126975][T19735] team0 (unregistering): Port device team_slave_0 removed [ 1398.167254][T23220] Bluetooth: hci3: command tx timeout [ 1398.370217][ T5283] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1398.419512][T10636] misc userio: Buffer overflowed, userio client isn't keeping up [ 1398.681954][T24049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.802966][T24049] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.809333][T19729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.809450][T19729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.887805][T19740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.887933][T19740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.187280][T24049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.375504][T24049] veth0_vlan: entered promiscuous mode [ 1399.388195][T24049] veth1_vlan: entered promiscuous mode [ 1399.746519][T24150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.746747][T24150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.747221][T24150] bridge_slave_0: entered allmulticast mode [ 1399.754357][T24150] bridge_slave_0: entered promiscuous mode [ 1399.809787][T24150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.810037][T24150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.810522][T24150] bridge_slave_1: entered allmulticast mode [ 1399.824950][T24150] bridge_slave_1: entered promiscuous mode [ 1399.913181][T24049] veth0_macvtap: entered promiscuous mode [ 1399.966676][T12407] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1400.005826][T12407] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1400.017207][T12407] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1400.032680][T12407] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1400.081552][T24150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.095270][T24049] veth1_macvtap: entered promiscuous mode [ 1400.104072][T12407] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1400.121805][T10636] input: PS/2 Generic Mouse as /devices/serio10/input/input143 [ 1400.203643][T24150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.220835][T23220] Bluetooth: hci3: command tx timeout [ 1400.512075][T24150] team0: Port device team_slave_0 added [ 1400.524324][T10636] psmouse serio10: Failed to enable mouse on [ 1400.594611][T24150] team0: Port device team_slave_1 added [ 1400.628915][T24049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.667261][T24150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1400.667303][T24150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1400.667344][T24150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1400.715179][T24150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1400.715198][T24150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1400.715316][T24150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.726620][T24049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.971597][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1401.008091][T24150] hsr_slave_0: entered promiscuous mode [ 1401.025211][T24150] hsr_slave_1: entered promiscuous mode [ 1401.029029][T19735] IPVS: stop unused estimator thread 0... [ 1401.212944][ T9568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.213021][ T9568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.372345][T19729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.659680][T19730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.149359][T23220] Bluetooth: hci4: command tx timeout [ 1402.217919][T18299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.233936][T18299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.270131][T24223] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1402.299302][T23220] Bluetooth: hci3: command tx timeout [ 1402.993076][ T5283] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1403.008911][T19782] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1403.046473][T19730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.056362][T19730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.159621][T19782] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice= 0.00 [ 1403.180343][T19782] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.180390][T19782] usb 10-1: Product: syz [ 1403.180409][T19782] usb 10-1: Manufacturer: syz [ 1403.180429][T19782] usb 10-1: SerialNumber: syz [ 1403.395017][T24195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.395252][T24195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.395744][T24195] bridge_slave_0: entered allmulticast mode [ 1403.425512][T24195] bridge_slave_0: entered promiscuous mode [ 1403.448398][T19782] hdpvr 10-1:1.0: firmware version 0x0 dated [ 1403.449917][T24195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.450332][T24195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.450843][T24195] bridge_slave_1: entered allmulticast mode [ 1403.486522][T19782] hdpvr 10-1:1.0: untested firmware, the driver might not work. [ 1403.495710][T24195] bridge_slave_1: entered promiscuous mode [ 1403.639579][T18299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.728507][T24195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.868449][T24195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.920925][T24195] team0: Port device team_slave_0 added [ 1403.966970][T18299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.992989][T24195] team0: Port device team_slave_1 added [ 1404.133850][T18299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.152129][T24195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1404.152176][T24195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.152207][T24195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.171426][T24195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.171487][T24195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.171570][T24195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.248559][T23220] Bluetooth: hci4: command tx timeout [ 1404.380814][T23220] Bluetooth: hci3: command tx timeout [ 1404.465806][T18299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.513083][T24195] hsr_slave_0: entered promiscuous mode [ 1404.521627][T24195] hsr_slave_1: entered promiscuous mode [ 1404.528821][T24195] debugfs: 'hsr0' already exists in 'hsr' [ 1404.528863][T24195] Cannot create hsr debugfs directory [ 1405.387991][T24150] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1405.415079][T24150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1405.482315][T24150] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1405.506374][T24150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1405.517072][ T5283] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1405.551462][T24150] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1405.565100][T24150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1405.623879][T24150] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1405.645326][T24150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1405.654883][T18299] bridge_slave_1: left allmulticast mode [ 1405.654943][T18299] bridge_slave_1: left promiscuous mode [ 1405.655175][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.685571][T18299] bridge_slave_0: left allmulticast mode [ 1405.685628][T18299] bridge_slave_0: left promiscuous mode [ 1405.686645][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.225655][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.255899][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.269193][T18299] bond0 (unregistering): Released all slaves [ 1406.301789][T19782] hdpvr 10-1:1.0: Could not setup controls [ 1406.309585][T23220] Bluetooth: hci4: command tx timeout [ 1406.317728][T19782] hdpvr 10-1:1.0: registering videodev failed [ 1406.337993][T19782] hdpvr 10-1:1.0: probe with driver hdpvr failed with error -71 [ 1406.351989][T19782] usb 10-1: USB disconnect, device number 5 [ 1406.442552][ T9072] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1406.621463][ T9072] usb 2-1: not running at top speed; connect to a high speed hub [ 1406.621530][ T9072] usb 2-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice= 0.00 [ 1406.624862][ T9072] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1406.624949][ T9072] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1406.632195][ T9072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.632225][ T9072] usb 2-1: Product: syz [ 1406.632241][ T9072] usb 2-1: Manufacturer: syz [ 1406.632258][ T9072] usb 2-1: SerialNumber: syz [ 1406.636790][T24274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1406.637041][T24274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1406.790593][T24150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.802352][T18299] tipc: Disabling bearer [ 1406.807967][T18299] tipc: Left network mode [ 1406.889336][T24274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1406.889535][T24274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1406.916690][T24150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1407.116289][ T9072] asix 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1407.117315][ T9072] asix 2-1:1.0: probe with driver asix failed with error -61 [ 1407.239056][ T5716] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1407.280125][T24291] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1407.310633][T19730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.310747][T19730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.397515][T19729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.397844][T19729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.415637][ T5716] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice= 0.00 [ 1407.446530][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.446595][ T5716] usb 5-1: Product: syz [ 1407.446697][ T5716] usb 5-1: Manufacturer: syz [ 1407.446753][ T5716] usb 5-1: SerialNumber: syz [ 1407.720283][ T5716] hdpvr 5-1:1.0: firmware version 0x0 dated [ 1407.720329][ T5716] hdpvr 5-1:1.0: untested firmware, the driver might not work. [ 1407.753137][T18299] hsr_slave_0: left promiscuous mode [ 1407.759966][T18299] hsr_slave_1: left promiscuous mode [ 1407.762877][T18299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1407.762942][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.782591][T18299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1407.782652][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.817301][T18299] veth1_macvtap: left promiscuous mode [ 1407.817375][T18299] veth0_macvtap: left promiscuous mode [ 1407.817675][T18299] veth1_vlan: left promiscuous mode [ 1407.817757][T18299] veth0_vlan: left promiscuous mode [ 1408.243574][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1408.265354][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1408.379096][T23220] Bluetooth: hci4: command tx timeout [ 1408.493367][ T5283] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1408.877399][T19781] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1408.908421][T24150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.076325][T19781] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 1409.090241][T19781] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.165723][T18299] IPVS: stop unused estimator thread 0... [ 1409.200113][T24150] veth0_vlan: entered promiscuous mode [ 1409.227796][T24150] veth1_vlan: entered promiscuous mode [ 1409.248762][T19781] usb 10-1: reset high-speed USB device number 6 using dummy_hcd [ 1409.408505][T24150] veth0_macvtap: entered promiscuous mode [ 1409.442405][T24150] veth1_macvtap: entered promiscuous mode [ 1409.516937][T23321] usb 2-1: USB disconnect, device number 23 [ 1409.580341][T24150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1409.617870][T24150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1409.828484][T18299] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.045108][T24327] syzkaller0: entered promiscuous mode [ 1410.045184][T24327] syzkaller0: entered allmulticast mode [ 1410.109352][T19721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.123680][ T5283] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1410.125430][T24329] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4919'. [ 1410.151687][ T9568] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.203138][T19781] usb 10-1: device descriptor read/all, error -71 [ 1410.953915][ T5716] hdpvr 5-1:1.0: Could not setup controls [ 1411.004114][ T5716] hdpvr 5-1:1.0: registering videodev failed [ 1411.013964][T19781] usb 10-1: USB disconnect, device number 6 [ 1411.068318][ T5716] hdpvr 5-1:1.0: probe with driver hdpvr failed with error -71 [ 1411.075130][ T5716] usb 5-1: USB disconnect, device number 90 [ 1418.220193][T18299] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.313027][T24352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1418.409192][T19722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.410137][T19722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.576517][T18299] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.909916][T18299] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.988028][T19722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.988080][T19722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.045931][T24195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1419.061483][T24195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1419.069791][T24195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1419.083314][T24195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1419.093110][T19722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.093178][T19722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.116976][T24195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1419.130321][T24195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1419.140353][T24195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1419.155516][T24195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1419.878853][T16091] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1420.034489][T16091] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1420.078059][T16091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.296804][T18299] bridge_slave_1: left allmulticast mode [ 1420.296860][T18299] bridge_slave_1: left promiscuous mode [ 1420.297783][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.323330][T18299] bridge_slave_0: left allmulticast mode [ 1420.323397][T18299] bridge_slave_0: left promiscuous mode [ 1420.326696][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.351721][T24380] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 1420.415850][T16091] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1420.609157][T19781] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1420.738118][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.755988][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.761093][T19781] usb 2-1: device descriptor read/64, error -71 [ 1420.767071][T18299] bond0 (unregistering): Released all slaves [ 1420.789248][ T5283] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1420.858456][T10636] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1420.876311][T24406] syzkaller0: entered promiscuous mode [ 1420.876378][T24406] syzkaller0: entered allmulticast mode [ 1420.906570][T24408] netlink: 168 bytes leftover after parsing attributes in process `syz.9.4929'. [ 1420.999141][T19781] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1421.021606][T10636] usb 3-1: not running at top speed; connect to a high speed hub [ 1421.021658][T10636] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1421.044743][T10636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.053326][T10636] usb 3-1: Product: syz [ 1421.053374][T10636] usb 3-1: Manufacturer: syz [ 1421.053393][T10636] usb 3-1: SerialNumber: syz [ 1421.128745][T19781] usb 2-1: device descriptor read/64, error -71 [ 1421.239866][T19781] usb usb2-port1: attempt power cycle [ 1421.370487][T23321] usb 5-1: USB disconnect, device number 91 [ 1421.596286][T19781] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1421.635556][T19781] usb 2-1: device descriptor read/8, error -71 [ 1421.899461][T19781] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1421.934570][T19781] usb 2-1: device descriptor read/8, error -71 [ 1422.040729][T19781] usb usb2-port1: unable to enumerate USB device [ 1422.367786][ C0] usb 3-1: received EP1 urb->status = -71 [ 1422.380940][T10636] input: as /devices/platform/dummy_hcd.2/usb3/3-1/input/input154 [ 1422.579924][T10636] usb 3-1: USB disconnect, device number 99 [ 1422.816283][T24275] udevd[24275]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1423.109821][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.109908][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.320568][T19782] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1423.453347][T24430] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4938'. [ 1423.470417][T10636] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1423.472344][T19782] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 1.00 [ 1423.476675][T19782] usb 3-1: config index 0 descriptor too short (expected 39, got 25) [ 1423.494087][T19782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.494119][T19782] usb 3-1: Product: syz [ 1423.496273][T19782] usb 3-1: Manufacturer: syz [ 1423.496326][T19782] usb 3-1: SerialNumber: syz [ 1423.629793][T10636] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.00 [ 1423.631436][T10636] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1423.632120][T10636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.736229][T19782] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 1423.865325][T10636] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1424.176593][T19730] usb 5-1: Unsupported hardware version: 0xffffffff [ 1424.176654][T19730] usb 5-1: could not get hw params (-22) [ 1424.232798][T19730] usb 5-1: could not probe fw (-22) [ 1426.772859][T10636] usb 5-1: USB disconnect, device number 92 [ 1427.117648][T23321] wiimote 0005:057E:0306.0045: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 1427.128236][T23321] wiimote 0005:057E:0306.0045: New device registered [ 1427.169818][T24437] wiimote 0005:057E:0306.0045: Device removed [ 1427.266902][T24439] fido_id[24439]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1428.040799][T24195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.139903][T19782] dvb_usb_rtl28xxu 3-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1428.150323][T19782] usb 3-1: USB disconnect, device number 100 [ 1428.221029][ T5716] wiimote 0005:057E:0306.0045: detected device: Nintendo Wii Remote (Gen 1) [ 1428.271295][ T9084] opera: did not find the firmware file 'dvb-usb-opera1-fpga-01.fw'. You can use /scripts/get_dvb_firmware to get the firmware [ 1428.291368][ T9084] opera1 9-1:1.0: probe with driver opera1 failed with error -22 [ 1428.312468][T24195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.327747][ T5716] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0045/input/input156 [ 1428.347944][ T5716] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0045/input/input157 [ 1428.381786][ T5716] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0045/input/input155 [ 1428.415351][ T9084] usb 9-1: USB disconnect, device number 7 [ 1428.519455][T19782] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1428.623960][T18299] hsr_slave_0: left promiscuous mode [ 1428.676184][T18299] hsr_slave_1: left promiscuous mode [ 1428.682214][T19782] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1428.694241][T18299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.702512][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.712836][T19782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.712900][T19782] usb 3-1: Product: syz [ 1428.712936][T19782] usb 3-1: Manufacturer: syz [ 1428.712994][T19782] usb 3-1: SerialNumber: syz [ 1428.735656][T18299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.745034][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.836345][T10634] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1428.882647][T18299] veth1_macvtap: left promiscuous mode [ 1428.888435][T18299] veth0_macvtap: left promiscuous mode [ 1428.894747][T18299] veth1_vlan: left promiscuous mode [ 1428.900363][T18299] veth0_vlan: left promiscuous mode [ 1429.557171][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1429.602888][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1429.620701][T24452] nvme nvme0: failed to connect socket: -512 [ 1429.840155][T19721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.840488][T19721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.878087][T19721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.878231][T19721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1430.156460][T10634] usb 3-1: Service connection timeout for: 256 [ 1430.156643][T10634] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1430.250260][T10634] ath9k_htc: Failed to initialize the device [ 1430.377670][T10634] usb 3-1: ath9k_htc: USB layer deinitialized [ 1430.390619][T24195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.404728][T19781] usb 3-1: USB disconnect, device number 101 [ 1430.472137][ T5283] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1430.624115][T24195] veth0_vlan: entered promiscuous mode [ 1430.680122][T24195] veth1_vlan: entered promiscuous mode [ 1430.729771][T24195] veth0_macvtap: entered promiscuous mode [ 1430.745564][T24195] veth1_macvtap: entered promiscuous mode [ 1430.886539][T24195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1430.897509][T24481] syzkaller0: entered promiscuous mode [ 1430.897553][T24481] syzkaller0: entered allmulticast mode [ 1430.917524][T24481] netlink: 168 bytes leftover after parsing attributes in process `syz.9.4950'. [ 1430.933238][T24195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.110444][T19740] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.110899][T19740] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.120177][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.127027][T19735] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.300374][T19730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.300420][T19730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.407916][T19740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.407961][T19740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.920244][T24519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1431.952696][T24521] syzkaller0: entered promiscuous mode [ 1431.958316][T24521] syzkaller0: entered allmulticast mode [ 1431.971190][T24521] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4962'. [ 1432.038344][ T5283] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1432.388983][ T9072] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1432.553221][ T9072] usb 3-1: not running at top speed; connect to a high speed hub [ 1432.562113][ T9072] usb 3-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice= 0.00 [ 1432.573300][ T9072] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1432.585184][ T9072] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1432.601986][ T9072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.610834][ T9072] usb 3-1: Product: syz [ 1432.615132][ T9072] usb 3-1: Manufacturer: syz [ 1432.615155][ T9072] usb 3-1: SerialNumber: syz [ 1432.632985][T24529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1432.641437][T24529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1432.855806][T24529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1432.864222][T24529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1433.076904][ T9072] asix 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1433.079458][T10635] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1433.087482][ T9072] asix 3-1:1.0: probe with driver asix failed with error -61 [ 1433.230627][T10635] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1433.234605][T10635] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 1433.234698][T10635] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1433.234758][T10635] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 1433.234823][T10635] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 64 [ 1433.234887][T10635] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1433.234982][T10635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.272961][T17931] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1433.313998][T24548] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1433.314587][T24548] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1433.315033][T24548] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1433.315435][T24548] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1433.356258][T10635] usb 2-1: probing VID:PID(0424:012C) [ 1433.370067][T10635] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 1433.370126][T10635] usb 2-1: vub300 testing BULK IN EndPoint(1) 82 [ 1433.370148][T10635] usb 2-1: vub300 testing BULK OUT EndPoint(2) 01 [ 1433.370206][T10635] usb 2-1: vub300 testing BULK OUT EndPoint(3) 02 [ 1433.370290][T10635] usb 2-1: vub300 SMALL packets using EndPoints 01 81 02 82 [ 1433.450152][T17931] usb 10-1: not running at top speed; connect to a high speed hub [ 1433.458465][T17931] usb 10-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1433.472831][T17931] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1433.472907][T17931] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.500385][T17931] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1433.769800][T10635] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 64 byte USB packets [ 1433.980410][T10635] vub300 2-1:1.0: probe with driver vub300 failed with error -22 [ 1434.231459][T17931] gspca_spca501: reg write: error -110 [ 1434.231507][T17931] spca501 10-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 1434.231780][T17931] spca501 10-1:1.0: probe with driver spca501 failed with error -22 [ 1434.237088][T17931] uvcvideo 10-1:1.0: Found UVC 1.00 device (0000:0000) [ 1434.243286][T17931] uvcvideo 10-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1434.244290][T17931] uvcvideo 10-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 1434.244343][T17931] uvcvideo 10-1:1.1: Failed to initialize the device (-5). [ 1434.245037][T17931] uvcvideo 10-1:1.0: probe with driver uvcvideo failed with error -5 [ 1434.329144][T10634] misc userio: Buffer overflowed, userio client isn't keeping up [ 1434.464173][ T9072] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1434.613437][ T9072] usb 5-1: New USB device found, idVendor=045e, idProduct=0291, bcdDevice= 1.14 [ 1434.620344][ T9072] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1434.620428][ T9072] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1434.656788][ T9072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.656840][ T9072] usb 5-1: Product: syz [ 1434.656875][ T9072] usb 5-1: Manufacturer: syz [ 1434.656961][ T9072] usb 5-1: SerialNumber: syz [ 1434.695393][ T9072] xpad 5-1:1.0: probe with driver xpad failed with error -5 [ 1434.947389][ T9072] usb 5-1: USB disconnect, device number 93 [ 1435.193697][ T9072] usb 3-1: USB disconnect, device number 102 [ 1435.631737][T24632] syzkaller0: entered promiscuous mode [ 1435.637462][T24632] syzkaller0: entered allmulticast mode [ 1435.647870][T24632] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4973'. [ 1435.877611][ T9072] usb 2-1: USB disconnect, device number 28 [ 1436.113386][T16091] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.0046/input/input160 [ 1436.210640][T16091] asus 0018:0B05:0101.0046: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1 [ 1436.774254][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1436.924432][T23321] usb 10-1: USB disconnect, device number 7 [ 1436.938340][T16091] asus 0018:0B05:0101.0046: Asus failed to start multitouch: -5 [ 1437.112260][T16091] asus 0018:0B05:0101.0046: probe with driver asus failed with error -5 [ 1437.138332][ T9072] wiimote 0005:057E:0306.0047: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 1437.139258][ T9072] wiimote 0005:057E:0306.0047: New device registered [ 1437.418957][T23321] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1437.489098][T19781] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1437.570133][T23321] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.00 [ 1437.575655][T23321] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.575724][T23321] usb 10-1: Product: syz [ 1437.575768][T23321] usb 10-1: Manufacturer: syz [ 1437.575811][T23321] usb 10-1: SerialNumber: syz [ 1437.635641][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1437.646810][T19781] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1437.663591][T19781] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1437.663670][T19781] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1437.663723][T19781] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1437.663768][T19781] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1437.663890][T19781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.690516][T10634] misc userio: Buffer overflowed, userio client isn't keeping up [ 1437.707498][T24682] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1437.707975][T24682] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1437.711284][T24682] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1437.711834][T24682] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1437.784557][T19781] usb 3-1: probing VID:PID(0424:012C) [ 1437.793578][T19781] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 1437.793626][T19781] usb 3-1: vub300 testing BULK IN EndPoint(1) 82 [ 1437.793666][T19781] usb 3-1: vub300 testing BULK OUT EndPoint(2) 01 [ 1437.793702][T19781] usb 3-1: vub300 testing BULK OUT EndPoint(3) 02 [ 1437.793727][T19781] usb 3-1: vub300 SMALL packets using EndPoints 01 81 02 82 [ 1437.809155][T24672] wiimote 0005:057E:0306.0047: Device removed [ 1437.937134][T19781] vub300 3-1:1.0: probe with driver vub300 failed with error -71 [ 1437.967510][T19781] usb 3-1: USB disconnect, device number 103 [ 1438.082754][T23321] usb 10-1: Direct firmware load for ath6k/AR6004/hw1.3/bdata.bin failed with error -2 [ 1438.092649][T23321] usb 10-1: Falling back to sysfs fallback for: ath6k/AR6004/hw1.3/bdata.bin [ 1438.152131][T17931] wiimote 0005:057E:0306.0048: unbalanced collection at end of report description [ 1438.163587][T17931] wiimote 0005:057E:0306.0048: HID parse failed [ 1438.173126][T17931] wiimote 0005:057E:0306.0048: probe with driver wiimote failed with error -22 [ 1438.228867][ T9072] wiimote 0005:057E:0306.0047: detected device: Nintendo Wii Remote (Gen 1) [ 1438.278917][ T9072] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0047/input/input162 [ 1438.310202][ T9072] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0047/input/input163 [ 1438.351669][ T9072] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0047/input/input161 [ 1438.888842][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1439.184511][T24721] syzkaller0: entered promiscuous mode [ 1439.184559][T24721] syzkaller0: entered allmulticast mode [ 1439.204478][T24721] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4984'. [ 1439.441099][ T9084] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1439.612238][ T9084] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice= 1.00 [ 1439.628411][ T9084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.640448][ T9084] usb 5-1: Product: syz [ 1439.640544][ T9084] usb 5-1: Manufacturer: syz [ 1439.640568][ T9084] usb 5-1: SerialNumber: syz [ 1439.680118][T23311] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1439.704049][ T9084] em28xx 5-1:1.0: New device syz syz @ 480 Mbps (eb1a:2800, interface 0, class 0) [ 1439.713861][ T9084] em28xx 5-1:1.0: Video interface 0 found: bulk [ 1439.794943][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1439.850395][T23311] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1439.856512][T23311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.902648][T23311] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1440.185171][ T9084] em28xx 5-1:1.0: chip ID is em2710 [ 1440.409033][T23311] gspca_mr97310a: reg write [21] error -110 [ 1440.409211][T23311] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -110 [ 1440.462225][T23311] input: syz0 as /devices/virtual/misc/uhid/0005:054C:0306.0049/input/input164 [ 1440.492996][T23311] sony 0005:054C:0306.0049: input,hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 1441.048740][T10634] misc userio: Buffer overflowed, userio client isn't keeping up [ 1441.389012][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xa0 (error=-5) [ 1441.389164][ T9084] em28xx 5-1:1.0: board has no eeprom [ 1441.391486][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x0 (error=-5) [ 1441.395487][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x2 (error=-5) [ 1441.402089][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x4 (error=-5) [ 1441.407249][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x6 (error=-5) [ 1441.413043][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x8 (error=-5) [ 1441.418183][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xa (error=-5) [ 1441.419178][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xc (error=-5) [ 1441.427241][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xe (error=-5) [ 1441.434009][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x10 (error=-5) [ 1441.443224][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x12 (error=-5) [ 1441.445320][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x14 (error=-5) [ 1441.448162][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x16 (error=-5) [ 1441.456195][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x18 (error=-5) [ 1441.458076][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x1a (error=-5) [ 1441.465868][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x1c (error=-5) [ 1441.468201][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x1e (error=-5) [ 1441.473444][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x20 (error=-5) [ 1441.474507][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x22 (error=-5) [ 1441.477783][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x24 (error=-5) [ 1441.482587][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x26 (error=-5) [ 1441.487517][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x28 (error=-5) [ 1441.490906][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x2a (error=-5) [ 1441.515616][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x2c (error=-5) [ 1441.523298][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x2e (error=-5) [ 1441.524765][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x30 (error=-5) [ 1441.533717][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x32 (error=-5) [ 1441.537126][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x34 (error=-5) [ 1441.543262][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x36 (error=-5) [ 1441.550511][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x38 (error=-5) [ 1441.553540][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x3a (error=-5) [ 1441.559689][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x3c (error=-5) [ 1441.561681][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x3e (error=-5) [ 1441.565662][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x40 (error=-5) [ 1441.568355][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x42 (error=-5) [ 1441.571528][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x44 (error=-5) [ 1441.573539][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x46 (error=-5) [ 1441.574316][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x48 (error=-5) [ 1441.577139][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x4a (error=-5) [ 1441.587640][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x4c (error=-5) [ 1441.592665][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x4e (error=-5) [ 1441.593860][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x50 (error=-5) [ 1441.608117][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x52 (error=-5) [ 1441.614913][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x54 (error=-5) [ 1441.617664][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x56 (error=-5) [ 1441.629925][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x58 (error=-5) [ 1441.632593][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x5a (error=-5) [ 1441.635037][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x5c (error=-5) [ 1441.636065][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x5e (error=-5) [ 1441.655095][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x60 (error=-5) [ 1441.690122][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x62 (error=-5) [ 1441.697248][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x64 (error=-5) [ 1441.701515][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x66 (error=-5) [ 1441.707772][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x68 (error=-5) [ 1441.712241][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x6a (error=-5) [ 1441.717498][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x6c (error=-5) [ 1441.724282][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x6e (error=-5) [ 1441.726750][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x70 (error=-5) [ 1441.733678][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x72 (error=-5) [ 1441.746022][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x74 (error=-5) [ 1441.752877][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x76 (error=-5) [ 1441.753588][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x78 (error=-5) [ 1441.757998][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x7a (error=-5) [ 1441.760066][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x7c (error=-5) [ 1441.766510][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x7e (error=-5) [ 1441.769135][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x80 (error=-5) [ 1441.771626][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x82 (error=-5) [ 1441.777634][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x84 (error=-5) [ 1441.781560][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x86 (error=-5) [ 1441.786372][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x88 (error=-5) [ 1441.787581][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x8a (error=-5) [ 1441.793621][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x8c (error=-5) [ 1441.794678][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x8e (error=-5) [ 1441.795824][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x90 (error=-5) [ 1441.798203][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x92 (error=-5) [ 1441.807160][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x94 (error=-5) [ 1441.808249][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x96 (error=-5) [ 1441.809037][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x98 (error=-5) [ 1441.810152][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x9a (error=-5) [ 1441.810710][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x9c (error=-5) [ 1441.814511][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0x9e (error=-5) [ 1441.817561][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xa0 (error=-5) [ 1441.821881][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xa2 (error=-5) [ 1441.856472][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xa4 (error=-5) [ 1441.874318][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xa6 (error=-5) [ 1441.877902][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xa8 (error=-5) [ 1441.884888][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xaa (error=-5) [ 1441.887574][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xac (error=-5) [ 1441.891915][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xae (error=-5) [ 1441.893967][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xb0 (error=-5) [ 1441.901158][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xb2 (error=-5) [ 1441.902420][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xb4 (error=-5) [ 1441.905765][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xb6 (error=-5) [ 1441.907629][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xb8 (error=-5) [ 1441.914639][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xba (error=-5) [ 1441.915687][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xbc (error=-5) [ 1441.916337][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xbe (error=-5) [ 1441.918441][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xc0 (error=-5) [ 1441.925237][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xc2 (error=-5) [ 1441.935728][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xc4 (error=-5) [ 1442.309672][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xc6 (error=-5) [ 1442.320231][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xc8 (error=-5) [ 1442.329468][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xca (error=-5) [ 1442.339130][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xcc (error=-5) [ 1442.348512][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xce (error=-5) [ 1442.357952][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xd0 (error=-5) [ 1442.369272][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xd2 (error=-5) [ 1442.378510][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xd4 (error=-5) [ 1442.388243][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xd6 (error=-5) [ 1442.397471][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xd8 (error=-5) [ 1442.406887][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xda (error=-5) [ 1442.416097][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xdc (error=-5) [ 1442.428173][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xde (error=-5) [ 1442.438000][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xe0 (error=-5) [ 1442.454803][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xe2 (error=-5) [ 1442.466971][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xe4 (error=-5) [ 1442.476291][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xe6 (error=-5) [ 1442.485622][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xe8 (error=-5) [ 1442.494816][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xea (error=-5) [ 1442.504039][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xec (error=-5) [ 1442.513681][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xee (error=-5) [ 1442.522871][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xf0 (error=-5) [ 1442.532012][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xf2 (error=-5) [ 1442.541926][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xf4 (error=-5) [ 1442.551102][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xf6 (error=-5) [ 1442.560298][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xf8 (error=-5) [ 1442.569973][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xfa (error=-5) [ 1442.579262][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xfc (error=-5) [ 1442.588364][ T9084] em28xx 5-1:1.0: failed to trigger read from i2c address 0xfe (error=-5) [ 1442.597084][ T9084] em28xx 5-1:1.0: Your board has no unique USB ID and thus need a hint to be detected. [ 1442.597084][ T9084] You may try to use card= insmod option to workaround that. [ 1442.597084][ T9084] Please send an email with this log to: [ 1442.597084][ T9084] V4L Mailing List [ 1442.597084][ T9084] Board eeprom hash is 0x00000000 [ 1442.597084][ T9084] Board i2c devicelist hash is 0x1b800080 [ 1442.636918][ T9084] em28xx 5-1:1.0: Here is a list of valid choices for the card= insmod option: [ 1442.646291][ T9084] em28xx 5-1:1.0: card=0 -> Unknown EM2800 video grabber [ 1442.654135][ T9084] em28xx 5-1:1.0: card=1 -> Unknown EM2750/28xx video grabber [ 1442.662116][ T9084] em28xx 5-1:1.0: card=2 -> Terratec Cinergy 250 USB [ 1442.669338][ T9084] em28xx 5-1:1.0: card=3 -> Pinnacle PCTV USB 2 [ 1442.676528][ T9084] em28xx 5-1:1.0: card=4 -> Hauppauge WinTV USB 2 [ 1442.683424][ T9084] em28xx 5-1:1.0: card=5 -> MSI VOX USB 2.0 [ 1442.683448][ T9084] em28xx 5-1:1.0: card=6 -> Terratec Cinergy 200 USB [ 1442.683467][ T9084] em28xx 5-1:1.0: card=7 -> Leadtek Winfast USB II [ 1442.683486][ T9084] em28xx 5-1:1.0: card=8 -> Kworld USB2800 [ 1442.683504][ T9084] em28xx 5-1:1.0: card=9 -> Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U [ 1442.683529][ T9084] em28xx 5-1:1.0: card=10 -> Hauppauge WinTV HVR 900 [ 1442.683548][ T9084] em28xx 5-1:1.0: card=11 -> Terratec Hybrid XS [ 1442.683566][ T9084] em28xx 5-1:1.0: card=12 -> Kworld PVR TV 2800 RF [ 1442.683584][ T9084] em28xx 5-1:1.0: card=13 -> Terratec Prodigy XS [ 1442.683602][ T9084] em28xx 5-1:1.0: card=14 -> SIIG AVTuner-PVR / Pixelview Prolink PlayTV USB 2.0 [ 1442.683622][ T9084] em28xx 5-1:1.0: card=15 -> V-Gear PocketTV [ 1442.683639][ T9084] em28xx 5-1:1.0: card=16 -> Hauppauge WinTV HVR 950 [ 1442.683657][ T9084] em28xx 5-1:1.0: card=17 -> Pinnacle PCTV HD Pro Stick [ 1442.683676][ T9084] em28xx 5-1:1.0: card=18 -> Hauppauge WinTV HVR 900 (R2) [ 1442.683695][ T9084] em28xx 5-1:1.0: card=19 -> EM2860/SAA711X Reference Design [ 1442.683714][ T9084] em28xx 5-1:1.0: card=20 -> AMD ATI TV Wonder HD 600 [ 1442.683730][ T9084] em28xx 5-1:1.0: card=21 -> eMPIA Technology, Inc. GrabBeeX+ Video Encoder [ 1442.683749][ T9084] em28xx 5-1:1.0: card=22 -> EM2710/EM2750/EM2751 webcam grabber [ 1442.683768][ T9084] em28xx 5-1:1.0: card=23 -> Huaqi DLCW-130 [ 1442.683786][ T9084] em28xx 5-1:1.0: card=24 -> D-Link DUB-T210 TV Tuner [ 1442.683812][ T9084] em28xx 5-1:1.0: card=25 -> Gadmei UTV310 [ 1442.683829][ T9084] em28xx 5-1:1.0: card=26 -> Hercules Smart TV USB 2.0 [ 1442.683845][ T9084] em28xx 5-1:1.0: card=27 -> Pinnacle PCTV USB 2 (Philips FM1216ME) [ 1442.683863][ T9084] em28xx 5-1:1.0: card=28 -> Leadtek Winfast USB II Deluxe [ 1442.683880][ T9084] em28xx 5-1:1.0: card=29 -> EM2860/TVP5150 Reference Design [ 1442.683897][ T9084] em28xx 5-1:1.0: card=30 -> Videology 20K14XUSB USB2.0 [ 1442.683915][ T9084] em28xx 5-1:1.0: card=31 -> Usbgear VD204v9 [ 1442.683931][ T9084] em28xx 5-1:1.0: card=32 -> Supercomp USB 2.0 TV [ 1442.683949][ T9084] em28xx 5-1:1.0: card=33 -> Elgato Video Capture [ 1442.683967][ T9084] em28xx 5-1:1.0: card=34 -> Terratec Cinergy A Hybrid XS [ 1442.683984][ T9084] em28xx 5-1:1.0: card=35 -> Typhoon DVD Maker [ 1442.684002][ T9084] em28xx 5-1:1.0: card=36 -> NetGMBH Cam [ 1442.684019][ T9084] em28xx 5-1:1.0: card=37 -> Gadmei UTV330 [ 1442.684037][ T9084] em28xx 5-1:1.0: card=38 -> Yakumo MovieMixer [ 1442.684054][ T9084] em28xx 5-1:1.0: card=39 -> KWorld PVRTV 300U [ 1442.684072][ T9084] em28xx 5-1:1.0: card=40 -> Plextor ConvertX PX-TV100U [ 1442.684091][ T9084] em28xx 5-1:1.0: card=41 -> Kworld 350 U DVB-T [ 1442.684108][ T9084] em28xx 5-1:1.0: card=42 -> Kworld 355 U DVB-T [ 1442.684126][ T9084] em28xx 5-1:1.0: card=43 -> Terratec Cinergy T XS [ 1442.684144][ T9084] em28xx 5-1:1.0: card=44 -> Terratec Cinergy T XS (MT2060) [ 1442.684162][ T9084] em28xx 5-1:1.0: card=45 -> Pinnacle PCTV DVB-T [ 1442.684179][ T9084] em28xx 5-1:1.0: card=46 -> Compro, VideoMate U3 [ 1442.684196][ T9084] em28xx 5-1:1.0: card=47 -> KWorld DVB-T 305U [ 1442.684213][ T9084] em28xx 5-1:1.0: card=48 -> KWorld DVB-T 310U [ 1442.684230][ T9084] em28xx 5-1:1.0: card=49 -> MSI DigiVox A/D [ 1442.684247][ T9084] em28xx 5-1:1.0: card=50 -> MSI DigiVox A/D II [ 1442.684265][ T9084] em28xx 5-1:1.0: card=51 -> Terratec Hybrid XS Secam [ 1442.684283][ T9084] em28xx 5-1:1.0: card=52 -> DNT DA2 Hybrid [ 1442.684300][ T9084] em28xx 5-1:1.0: card=53 -> Pinnacle Hybrid Pro [ 1442.684318][ T9084] em28xx 5-1:1.0: card=54 -> Kworld VS-DVB-T 323UR [ 1442.684336][ T9084] em28xx 5-1:1.0: card=55 -> Terratec Cinergy Hybrid T USB XS (em2882) [ 1442.684356][ T9084] em28xx 5-1:1.0: card=56 -> Pinnacle Hybrid Pro (330e) [ 1442.684375][ T9084] em28xx 5-1:1.0: card=57 -> Kworld PlusTV HD Hybrid 330 [ 1442.684394][ T9084] em28xx 5-1:1.0: card=58 -> Compro VideoMate ForYou/Stereo [ 1442.684413][ T9084] em28xx 5-1:1.0: card=59 -> Pinnacle PCTV HD Mini [ 1442.684431][ T9084] em28xx 5-1:1.0: card=60 -> Hauppauge WinTV HVR 850 [ 1442.684450][ T9084] em28xx 5-1:1.0: card=61 -> Pixelview PlayTV Box 4 USB 2.0 [ 1442.777874][ T9084] em28xx 5-1:1.0: card=62 -> Gadmei TVR200 [ 1442.777900][ T9084] em28xx 5-1:1.0: card=63 -> Kaiomy TVnPC U2 [ 1442.777919][ T9084] em28xx 5-1:1.0: card=64 -> Easy Cap Capture DC-60 [ 1442.777938][ T9084] em28xx 5-1:1.0: card=65 -> IO-DATA GV-MVP/SZ [ 1442.777957][ T9084] em28xx 5-1:1.0: card=66 -> Empire dual TV [ 1442.777975][ T9084] em28xx 5-1:1.0: card=67 -> Terratec Grabby [ 1442.777993][ T9084] em28xx 5-1:1.0: card=68 -> Terratec AV350 [ 1442.778011][ T9084] em28xx 5-1:1.0: card=69 -> KWorld ATSC 315U HDTV TV Box [ 1442.778030][ T9084] em28xx 5-1:1.0: card=70 -> Evga inDtube [ 1442.778047][ T9084] em28xx 5-1:1.0: card=71 -> Silvercrest Webcam 1.3mpix [ 1442.778066][ T9084] em28xx 5-1:1.0: card=72 -> Gadmei UTV330+ [ 1442.778084][ T9084] em28xx 5-1:1.0: card=73 -> Reddo DVB-C USB TV Box [ 1442.778101][ T9084] em28xx 5-1:1.0: card=74 -> Actionmaster/LinXcel/Digitus VC211A [ 1442.778119][ T9084] em28xx 5-1:1.0: card=75 -> Dikom DK300 [ 1442.778136][ T9084] em28xx 5-1:1.0: card=76 -> KWorld PlusTV 340U or UB435-Q (ATSC) [ 1442.778154][ T9084] em28xx 5-1:1.0: card=77 -> EM2874 Leadership ISDBT [ 1442.778172][ T9084] em28xx 5-1:1.0: card=78 -> PCTV nanoStick T2 290e [ 1442.778190][ T9084] em28xx 5-1:1.0: card=79 -> Terratec Cinergy H5 [ 1442.778207][ T9084] em28xx 5-1:1.0: card=80 -> PCTV DVB-S2 Stick (460e) [ 1442.778225][ T9084] em28xx 5-1:1.0: card=81 -> Hauppauge WinTV HVR 930C [ 1442.778242][ T9084] em28xx 5-1:1.0: card=82 -> Terratec Cinergy HTC Stick [ 1442.778260][ T9084] em28xx 5-1:1.0: card=83 -> Honestech Vidbox NW03 [ 1442.778278][ T9084] em28xx 5-1:1.0: card=84 -> MaxMedia UB425-TC [ 1442.778295][ T9084] em28xx 5-1:1.0: card=85 -> PCTV QuatroStick (510e) [ 1442.778313][ T9084] em28xx 5-1:1.0: card=86 -> PCTV QuatroStick nano (520e) [ 1442.778332][ T9084] em28xx 5-1:1.0: card=87 -> Terratec Cinergy HTC USB XS [ 1442.778349][ T9084] em28xx 5-1:1.0: card=88 -> C3 Tech Digital Duo HDTV/SDTV USB [ 1442.778367][ T9084] em28xx 5-1:1.0: card=89 -> Delock 61959 [ 1442.778385][ T9084] em28xx 5-1:1.0: card=90 -> KWorld USB ATSC TV Stick UB435-Q V2 [ 1442.778404][ T9084] em28xx 5-1:1.0: card=91 -> SpeedLink Vicious And Devine Laplace webcam [ 1442.778423][ T9084] em28xx 5-1:1.0: card=92 -> PCTV DVB-S2 Stick (461e) [ 1442.778441][ T9084] em28xx 5-1:1.0: card=93 -> KWorld USB ATSC TV Stick UB435-Q V3 [ 1442.778461][ T9084] em28xx 5-1:1.0: card=94 -> PCTV tripleStick (292e) [ 1442.778478][ T9084] em28xx 5-1:1.0: card=95 -> Leadtek VC100 [ 1442.778496][ T9084] em28xx 5-1:1.0: card=96 -> Terratec Cinergy T2 Stick HD [ 1442.778514][ T9084] em28xx 5-1:1.0: card=97 -> Elgato EyeTV Hybrid 2008 INT [ 1442.778532][ T9084] em28xx 5-1:1.0: card=98 -> PLEX PX-BCUD [ 1442.778549][ T9084] em28xx 5-1:1.0: card=99 -> Hauppauge WinTV-dualHD DVB [ 1442.846572][ T9084] em28xx 5-1:1.0: card=100 -> Hauppauge WinTV-dualHD 01595 ATSC/QAM [ 1442.846601][ T9084] em28xx 5-1:1.0: card=101 -> Terratec Cinergy H6 rev. 2 [ 1442.846621][ T9084] em28xx 5-1:1.0: card=102 -> :ZOLID HYBRID TV STICK [ 1442.846642][ T9084] em28xx 5-1:1.0: card=103 -> Magix USB Videowandler-2 [ 1442.846661][ T9084] em28xx 5-1:1.0: card=104 -> PCTV DVB-S2 Stick (461e v2) [ 1442.846680][ T9084] em28xx 5-1:1.0: card=105 -> MyGica iGrabber [ 1442.846699][ T9084] em28xx 5-1:1.0: card=106 -> Hauppauge USB QuadHD ATSC [ 1442.846717][ T9084] em28xx 5-1:1.0: card=107 -> MyGica UTV3 Analog USB2.0 TV Box [ 1442.846736][ T9084] em28xx 5-1:1.0: card=108 -> Hauppauge USB Live2 [ 1442.846754][ T9084] em28xx 5-1:1.0: card=109 -> Hauppauge WinTV-HVR-935 [ 1442.846771][ T9084] em28xx 5-1:1.0: card=110 -> Hauppauge WinTV-HVR-955 [ 1442.846797][ T9084] em28xx 5-1:1.0: card=111 -> Hauppauge WinTV-HVR-975 [ 1442.846816][ T9084] em28xx 5-1:1.0: card=112 -> PCTV DVB-S2 Stick (461e v3) [ 1442.846835][ T9084] em28xx 5-1:1.0: card=113 -> StarTech SVID2USB232 [ 1442.846870][ T9084] em28xx 5-1:1.0: Board not discovered [ 1442.846885][ T9084] em28xx 5-1:1.0: Identified as Unknown EM2800 video grabber (card=0) [ 1442.846906][ T9084] em28xx 5-1:1.0: Your board has no unique USB ID and thus need a hint to be detected. [ 1442.846906][ T9084] You may try to use card= insmod option to workaround that. [ 1442.846906][ T9084] Please send an email with this log to: [ 1442.846906][ T9084] V4L Mailing List [ 1442.846906][ T9084] Board eeprom hash is 0x00000000 [ 1442.846906][ T9084] Board i2c devicelist hash is 0x1b800080 [ 1442.846940][ T9084] em28xx 5-1:1.0: Here is a list of valid choices for the card= insmod option: [ 1442.846956][ T9084] em28xx 5-1:1.0: card=0 -> Unknown EM2800 video grabber [ 1442.846974][ T9084] em28xx 5-1:1.0: card=1 -> Unknown EM2750/28xx video grabber [ 1442.846993][ T9084] em28xx 5-1:1.0: card=2 -> Terratec Cinergy 250 USB [ 1442.847011][ T9084] em28xx 5-1:1.0: card=3 -> Pinnacle PCTV USB 2 [ 1442.847028][ T9084] em28xx 5-1:1.0: card=4 -> Hauppauge WinTV USB 2 [ 1442.847046][ T9084] em28xx 5-1:1.0: card=5 -> MSI VOX USB 2.0 [ 1442.847063][ T9084] em28xx 5-1:1.0: card=6 -> Terratec Cinergy 200 USB [ 1442.847081][ T9084] em28xx 5-1:1.0: card=7 -> Leadtek Winfast USB II [ 1442.847098][ T9084] em28xx 5-1:1.0: card=8 -> Kworld USB2800 [ 1442.847116][ T9084] em28xx 5-1:1.0: card=9 -> Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U [ 1442.847141][ T9084] em28xx 5-1:1.0: card=10 -> Hauppauge WinTV HVR 900 [ 1442.847159][ T9084] em28xx 5-1:1.0: card=11 -> Terratec Hybrid XS [ 1442.847177][ T9084] em28xx 5-1:1.0: card=12 -> Kworld PVR TV 2800 RF [ 1442.915207][ T9084] em28xx 5-1:1.0: card=13 -> Terratec Prodigy XS [ 1442.915239][ T9084] em28xx 5-1:1.0: card=14 -> SIIG AVTuner-PVR / Pixelview Prolink PlayTV USB 2.0 [ 1442.915260][ T9084] em28xx 5-1:1.0: card=15 -> V-Gear PocketTV [ 1442.915278][ T9084] em28xx 5-1:1.0: card=16 -> Hauppauge WinTV HVR 950 [ 1442.915297][ T9084] em28xx 5-1:1.0: card=17 -> Pinnacle PCTV HD Pro Stick [ 1442.915316][ T9084] em28xx 5-1:1.0: card=18 -> Hauppauge WinTV HVR 900 (R2) [ 1442.915334][ T9084] em28xx 5-1:1.0: card=19 -> EM2860/SAA711X Reference Design [ 1442.915353][ T9084] em28xx 5-1:1.0: card=20 -> AMD ATI TV Wonder HD 600 [ 1442.915372][ T9084] em28xx 5-1:1.0: card=21 -> eMPIA Technology, Inc. GrabBeeX+ Video Encoder [ 1442.915392][ T9084] em28xx 5-1:1.0: card=22 -> EM2710/EM2750/EM2751 webcam grabber [ 1442.915412][ T9084] em28xx 5-1:1.0: card=23 -> Huaqi DLCW-130 [ 1442.915430][ T9084] em28xx 5-1:1.0: card=24 -> D-Link DUB-T210 TV Tuner [ 1442.915448][ T9084] em28xx 5-1:1.0: card=25 -> Gadmei UTV310 [ 1442.915466][ T9084] em28xx 5-1:1.0: card=26 -> Hercules Smart TV USB 2.0 [ 1442.915484][ T9084] em28xx 5-1:1.0: card=27 -> Pinnacle PCTV USB 2 (Philips FM1216ME) [ 1442.915502][ T9084] em28xx 5-1:1.0: card=28 -> Leadtek Winfast USB II Deluxe [ 1442.915519][ T9084] em28xx 5-1:1.0: card=29 -> EM2860/TVP5150 Reference Design [ 1442.915537][ T9084] em28xx 5-1:1.0: card=30 -> Videology 20K14XUSB USB2.0 [ 1442.915555][ T9084] em28xx 5-1:1.0: card=31 -> Usbgear VD204v9 [ 1442.915572][ T9084] em28xx 5-1:1.0: card=32 -> Supercomp USB 2.0 TV [ 1442.915588][ T9084] em28xx 5-1:1.0: card=33 -> Elgato Video Capture [ 1442.915605][ T9084] em28xx 5-1:1.0: card=34 -> Terratec Cinergy A Hybrid XS [ 1442.915622][ T9084] em28xx 5-1:1.0: card=35 -> Typhoon DVD Maker [ 1442.915638][ T9084] em28xx 5-1:1.0: card=36 -> NetGMBH Cam [ 1442.915654][ T9084] em28xx 5-1:1.0: card=37 -> Gadmei UTV330 [ 1442.915670][ T9084] em28xx 5-1:1.0: card=38 -> Yakumo MovieMixer [ 1442.915688][ T9084] em28xx 5-1:1.0: card=39 -> KWorld PVRTV 300U [ 1442.915704][ T9084] em28xx 5-1:1.0: card=40 -> Plextor ConvertX PX-TV100U [ 1442.915722][ T9084] em28xx 5-1:1.0: card=41 -> Kworld 350 U DVB-T [ 1442.915740][ T9084] em28xx 5-1:1.0: card=42 -> Kworld 355 U DVB-T [ 1442.915756][ T9084] em28xx 5-1:1.0: card=43 -> Terratec Cinergy T XS [ 1442.915773][ T9084] em28xx 5-1:1.0: card=44 -> Terratec Cinergy T XS (MT2060) [ 1442.915801][ T9084] em28xx 5-1:1.0: card=45 -> Pinnacle PCTV DVB-T [ 1442.915818][ T9084] em28xx 5-1:1.0: card=46 -> Compro, VideoMate U3 [ 1442.915836][ T9084] em28xx 5-1:1.0: card=47 -> KWorld DVB-T 305U [ 1442.915853][ T9084] em28xx 5-1:1.0: card=48 -> KWorld DVB-T 310U [ 1442.915870][ T9084] em28xx 5-1:1.0: card=49 -> MSI DigiVox A/D [ 1442.915886][ T9084] em28xx 5-1:1.0: card=50 -> MSI DigiVox A/D II [ 1442.915902][ T9084] em28xx 5-1:1.0: card=51 -> Terratec Hybrid XS Secam [ 1442.915920][ T9084] em28xx 5-1:1.0: card=52 -> DNT DA2 Hybrid [ 1442.915937][ T9084] em28xx 5-1:1.0: card=53 -> Pinnacle Hybrid Pro [ 1442.915954][ T9084] em28xx 5-1:1.0: card=54 -> Kworld VS-DVB-T 323UR [ 1442.915971][ T9084] em28xx 5-1:1.0: card=55 -> Terratec Cinergy Hybrid T USB XS (em2882) [ 1442.915989][ T9084] em28xx 5-1:1.0: card=56 -> Pinnacle Hybrid Pro (330e) [ 1442.916007][ T9084] em28xx 5-1:1.0: card=57 -> Kworld PlusTV HD Hybrid 330 [ 1442.916025][ T9084] em28xx 5-1:1.0: card=58 -> Compro VideoMate ForYou/Stereo [ 1442.916043][ T9084] em28xx 5-1:1.0: card=59 -> Pinnacle PCTV HD Mini [ 1442.916060][ T9084] em28xx 5-1:1.0: card=60 -> Hauppauge WinTV HVR 850 [ 1442.916078][ T9084] em28xx 5-1:1.0: card=61 -> Pixelview PlayTV Box 4 USB 2.0 [ 1442.916095][ T9084] em28xx 5-1:1.0: card=62 -> Gadmei TVR200 [ 1442.916112][ T9084] em28xx 5-1:1.0: card=63 -> Kaiomy TVnPC U2 [ 1442.916129][ T9084] em28xx 5-1:1.0: card=64 -> Easy Cap Capture DC-60 [ 1442.916146][ T9084] em28xx 5-1:1.0: card=65 -> IO-DATA GV-MVP/SZ [ 1442.916163][ T9084] em28xx 5-1:1.0: card=66 -> Empire dual TV [ 1442.916180][ T9084] em28xx 5-1:1.0: card=67 -> Terratec Grabby [ 1442.916198][ T9084] em28xx 5-1:1.0: card=68 -> Terratec AV350 [ 1442.916215][ T9084] em28xx 5-1:1.0: card=69 -> KWorld ATSC 315U HDTV TV Box [ 1442.916234][ T9084] em28xx 5-1:1.0: card=70 -> Evga inDtube [ 1442.916251][ T9084] em28xx 5-1:1.0: card=71 -> Silvercrest Webcam 1.3mpix [ 1442.916269][ T9084] em28xx 5-1:1.0: card=72 -> Gadmei UTV330+ [ 1442.916287][ T9084] em28xx 5-1:1.0: card=73 -> Reddo DVB-C USB TV Box [ 1442.916305][ T9084] em28xx 5-1:1.0: card=74 -> Actionmaster/LinXcel/Digitus VC211A [ 1442.916324][ T9084] em28xx 5-1:1.0: card=75 -> Dikom DK300 [ 1442.916341][ T9084] em28xx 5-1:1.0: card=76 -> KWorld PlusTV 340U or UB435-Q (ATSC) [ 1442.916360][ T9084] em28xx 5-1:1.0: card=77 -> EM2874 Leadership ISDBT [ 1442.916378][ T9084] em28xx 5-1:1.0: card=78 -> PCTV nanoStick T2 290e [ 1442.916396][ T9084] em28xx 5-1:1.0: card=79 -> Terratec Cinergy H5 [ 1442.916414][ T9084] em28xx 5-1:1.0: card=80 -> PCTV DVB-S2 Stick (460e) [ 1442.916431][ T9084] em28xx 5-1:1.0: card=81 -> Hauppauge WinTV HVR 930C [ 1442.916449][ T9084] em28xx 5-1:1.0: card=82 -> Terratec Cinergy HTC Stick [ 1442.916467][ T9084] em28xx 5-1:1.0: card=83 -> Honestech Vidbox NW03 [ 1442.916484][ T9084] em28xx 5-1:1.0: card=84 -> MaxMedia UB425-TC [ 1442.916502][ T9084] em28xx 5-1:1.0: card=85 -> PCTV QuatroStick (510e) [ 1442.916520][ T9084] em28xx 5-1:1.0: card=86 -> PCTV QuatroStick nano (520e) [ 1442.916538][ T9084] em28xx 5-1:1.0: card=87 -> Terratec Cinergy HTC USB XS [ 1442.916557][ T9084] em28xx 5-1:1.0: card=88 -> C3 Tech Digital Duo HDTV/SDTV USB [ 1442.916594][ T9084] em28xx 5-1:1.0: card=89 -> Delock 61959 [ 1442.916613][ T9084] em28xx 5-1:1.0: card=90 -> KWorld USB ATSC TV Stick UB435-Q V2 [ 1442.968956][ T9084] em28xx 5-1:1.0: card=91 -> SpeedLink Vicious And Devine Laplace webcam [ 1442.968985][ T9084] em28xx 5-1:1.0: card=92 -> PCTV DVB-S2 Stick (461e) [ 1442.969003][ T9084] em28xx 5-1:1.0: card=93 -> KWorld USB ATSC TV Stick UB435-Q V3 [ 1442.969023][ T9084] em28xx 5-1:1.0: card=94 -> PCTV tripleStick (292e) [ 1442.969042][ T9084] em28xx 5-1:1.0: card=95 -> Leadtek VC100 [ 1442.969060][ T9084] em28xx 5-1:1.0: card=96 -> Terratec Cinergy T2 Stick HD [ 1442.969079][ T9084] em28xx 5-1:1.0: card=97 -> Elgato EyeTV Hybrid 2008 INT [ 1442.969098][ T9084] em28xx 5-1:1.0: card=98 -> PLEX PX-BCUD [ 1442.969114][ T9084] em28xx 5-1:1.0: card=99 -> Hauppauge WinTV-dualHD DVB [ 1442.969133][ T9084] em28xx 5-1:1.0: card=100 -> Hauppauge WinTV-dualHD 01595 ATSC/QAM [ 1442.969152][ T9084] em28xx 5-1:1.0: card=101 -> Terratec Cinergy H6 rev. 2 [ 1442.969170][ T9084] em28xx 5-1:1.0: card=102 -> :ZOLID HYBRID TV STICK [ 1442.969188][ T9084] em28xx 5-1:1.0: card=103 -> Magix USB Videowandler-2 [ 1442.969207][ T9084] em28xx 5-1:1.0: card=104 -> PCTV DVB-S2 Stick (461e v2) [ 1442.969225][ T9084] em28xx 5-1:1.0: card=105 -> MyGica iGrabber [ 1442.969242][ T9084] em28xx 5-1:1.0: card=106 -> Hauppauge USB QuadHD ATSC [ 1442.969261][ T9084] em28xx 5-1:1.0: card=107 -> MyGica UTV3 Analog USB2.0 TV Box [ 1442.969279][ T9084] em28xx 5-1:1.0: card=108 -> Hauppauge USB Live2 [ 1442.969297][ T9084] em28xx 5-1:1.0: card=109 -> Hauppauge WinTV-HVR-935 [ 1442.969316][ T9084] em28xx 5-1:1.0: card=110 -> Hauppauge WinTV-HVR-955 [ 1442.969335][ T9084] em28xx 5-1:1.0: card=111 -> Hauppauge WinTV-HVR-975 [ 1442.969352][ T9084] em28xx 5-1:1.0: card=112 -> PCTV DVB-S2 Stick (461e v3) [ 1442.969371][ T9084] em28xx 5-1:1.0: card=113 -> StarTech SVID2USB232 [ 1442.969392][ T9084] em28xx 5-1:1.0: analog set to bulk mode. [ 1442.969452][T23311] em28xx 5-1:1.0: Registering V4L2 extension [ 1443.047146][ T9084] usb 5-1: USB disconnect, device number 94 [ 1443.133275][ T9084] em28xx 5-1:1.0: Disconnecting em28xx [ 1443.325096][ T834] usb 3-1: USB disconnect, device number 104 [ 1444.482249][T23311] em28xx 5-1:1.0: Config register raw data: 0xffffffed [ 1444.482384][T23311] em28xx 5-1:1.0: AC97 chip type couldn't be determined [ 1444.482439][T23311] em28xx 5-1:1.0: No AC97 audio processor [ 1444.502646][T10634] misc userio: Buffer overflowed, userio client isn't keeping up [ 1444.724810][T23311] usb 5-1: Decoder not found [ 1444.724866][T23311] em28xx 5-1:1.0: failed to create media graph [ 1444.724942][T23311] em28xx 5-1:1.0: V4L2 device video103 deregistered [ 1444.795617][T23311] INFO: trying to register non-static key. [ 1444.801492][T23311] The code is fine but needs lockdep annotation, or maybe [ 1444.808842][T23311] you didn't initialize this object before use? [ 1444.815117][T23311] turning off the locking correctness validator. [ 1444.821483][T23311] CPU: 1 UID: 0 PID: 23311 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1444.832637][T23311] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc [ 1444.836995][T23311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1444.847086][T23311] Workqueue: events request_module_async [ 1444.852878][T23311] Call Trace: [ 1444.856186][T23311] [ 1444.859147][T23311] dump_stack_lvl+0xe8/0x150 [ 1444.863784][T23311] assign_lock_key+0x133/0x150 [ 1444.868584][T23311] register_lock_class+0xcc/0x2e0 [ 1444.873638][T23311] __lock_acquire+0xaf/0x2e50 [ 1444.878362][T23311] ? __mutex_trylock_common+0x15f/0x270 [ 1444.883943][T23311] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1444.889873][T23311] lock_acquire+0x115/0x350 [ 1444.894435][T23311] ? __wake_up_common_lock+0x30/0x1f0 [ 1444.899842][T23311] ? rcu_is_watching+0x16/0xb0 [ 1444.904643][T23311] _raw_spin_lock_irqsave+0x40/0x60 [ 1444.909861][T23311] ? __wake_up_common_lock+0x30/0x1f0 [ 1444.915298][T23311] __wake_up_common_lock+0x30/0x1f0 [ 1444.920530][T23311] ? __pfx___mutex_lock+0x10/0x10 [ 1444.925583][T23311] __vb2_queue_cancel+0x2de/0xde0 [ 1444.930668][T23311] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 1444.936071][T23311] vb2_core_queue_release+0x2f/0x150 [ 1444.941414][T23311] vb2_video_unregister_device+0x15b/0x200 [ 1444.947249][T23311] em28xx_v4l2_init+0x1c89/0x3150 [ 1444.952308][T23311] em28xx_init_extension+0x120/0x1d0 [ 1444.957620][T23311] ? process_scheduled_works+0x97a/0x1630 [ 1444.963373][T23311] process_scheduled_works+0xc3d/0x1630 [ 1444.968959][T23311] ? __pfx_process_scheduled_works+0x10/0x10 [ 1444.974966][T23311] ? assign_work+0x3cf/0x5d0 [ 1444.979583][T23311] worker_thread+0xa47/0xfb0 [ 1444.984220][T23311] kthread+0x38b/0x480 [ 1444.988306][T23311] ? __pfx_worker_thread+0x10/0x10 [ 1444.993466][T23311] ? __pfx_kthread+0x10/0x10 [ 1444.998096][T23311] ret_from_fork+0x514/0xb70 [ 1445.002710][T23311] ? __pfx_ret_from_fork+0x10/0x10 [ 1445.007863][T23311] ? __switch_to+0xc89/0x1420 [ 1445.012587][T23311] ? __pfx_kthread+0x10/0x10 [ 1445.017204][T23311] ret_from_fork_asm+0x1a/0x30 [ 1445.022192][T23311] [ 1445.025313][T23311] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1445.037231][T23311] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1445.045669][T23311] CPU: 1 UID: 0 PID: 23311 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1445.056718][T23311] Tainted: [L]=SOFTLOCKUP [ 1445.061058][T23311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1445.071141][T23311] Workqueue: events request_module_async [ 1445.076820][T23311] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 1445.082826][T23311] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 bc 6a 97 00 48 ba 00 00 00 00 00 fc [ 1445.102452][T23311] RSP: 0018:ffffc900033bf880 EFLAGS: 00010046 [ 1445.108554][T23311] RAX: 0000000000000000 RBX: ffff888038f69740 RCX: 0000000000000001 [ 1445.116546][T23311] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900033bf7e0 [ 1445.124537][T23311] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1445.132525][T23311] R10: dffffc0000000000 R11: fffff52000677efc R12: 0000000000000000 [ 1445.140520][T23311] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888038f697d0 [ 1445.148516][T23311] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 1445.157576][T23311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1445.164193][T23311] CR2: 000056077cc86950 CR3: 0000000079a00000 CR4: 00000000003526f0 [ 1445.172200][T23311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1445.180196][T23311] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1445.188194][T23311] Call Trace: [ 1445.191494][T23311] [ 1445.194448][T23311] __vb2_queue_cancel+0x2de/0xde0 [ 1445.199504][T23311] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 1445.204943][T23311] vb2_core_queue_release+0x2f/0x150 [ 1445.210268][T23311] vb2_video_unregister_device+0x15b/0x200 [ 1445.216110][T23311] em28xx_v4l2_init+0x1c89/0x3150 [ 1445.221263][T23311] em28xx_init_extension+0x120/0x1d0 [ 1445.226577][T23311] ? process_scheduled_works+0x97a/0x1630 [ 1445.232327][T23311] process_scheduled_works+0xc3d/0x1630 [ 1445.237931][T23311] ? __pfx_process_scheduled_works+0x10/0x10 [ 1445.243948][T23311] ? assign_work+0x3cf/0x5d0 [ 1445.248577][T23311] worker_thread+0xa47/0xfb0 [ 1445.253213][T23311] kthread+0x38b/0x480 [ 1445.257305][T23311] ? __pfx_worker_thread+0x10/0x10 [ 1445.262444][T23311] ? __pfx_kthread+0x10/0x10 [ 1445.267065][T23311] ret_from_fork+0x514/0xb70 [ 1445.271684][T23311] ? __pfx_ret_from_fork+0x10/0x10 [ 1445.276826][T23311] ? __switch_to+0xc89/0x1420 [ 1445.281613][T23311] ? __pfx_kthread+0x10/0x10 [ 1445.286222][T23311] ret_from_fork_asm+0x1a/0x30 [ 1445.291037][T23311] [ 1445.294084][T23311] Modules linked in: [ 1445.298008][T23311] ---[ end trace 0000000000000000 ]--- [ 1445.303479][T23311] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 1445.303508][T23311] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 bc 6a 97 00 48 ba 00 00 00 00 00 fc [ 1445.303524][T23311] RSP: 0018:ffffc900033bf880 EFLAGS: 00010046 [ 1445.303541][T23311] RAX: 0000000000000000 RBX: ffff888038f69740 RCX: 0000000000000001 [ 1445.303553][T23311] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900033bf7e0 [ 1445.303566][T23311] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1445.303577][T23311] R10: dffffc0000000000 R11: fffff52000677efc R12: 0000000000000000 [ 1445.303590][T23311] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888038f697d0 [ 1445.303604][T23311] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 1445.303618][T23311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1445.303631][T23311] CR2: 000056077cc86950 CR3: 0000000079a00000 CR4: 00000000003526f0 [ 1445.303647][T23311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1445.303658][T23311] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1445.303677][T23311] Kernel panic - not syncing: Fatal exception [ 1445.421475][T23311] Kernel Offset: disabled [ 1445.425817][T23311] Rebooting in 86400 seconds..