last executing test programs: 22m57.914965647s ago: executing program 2 (id=154): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 22m56.276928343s ago: executing program 2 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) 22m53.376729614s ago: executing program 2 (id=160): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r1, 0x1, 0x7, 0x6, @local}, 0x14) 22m52.979323869s ago: executing program 2 (id=164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) 22m52.660183552s ago: executing program 2 (id=167): unshare(0x26020480) socket(0x2d, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdc}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private=0xa010100, 0x8, 0x15}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4412c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) write(r2, &(0x7f0000000200)="240000002a0001030300000000000000000000000100"/36, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) 22m47.596389559s ago: executing program 2 (id=172): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000003142b0c2bbd7000ffdbdf250900020073797a300000000008004100727865001400330076657468315f746f5f627269646765"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 22m46.665197834s ago: executing program 0 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xfeffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2b}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x4, 0x3, 0x1, 0x5}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'gretap0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) 22m46.40903835s ago: executing program 0 (id=178): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x6, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0xc, 0x5, {0x9, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 22m46.148731634s ago: executing program 0 (id=180): r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) pread64(r0, &(0x7f0000000040), 0x34, 0x7ff) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@cswp={0x58, 0x114, 0x7, {{0x4, 0x81e}, &(0x7f00000000c0)=0xb72, 0x0, 0x800008, 0xe0000, 0x1e, 0x2, 0x3b, 0xffffffff}}, @cswp={0x58, 0x114, 0x7, {{0xb, 0x3}, 0x0, 0x0, 0x401, 0x5, 0x8, 0x3, 0x40, 0x8}}], 0xb0}, 0x0) 22m42.862774315s ago: executing program 0 (id=182): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdc}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22m42.31764955s ago: executing program 0 (id=185): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x101100, 0x96) r0 = syz_io_uring_setup(0xf07, &(0x7f0000000400)={0x0, 0x595d, 0x0, 0x20002, 0x51}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 22m41.766781627s ago: executing program 0 (id=187): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 22m39.092122921s ago: executing program 4 (id=189): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) 22m34.623451469s ago: executing program 4 (id=194): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x10, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0xa, 0x1, 0xc000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) llistxattr(&(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) 22m34.435727429s ago: executing program 4 (id=195): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) 22m34.132202683s ago: executing program 4 (id=196): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x1c, 0x7, 0x14, 0x5}}]}}]}, 0x44}}, 0x4000010) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="080f0000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100080000000c000180080001000500000004"], 0x64}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 22m33.851565832s ago: executing program 4 (id=197): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="54000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r3], 0x54}, 0x1, 0xba01}, 0x810) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000044) rseq(0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x23) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) 22m32.655111456s ago: executing program 4 (id=198): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x76) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x18, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f0000000440)={{[0x4, 0x7, 0x6, 0xf043]}, 0x0, 0x1, 0x5, 0x0, &(0x7f00000002c0)=[{{@align=0x7, {0xffff, 0x585, 0x5, 0x3}}, 0xe2, 0x0, '[+\x00'}, {{@align=0x5, {0x2, 0x8000, 0x5, 0x3fb}}, 0x3, 0x0, '\'!\xd8\x00'}]}) write(r4, &(0x7f0000000680)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027400089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fcab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f", 0xdd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x1, 0x0, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r3, 0x0, 0x6c}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000feffffff000000ec95ffffff85000000aa000000950000fa2f0000ae9800"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001a0001000000000000000000020000000000000b002f000005001b001100000006001d004e21000008000200e0"], 0x150}}, 0x4) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000080), &(0x7f0000000040)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x4, 0x2, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x80, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r1) 22m31.134823104s ago: executing program 32 (id=172): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000003142b0c2bbd7000ffdbdf250900020073797a300000000008004100727865001400330076657468315f746f5f627269646765"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 22m25.679646807s ago: executing program 33 (id=187): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 22m16.907306758s ago: executing program 34 (id=198): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x76) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x18, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f0000000440)={{[0x4, 0x7, 0x6, 0xf043]}, 0x0, 0x1, 0x5, 0x0, &(0x7f00000002c0)=[{{@align=0x7, {0xffff, 0x585, 0x5, 0x3}}, 0xe2, 0x0, '[+\x00'}, {{@align=0x5, {0x2, 0x8000, 0x5, 0x3fb}}, 0x3, 0x0, '\'!\xd8\x00'}]}) write(r4, &(0x7f0000000680)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027400089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fcab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f", 0xdd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x1, 0x0, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r3, 0x0, 0x6c}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000feffffff000000ec95ffffff85000000aa000000950000fa2f0000ae9800"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001a0001000000000000000000020000000000000b002f000005001b001100000006001d004e21000008000200e0"], 0x150}}, 0x4) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000080), &(0x7f0000000040)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x4, 0x2, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x80, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r1) 2m51.685015798s ago: executing program 1 (id=4356): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004c000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) r1 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='maps\x00') read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) 2m50.59666866s ago: executing program 1 (id=4360): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x61, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xa90400, 0xffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc01ff}]}) rseq(0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000000002) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x34, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0xfffffffa}, 0x0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000002c0)) keyctl$clear(0x7, 0xfffffffffffffffb) r1 = socket$inet6(0xa, 0x2, 0x60) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000005c0)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00030200"], 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000180)={0x1, 0x3, 0xffffffff}) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @private2, 0x7}, 0x1c) 2m45.953445981s ago: executing program 1 (id=4374): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000bc0)=ANY=[], 0x118}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xf71, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x7, 0xc5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000300)}], 0x2) io_uring_enter(r2, 0x2219, 0x1adf, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_usb_connect$midi(0x4, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0xa, 0x8}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1404}}]}) 2m42.402473582s ago: executing program 1 (id=4384): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x109400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x40d00) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r1, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) close(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x6408f400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x7, 0x4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) 2m37.63325487s ago: executing program 1 (id=4394): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000bc0)=ANY=[], 0x118}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xf71, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x7, 0xc5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000300)}], 0x2) io_uring_enter(r2, 0x2219, 0x1adf, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_usb_connect$midi(0x4, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0xa, 0x8}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1404}}]}) 2m33.796270013s ago: executing program 1 (id=4410): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4.0\n\x00', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n\x00', 0x2) close(r2) 2m18.292888294s ago: executing program 35 (id=4410): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4.0\n\x00', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n\x00', 0x2) close(r2) 28.756358816s ago: executing program 8 (id=4932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000079a183199eb81c0000bec846f75861179f1f320c7c4366c6b4f51ac332d1b80b9122226befea479a621e7c38bad723ffee73172e0a4e9d32238aea313355d34f48931cf3f2844f3ec9cf3f0f8fce4bcf3cc552e110fb7c17ea0abcc7693009b018cff032742a65db", @ANYRES16=r3, @ANYBLOB="050000000000000000", @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(0x0, r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0xb014853145f0758b, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x20000000) 28.104026718s ago: executing program 8 (id=4933): io_uring_setup(0x136b, &(0x7f0000000400)={0x0, 0x1f8a, 0x0, 0xffffffff, 0x28c}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) msgget$private(0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, 0x0}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r5, 0x983a736bbcf11bbd, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40084) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xd90a, 0x80, 0x6, 0x167}, &(0x7f0000000340), &(0x7f0000000240), &(0x7f0000000000)) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'M\n'}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x110}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r9 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) timerfd_create(0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 27.474412484s ago: executing program 8 (id=4938): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0x80801) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x8000000000007ffb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80000000000004, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x2, 0x0, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405668, &(0x7f00000001c0)={0xaa, 0x2203522e026347fd, 0x1, "0000087aba10fdffe13c417debfffffd00", 0x49433554}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000ff030000f6ffffff0900000000020000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000100"/28], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4}, 0x8) 27.295927814s ago: executing program 8 (id=4939): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='virt_wifi0\x00', 0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000"], 0x0) 27.08531448s ago: executing program 8 (id=4941): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) r0 = semget$private(0x0, 0x1, 0xf) semtimedop(r0, &(0x7f0000000100), 0x0, 0x0) 26.875888104s ago: executing program 8 (id=4945): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='udp 20000\n', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/1024, 0x400) 19.026892312s ago: executing program 3 (id=4982): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x13, r2, 0x0, r1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020) memfd_create(0x0, 0x0) fsopen(0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socket(0x10, 0x803, 0x0) 18.052526471s ago: executing program 3 (id=4984): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='virt_wifi0\x00', 0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000"/51], 0x0) 17.968406197s ago: executing program 3 (id=4985): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x68, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000a00)={0x0, 0x8, 0x1, [0x3, 0xb2, 0x80, 0x8, 0x1], [0x4, 0x0, 0x3, 0xe32, 0xc, 0x7, 0x0, 0x9, 0x7, 0xffffffffffffffe6, 0x5, 0x8a, 0x5, 0x95, 0x81, 0x100000000, 0x6, 0x7fff, 0x3, 0x401, 0x4, 0x6, 0xa00000000, 0x7, 0x6, 0x5, 0x6e, 0x4, 0xae3, 0x9, 0x5, 0x8, 0x7fff, 0x2, 0x0, 0x9, 0x4de3, 0x2, 0x5, 0x35e5, 0x374, 0x2, 0x0, 0x7000, 0x1ff, 0x2, 0x8, 0x6, 0x7e61289b, 0x6, 0x1, 0x40, 0x6, 0x4, 0x6, 0x1, 0x8, 0x7f0a, 0x7fffffff, 0x7ff, 0x5, 0x9, 0xb9aa000000000000, 0x100, 0x200, 0x3, 0x0, 0xfffffffffffffffa, 0x8, 0x0, 0x6, 0x6, 0x8, 0x1, 0x28000000000, 0x63b, 0x8, 0xa, 0x8f3, 0x63, 0x8, 0x9, 0x100000001, 0x8, 0x8000000000000001, 0x0, 0x3, 0x0, 0x6, 0x0, 0xe, 0x800, 0x638, 0x2, 0x1, 0x2, 0x40, 0xffffffffffffffff, 0x5, 0x9, 0x8, 0x6, 0x0, 0x6, 0x81, 0x7, 0x8, 0xa71, 0x2, 0x4, 0x6, 0x400, 0x3, 0x7, 0x1, 0x2, 0x3816, 0x4, 0x10001, 0x100000001, 0x8000]}) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(0x0, 0x2) ftruncate(r5, 0x1000004) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x2}, {0xffe0, 0x7}, {0x6, 0xfff2}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7fff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x44) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000140)={0x0, 0x3, [{r5, 0x0, 0x10000, 0x8000}, {r5, 0x0, 0x8000, 0x8000}, {r5, 0x0, 0x2000, 0x10000}]}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 17.663419345s ago: executing program 7 (id=4988): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000000240)=[{0x7, 0x4200, 0x4e, &(0x7f0000000280)="96df4115be9221c8ee3e139c4c56a4b8a0748db0833d700700ab6035664b4a10eee6823fb5892b7c07a7bb88fac47b12c11d1b30fdcef415f73bcb31e26babd25461e6f8ff3aefc5c293d39d2090"}], 0x1}) 16.493253207s ago: executing program 3 (id=4994): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="380000001000010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f0000000040)="380000001100010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f0000000080)="380000001200010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f00000000c0)="380000001300010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f0000000100)="380000001400010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f0000000140)="380000001500010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f0000000180)="380000001600010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f00000001c0)="380000001700010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f0000000200)="380000001800010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f0000000240)="380000001900010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f0000000280)="380000001a00010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f00000002c0)="380000001b00010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f0000000300)="380000001c00010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f0000000340)="380000001d00010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f0000000380)="380000001e00010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f00000003c0)="380000001f00010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) write(r0, &(0x7f0000000400)="380000002000010001000000000000000a01000021000100534d435553455231202020202020202020202020202020202020202000000000", 0x38) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x204e, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x204e, @loopback}, 0x10) r3 = accept4$inet(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000600)='hello', 0x5) read(r3, &(0x7f0000000700)=""/5, 0x5) 16.361305792s ago: executing program 7 (id=4997): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 15.370087963s ago: executing program 3 (id=5001): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="14000280060001"], 0x2c}}, 0x0) 15.210419976s ago: executing program 3 (id=5002): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 20000\n', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/100, 0x64) close(r1) 13.065679113s ago: executing program 7 (id=5008): socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000280)={0x0, 0x30b6, 0x0, 0x2, 0x1000158}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x3, 0xe29, 0x0, 0x0, 0x1000, 0xfffffff8, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, &(0x7f00000003c0)={0x0, 0x2000003, 0x400, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffe, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x2, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4423, 0x200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfbf9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) 12.869513336s ago: executing program 7 (id=5009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x0) 12.753680707s ago: executing program 7 (id=5010): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/1024, 0x400) close(r0) 12.526727136s ago: executing program 7 (id=5011): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000001440)=[{0x8000, 0x2011, 0x3, &(0x7f0000000000)='v;\n'}, {0x5, 0x0, 0x0, 0x0}], 0x2}) 10.929895544s ago: executing program 36 (id=4945): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='udp 20000\n', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/1024, 0x400) 5.079559731s ago: executing program 6 (id=5025): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) socket(0x1e, 0x4, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x844) close(r1) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000086a82, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 3.580057961s ago: executing program 6 (id=5026): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/drivers/st-nci_i2c\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/spi/drivers/st_nci_spi\x00', 0x0, 0x0) 3.506855585s ago: executing program 5 (id=5027): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x13, r2, 0x0, r1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020) memfd_create(0x0, 0x0) fsopen(0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socket(0x10, 0x803, 0x0) 3.291326581s ago: executing program 6 (id=5028): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x68, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000a00)={0x0, 0x8, 0x1, [0x3, 0xb2, 0x80, 0x8, 0x1], [0x4, 0x0, 0x3, 0xe32, 0xc, 0x7, 0x0, 0x9, 0x7, 0xffffffffffffffe6, 0x5, 0x8a, 0x5, 0x95, 0x81, 0x100000000, 0x6, 0x7fff, 0x3, 0x401, 0x4, 0x6, 0xa00000000, 0x7, 0x6, 0x5, 0x6e, 0x4, 0xae3, 0x9, 0x5, 0x8, 0x7fff, 0x2, 0x0, 0x9, 0x4de3, 0x2, 0x5, 0x35e5, 0x374, 0x2, 0x0, 0x7000, 0x1ff, 0x2, 0x8, 0x6, 0x7e61289b, 0x6, 0x1, 0x40, 0x6, 0x4, 0x6, 0x1, 0x8, 0x7f0a, 0x7fffffff, 0x7ff, 0x5, 0x9, 0xb9aa000000000000, 0x100, 0x200, 0x3, 0x0, 0xfffffffffffffffa, 0x8, 0x0, 0x6, 0x6, 0x8, 0x1, 0x28000000000, 0x63b, 0x8, 0xa, 0x8f3, 0x63, 0x8, 0x9, 0x100000001, 0x8, 0x8000000000000001, 0x0, 0x3, 0x0, 0x6, 0x0, 0xe, 0x800, 0x638, 0x2, 0x1, 0x2, 0x40, 0xffffffffffffffff, 0x5, 0x9, 0x8, 0x6, 0x0, 0x6, 0x81, 0x7, 0x8, 0xa71, 0x2, 0x4, 0x6, 0x400, 0x3, 0x7, 0x1, 0x2, 0x3816, 0x4, 0x10001, 0x100000001, 0x8000]}) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r5, 0x1000004) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x2}, {0xffe0, 0x7}, {0x6, 0xfff2}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7fff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x44) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000140)={0x0, 0x3, [{r5, 0x0, 0x10000, 0x8000}, {r5, 0x0, 0x8000, 0x8000}, {r5, 0x0, 0x2000, 0x10000}]}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 2.341200158s ago: executing program 6 (id=5029): socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000280)={0x0, 0x30b6, 0x0, 0x2, 0x1000158}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x3, 0xe29, 0x0, 0x0, 0x1000, 0xfffffff8, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, &(0x7f00000003c0)={0x0, 0x2000003, 0x400, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffe, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x2, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4423, 0x200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfbf9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) 2.288136502s ago: executing program 5 (id=5030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x0) 2.216657668s ago: executing program 5 (id=5031): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) 2.167654601s ago: executing program 6 (id=5032): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000100), 0x8000000000003a4c, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000240)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0) write$binfmt_aout(r0, 0x0, 0x61) splice(r0, 0x0, r1, 0x0, 0x807, 0x0) socket$inet(0x2, 0x2, 0x0) close(0xffffffffffffffff) userfaultfd(0x801) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = epoll_create1(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x20) 1.777046667s ago: executing program 9 (id=5014): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0x80801) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x8000000000007ffb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000010c0), 0xffffffffffffffff, r3}}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80000000000004, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x2, 0x0, 0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405668, &(0x7f00000001c0)={0xaa, 0x2203522e026347fd, 0x1, "0000087aba10fdffe13c417debfffffd00", 0x49433554}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000ff030000f6ffffff0900000000020000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000100"/28], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4}, 0x8) 1.578448306s ago: executing program 9 (id=5033): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000000240)=[{0x7, 0x4200, 0x4f, &(0x7f0000000280)="96df4115be9221c8ee3e139c4c56a4b8a0748db0833d700700ab6035664b4a10eee6823fb5892b7c07a7bb88fac47b12c11d1b30fdcef415f73bcb31e26babd25461e6f8ff3aefc5c293d39d2090f2"}], 0x1}) 939.918558ms ago: executing program 5 (id=5034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x68, r1, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x8c, r1, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x8c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000200)={'syz_tun\x00', @ifru_mtu=0x500}) syz_emit_ethernet(0x560, &(0x7f0000000c00)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x524, 0x11, 0x40, @remote, @local, {[], {0x1234, 0x1f90, 0x51c, 0x0, @opaque='\x00'/1300}}}}}}, 0x0) 489.273092ms ago: executing program 5 (id=5035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x7}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x9}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x4004880) 383.830442ms ago: executing program 6 (id=5036): openat$sndseq(0xffffffffffffff9c, &(0x7f0000002c80), 0x4081) read$FUSE(0xffffffffffffffff, &(0x7f0000002cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = syz_open_procfs(r0, &(0x7f00000002c0)='net/wireless\x00') r2 = epoll_create1(0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f00000001c0)=ANY=[], 0x0, 0x5, 0xff2, &(0x7f0000000fc0)=""/4082, 0x40f00, 0x10}, 0x94) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r7}, 0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, &(0x7f0000000080)) syz_open_dev$mouse(&(0x7f0000000140), 0x5, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r8 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000280)={0x0, 0x30, 0x3, &(0x7f0000000080)={0x91, "a3d92ccfc6000000fa00008c0000007900"}}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x40000039}) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f0000000100)={0x1, 0x2000}) 192.641003ms ago: executing program 9 (id=5037): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) socket(0x1e, 0x4, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x844) close(r1) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000086a82, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 153.866253ms ago: executing program 37 (id=5002): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 20000\n', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/100, 0x64) close(r1) 0s ago: executing program 5 (id=5039): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x13, r2, 0x0, r1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020) memfd_create(0x0, 0x0) fsopen(0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socket(0x10, 0x803, 0x0) kernel console output (not intermixed with test programs): idProduct=0001, bcdDevice= 1.00 [ 1427.784721][ T6676] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.784752][ T6676] usb 6-1: config 0 has no interfaces? [ 1427.821054][ T6676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.821088][ T6676] usb 6-1: Product: syz [ 1427.821106][ T6676] usb 6-1: Manufacturer: syz [ 1427.821123][ T6676] usb 6-1: SerialNumber: syz [ 1427.871067][ T6676] usb 6-1: config 0 descriptor?? [ 1428.162452][T21153] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4473'. [ 1428.428402][T21157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.428439][T21157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.458611][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.465588][T18691] Bluetooth: hci5: command tx timeout [ 1428.492764][T19422] usb 6-1: USB disconnect, device number 109 [ 1428.493611][T21157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.493661][T21157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.733544][T21161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1428.986929][T21165] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1429.431925][ T3249] usb 7-1: new low-speed USB device number 76 using dummy_hcd [ 1429.521791][T19422] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1429.593260][ T3249] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1429.596831][ T3249] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1429.596861][ T3249] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.596884][ T3249] usb 7-1: config 0 has no interface number 0 [ 1429.596933][ T3249] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1429.596996][ T3249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.624110][ T3249] usb 7-1: config 0 descriptor?? [ 1429.673457][T19422] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1429.674190][T19422] usb 6-1: config 0 has no interfaces? [ 1429.675986][T19422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1429.676018][T19422] usb 6-1: SerialNumber: syz [ 1429.676260][ T3249] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1429.833691][T19422] usb 6-1: config 0 descriptor?? [ 1429.874671][ T6676] usb 7-1: USB disconnect, device number 76 [ 1430.411960][T19422] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1430.496196][ T6676] usb 6-1: USB disconnect, device number 110 [ 1430.531834][T18691] Bluetooth: hci5: command tx timeout [ 1430.595227][T19422] usb 4-1: Using ep0 maxpacket: 8 [ 1430.610493][T19422] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1430.623248][T19422] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 1430.623280][T19422] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.623307][T19422] usb 4-1: config 0 has no interface number 0 [ 1430.623344][T19422] usb 4-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 1430.623364][T19422] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1430.623381][T19422] usb 4-1: config 0 interface 239 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1430.626958][T19422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.626988][T19422] usb 4-1: Product: syz [ 1430.627006][T19422] usb 4-1: Manufacturer: syz [ 1430.627024][T19422] usb 4-1: SerialNumber: syz [ 1430.769546][T19422] usb 4-1: config 0 descriptor?? [ 1431.211072][T21185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4483'. [ 1431.585841][ T5927] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1431.621503][T21189] binder: 21186:21189 ioctl c0306201 0 returned -14 [ 1431.747512][ T5927] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1431.822771][T19422] ath6kl: Failed to submit usb control message: -110 [ 1431.822831][T19422] ath6kl: unable to send the bmi data to the device: -110 [ 1431.822849][T19422] ath6kl: Unable to send get target info: -110 [ 1431.824282][T19422] ath6kl: Failed to init ath6kl core: -110 [ 1431.891283][T19422] ath6kl_usb 4-1:0.239: probe with driver ath6kl_usb failed with error -110 [ 1432.001823][ T3249] usb 8-1: new full-speed USB device number 121 using dummy_hcd [ 1432.110615][T21185] macvlan2: entered promiscuous mode [ 1432.110646][T21185] macvlan2: entered allmulticast mode [ 1432.162794][ T3249] usb 8-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1432.165124][ T3249] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.241629][ T3249] usb 8-1: config 0 descriptor?? [ 1432.466121][ T3249] pwc: Samsung MPC-C10 USB webcam detected. [ 1432.645942][ T3249] pwc: send_video_command error -71 [ 1432.645967][ T3249] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1432.646098][ T3249] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 1432.706392][ T3249] usb 8-1: USB disconnect, device number 121 [ 1433.187128][T19422] usb 4-1: USB disconnect, device number 95 [ 1433.446655][T21204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1433.581491][T21209] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4488'. [ 1433.757705][T21215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1433.963008][T21080] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1434.023206][T21080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1434.420262][T21080] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1434.494984][T21080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1434.518954][T21080] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1434.567606][T21080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1434.596898][T21080] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1434.788834][T21080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1435.093917][T21080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.131764][ T5604] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1435.168467][T21080] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.181805][ T5872] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1435.219835][T21248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1435.220407][ T1532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.220639][ T1532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.281909][ T5604] usb 4-1: Using ep0 maxpacket: 32 [ 1435.282835][ T5604] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1435.284644][ T5604] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 1435.288457][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.288491][ T5604] usb 4-1: Product: syz [ 1435.288512][ T5604] usb 4-1: Manufacturer: syz [ 1435.288532][ T5604] usb 4-1: SerialNumber: syz [ 1435.347037][ T5872] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1435.350251][ T5872] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.350325][ T5872] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1435.392945][ T5604] usb 4-1: config 0 descriptor?? [ 1435.408090][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.408134][ T5872] usb 7-1: Product: syz [ 1435.408154][ T5872] usb 7-1: Manufacturer: syz [ 1435.408173][ T5872] usb 7-1: SerialNumber: syz [ 1435.449815][ T5604] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1435.449879][ T5604] dvb-usb: bulk message failed: -22 (2/0) [ 1435.481716][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.481855][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.560751][ T5604] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1435.566262][ T5604] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1435.566328][ T5604] usb 4-1: media controller created [ 1435.650833][ T5604] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1435.692558][ T5604] usb 4-1: selecting invalid altsetting 7 [ 1435.692587][ T5604] cxusb: set interface failed [ 1435.692604][ T5604] dvb-usb: bulk message failed: -22 (1/0) [ 1435.739318][T21254] binder: 21252:21254 ioctl c0306201 0 returned -14 [ 1435.894908][ T36] usb 7-1: USB disconnect, device number 77 [ 1435.960999][ T5604] DVB: Unable to find symbol lgdt330x_attach() [ 1435.961022][ T5604] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1436.041782][ T5872] usb 8-1: new full-speed USB device number 122 using dummy_hcd [ 1436.202827][ T5872] usb 8-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1436.204681][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.217922][ T5604] rc_core: IR keymap rc-dvico-portable not found [ 1436.217949][ T5604] Registered IR keymap rc-empty [ 1436.228408][ T5604] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1436.284357][ T5604] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input42 [ 1436.288620][ T5872] usb 8-1: config 0 descriptor?? [ 1436.318862][ T5872] pwc: Samsung MPC-C10 USB webcam detected. [ 1436.320802][ T5604] dvb-usb: schedule remote query interval to 100 msecs. [ 1436.320831][ T5604] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1436.370925][ T5604] usb 4-1: USB disconnect, device number 96 [ 1436.786403][ T5872] pwc: send_video_command error -71 [ 1436.786428][ T5872] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1436.786556][ T5872] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 1436.824996][ T5872] usb 8-1: USB disconnect, device number 122 [ 1436.877007][ T5604] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1437.258509][T21272] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4503'. [ 1438.354663][T21292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1438.454325][T21080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1439.430493][T21308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1439.870863][T21080] veth0_vlan: entered promiscuous mode [ 1439.918917][T21080] veth1_vlan: entered promiscuous mode [ 1440.132951][T21080] veth0_macvtap: entered promiscuous mode [ 1440.151241][T21080] veth1_macvtap: entered promiscuous mode [ 1440.203423][T21080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.242174][T21080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1440.259396][ T36] usb 8-1: new high-speed USB device number 123 using dummy_hcd [ 1440.281822][ T5604] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1440.343887][ T1370] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.344195][ T1111] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.344241][ T1111] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.344283][ T1111] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.423426][ T36] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1440.424993][ T36] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.425051][ T36] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1440.428206][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.428235][ T36] usb 8-1: Product: syz [ 1440.428252][ T36] usb 8-1: Manufacturer: syz [ 1440.428269][ T36] usb 8-1: SerialNumber: syz [ 1440.461764][ T5604] usb 4-1: Using ep0 maxpacket: 32 [ 1440.462650][ T5604] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1440.464237][ T5604] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 1440.514912][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.514944][ T5604] usb 4-1: Product: syz [ 1440.514961][ T5604] usb 4-1: Manufacturer: syz [ 1440.514978][ T5604] usb 4-1: SerialNumber: syz [ 1440.620156][ T5604] usb 4-1: config 0 descriptor?? [ 1440.640120][ T5604] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1440.640191][ T5604] dvb-usb: bulk message failed: -22 (2/0) [ 1440.865879][ T5604] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1440.884130][ T5604] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1440.884219][ T5604] usb 4-1: media controller created [ 1440.978859][ T5604] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1441.037336][ T5604] usb 4-1: selecting invalid altsetting 7 [ 1441.037361][ T5604] cxusb: set interface failed [ 1441.037374][ T5604] dvb-usb: bulk message failed: -22 (1/0) [ 1441.202773][T10042] usb 8-1: USB disconnect, device number 123 [ 1441.466830][ T5604] DVB: Unable to find symbol lgdt330x_attach() [ 1441.466851][ T5604] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1442.141869][ T5604] rc_core: IR keymap rc-dvico-portable not found [ 1442.141897][ T5604] Registered IR keymap rc-empty [ 1442.149660][ T5604] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1442.228342][ T5604] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input43 [ 1442.275102][ T5604] dvb-usb: schedule remote query interval to 100 msecs. [ 1442.275133][ T5604] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1442.312269][ T5604] usb 4-1: USB disconnect, device number 97 [ 1442.750213][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.750241][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.925168][ T5604] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1443.392874][T21338] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4516'. [ 1443.446681][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.446829][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.880158][T21341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1444.241743][ T5604] usb 8-1: new low-speed USB device number 124 using dummy_hcd [ 1444.395706][ T5604] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1444.397350][ T5604] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1444.397382][ T5604] usb 8-1: config 0 has no interface number 0 [ 1444.397436][ T5604] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1444.397484][ T5604] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.455211][ T5604] usb 8-1: config 0 descriptor?? [ 1444.483501][ T5604] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 1444.727814][ T5604] usb 8-1: USB disconnect, device number 124 [ 1444.926399][T21352] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4449'. [ 1445.161121][T21356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1446.212187][ T3249] usb 8-1: new full-speed USB device number 125 using dummy_hcd [ 1446.562737][ T3249] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1446.564343][ T3249] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1446.564373][ T3249] usb 8-1: config 0 has no interface number 0 [ 1446.570319][ T3249] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.570350][ T3249] usb 8-1: Product: syz [ 1446.570367][ T3249] usb 8-1: Manufacturer: syz [ 1446.570384][ T3249] usb 8-1: SerialNumber: syz [ 1446.619451][ T3249] usb 8-1: config 0 descriptor?? [ 1446.662668][ T3249] usb 8-1: selecting invalid altsetting 1 [ 1446.662874][ T3249] dvb_ttusb_budget: ttusb_init_controller: error [ 1446.662893][ T3249] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1446.799839][T21371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1446.799879][T21371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1446.920662][T21371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1446.920695][T21371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.138014][ T3249] DVB: Unable to find symbol stv0299_attach() [ 1447.350568][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 1447.350590][ T37] audit: type=1326 audit(1790788186.943:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21387 comm="syz.6.4529" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee340be159 code=0x0 [ 1447.430675][ T3249] DVB: Unable to find symbol tda8083_attach() [ 1447.430698][ T3249] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1447.701873][T21400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1448.238701][T21400] pimreg: entered allmulticast mode [ 1448.598119][T21411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1448.847200][ T3249] usb 8-1: USB disconnect, device number 125 [ 1451.012011][T18691] Bluetooth: hci4: command 0x0406 tx timeout [ 1451.048718][T21430] netlink: 13088 bytes leftover after parsing attributes in process `syz.8.4541'. [ 1451.048759][T21430] openvswitch: netlink: Flow actions attr not present in new flow. [ 1451.292078][ T37] audit: type=1326 audit(1790788190.883:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21434 comm="syz.7.4543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe1592e159 code=0x0 [ 1451.348471][T21435] netlink: 91 bytes leftover after parsing attributes in process `syz.8.4544'. [ 1451.381767][ T36] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1451.533828][ T36] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1451.534928][ T36] usb 6-1: config 0 has no interfaces? [ 1451.536419][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1451.536450][ T36] usb 6-1: SerialNumber: syz [ 1451.577752][ T36] usb 6-1: config 0 descriptor?? [ 1451.848894][T10042] usb 6-1: USB disconnect, device number 111 [ 1452.712157][T10042] usb 8-1: new full-speed USB device number 126 using dummy_hcd [ 1452.883140][T10042] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1452.884948][T10042] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1452.884984][T10042] usb 8-1: config 0 has no interface number 0 [ 1452.889891][T10042] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.889928][T10042] usb 8-1: Product: syz [ 1452.889949][T10042] usb 8-1: Manufacturer: syz [ 1452.889969][T10042] usb 8-1: SerialNumber: syz [ 1452.957696][T10042] usb 8-1: config 0 descriptor?? [ 1453.000918][T10042] usb 8-1: selecting invalid altsetting 1 [ 1453.001074][T10042] dvb_ttusb_budget: ttusb_init_controller: error [ 1453.001089][T10042] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1453.390406][T10042] DVB: Unable to find symbol stv0299_attach() [ 1453.605424][T10042] DVB: Unable to find symbol tda8083_attach() [ 1453.605444][T10042] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1453.660643][T21465] netlink: 13088 bytes leftover after parsing attributes in process `syz.6.4554'. [ 1453.660676][T21465] openvswitch: netlink: Flow actions attr not present in new flow. [ 1454.840681][T21477] binder: 21475:21477 ioctl c0306201 0 returned -14 [ 1455.211515][T21479] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4559'. [ 1455.344287][T10042] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1455.441896][ T36] usb 8-1: USB disconnect, device number 126 [ 1455.662660][T10042] usb 9-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1455.665020][T10042] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.687927][T10042] usb 9-1: config 0 descriptor?? [ 1455.713431][T10042] pwc: Samsung MPC-C10 USB webcam detected. [ 1455.961969][ T5927] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1456.124033][ T5927] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1456.127020][ T5927] usb 6-1: config 0 has no interfaces? [ 1456.153692][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1456.153801][ T5927] usb 6-1: SerialNumber: syz [ 1456.190360][ T5927] usb 6-1: config 0 descriptor?? [ 1456.409787][T10042] pwc: send_video_command error -71 [ 1456.409813][T10042] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1456.409941][T10042] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 1456.481307][T10042] usb 9-1: USB disconnect, device number 2 [ 1456.729529][T19422] usb 6-1: USB disconnect, device number 112 [ 1457.209463][T21499] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4565'. [ 1457.431434][T21501] netlink: 13088 bytes leftover after parsing attributes in process `syz.6.4566'. [ 1457.431463][T21501] openvswitch: netlink: Flow actions attr not present in new flow. [ 1457.953100][T21515] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4571'. [ 1458.295417][ T5927] usb 8-1: new high-speed USB device number 127 using dummy_hcd [ 1458.441933][ T5927] usb 8-1: Using ep0 maxpacket: 32 [ 1458.442873][ T5927] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1458.445052][ T5927] usb 8-1: config index 0 descriptor too short (expected 19, got 18) [ 1458.486320][ T5927] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.486356][ T5927] usb 8-1: Product: syz [ 1458.486375][ T5927] usb 8-1: Manufacturer: syz [ 1458.486393][ T5927] usb 8-1: SerialNumber: syz [ 1458.572174][ T5927] usb 8-1: config 0 descriptor?? [ 1458.588684][T21527] binder: 21526:21527 ioctl c0306201 0 returned -14 [ 1458.635751][ T5927] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1458.635815][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 1458.714042][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1458.715115][ T5927] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1458.715194][ T5927] usb 8-1: media controller created [ 1458.818517][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1458.880353][ T5927] usb 8-1: selecting invalid altsetting 7 [ 1458.880380][ T5927] cxusb: set interface failed [ 1458.880397][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 1458.883315][ T5604] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 1459.062929][ T5604] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1459.064946][ T5604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.094145][ T5927] DVB: Unable to find symbol lgdt330x_attach() [ 1459.094165][ T5927] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1459.145268][ T5604] usb 6-1: config 0 descriptor?? [ 1459.215406][ T5604] pwc: Samsung MPC-C10 USB webcam detected. [ 1459.306118][ T5927] rc_core: IR keymap rc-dvico-portable not found [ 1459.306154][ T5927] Registered IR keymap rc-empty [ 1459.360821][ T5927] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1459.387009][ T5927] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input44 [ 1459.415493][ T5927] dvb-usb: schedule remote query interval to 100 msecs. [ 1459.415524][ T5927] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1459.446909][ T5927] usb 8-1: USB disconnect, device number 127 [ 1459.640093][ T5604] pwc: send_video_command error -71 [ 1459.640114][ T5604] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1459.640240][ T5604] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1459.665909][ T5604] usb 6-1: USB disconnect, device number 113 [ 1459.879979][ T5927] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1460.094655][T21543] openvswitch: netlink: Message has 6416 unknown bytes. [ 1460.094713][T21543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1460.890617][T21558] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4584'. [ 1460.914024][ T6676] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1461.061831][ T6676] usb 9-1: Using ep0 maxpacket: 32 [ 1461.063034][ T6676] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1461.065956][ T6676] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.102184][ T6676] usb 9-1: config 0 descriptor?? [ 1461.126720][ T6676] as10x_usb: device has been detected [ 1461.131364][ T6676] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1461.166990][ T6676] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1461.186247][ T6676] as10x_usb: error during firmware upload part1 [ 1461.186995][ T6676] Registered device nBox DVB-T Dongle [ 1461.975779][ T6676] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1462.017607][T21569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1462.131792][ T6676] usb 7-1: Using ep0 maxpacket: 32 [ 1462.132672][ T6676] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1462.139876][ T6676] usb 7-1: config index 0 descriptor too short (expected 19, got 18) [ 1462.144031][ T6676] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.144067][ T6676] usb 7-1: Product: syz [ 1462.144087][ T6676] usb 7-1: Manufacturer: syz [ 1462.144107][ T6676] usb 7-1: SerialNumber: syz [ 1462.217137][ T6676] usb 7-1: config 0 descriptor?? [ 1462.221352][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4589'. [ 1462.243909][ T6676] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1462.243969][ T6676] dvb-usb: bulk message failed: -22 (2/0) [ 1462.278191][ T6676] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1462.279107][ T6676] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1462.279169][ T6676] usb 7-1: media controller created [ 1462.334030][ T6676] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1462.373936][ T6676] usb 7-1: selecting invalid altsetting 7 [ 1462.374264][ T6676] cxusb: set interface failed [ 1462.374284][ T6676] dvb-usb: bulk message failed: -22 (1/0) [ 1462.683157][ T6676] DVB: Unable to find symbol lgdt330x_attach() [ 1462.683179][ T6676] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1462.932025][ T6676] rc_core: IR keymap rc-dvico-portable not found [ 1462.932052][ T6676] Registered IR keymap rc-empty [ 1462.938075][ T6676] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1462.982265][ T6676] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input45 [ 1463.003587][ T6676] dvb-usb: schedule remote query interval to 100 msecs. [ 1463.003619][ T6676] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1463.034726][ T6676] usb 7-1: USB disconnect, device number 78 [ 1463.247207][T21589] binder: 21588:21589 ioctl c0306201 0 returned -14 [ 1463.284520][T21590] openvswitch: netlink: Message has 6416 unknown bytes. [ 1463.284561][T21590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1463.323275][ T6676] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1463.711856][ T6676] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 1463.712724][ T5927] usb 9-1: USB disconnect, device number 3 [ 1463.821318][ T5927] Unregistered device nBox DVB-T Dongle [ 1463.952421][ T5927] as10x_usb: device has been disconnected [ 1463.960325][ T6676] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1463.969152][ T6676] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.003850][ T6676] usb 7-1: config 0 descriptor?? [ 1464.042178][ T6676] pwc: Samsung MPC-C10 USB webcam detected. [ 1464.187263][T21597] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4596'. [ 1464.486421][ T13] kworker/u8:1 (13) used greatest stack depth: 13960 bytes left [ 1464.856553][ T6676] pwc: send_video_command error -71 [ 1464.856577][ T6676] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1464.856699][ T6676] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1464.896897][ T6676] usb 7-1: USB disconnect, device number 79 [ 1465.473461][T21614] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4600'. [ 1465.722440][T21619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1466.035278][T21622] tap0: tun_chr_ioctl cmd 2147767520 [ 1466.592991][T21630] openvswitch: netlink: Message has 6416 unknown bytes. [ 1466.593055][T21630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1466.776225][T21634] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4609'. [ 1467.516487][ T5604] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1467.623002][ T5604] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1468.221766][ T5604] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1468.373597][ T5604] usb 9-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1468.374905][ T5604] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.391782][T10042] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1468.427055][ T5604] usb 9-1: config 0 descriptor?? [ 1468.467167][ T5604] pwc: Samsung MPC-C10 USB webcam detected. [ 1468.551725][T10042] usb 7-1: Using ep0 maxpacket: 32 [ 1468.552725][T10042] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1468.557861][T10042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.606325][T10042] usb 7-1: config 0 descriptor?? [ 1468.708898][T10042] as10x_usb: device has been detected [ 1468.719366][T10042] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1468.776061][ T5604] pwc: send_video_command error -71 [ 1468.776082][ T5604] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1468.776199][ T5604] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 1468.819499][T10042] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1468.871795][T19422] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1468.905521][ T5604] usb 9-1: USB disconnect, device number 4 [ 1469.025077][T19422] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1469.026629][T19422] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1469.026658][T19422] usb 4-1: config 0 has no interface number 0 [ 1469.077548][T19422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.077584][T19422] usb 4-1: Product: syz [ 1469.077602][T19422] usb 4-1: Manufacturer: syz [ 1469.077620][T19422] usb 4-1: SerialNumber: syz [ 1469.158400][T10042] as10x_usb: error during firmware upload part1 [ 1469.159551][T10042] Registered device nBox DVB-T Dongle [ 1469.300099][T19422] usb 4-1: config 0 descriptor?? [ 1469.330008][T19422] usb 4-1: selecting invalid altsetting 1 [ 1469.517223][T19422] dvb_ttusb_budget: ttusb_init_controller: error [ 1469.517249][T19422] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1469.778999][T21666] tap0: tun_chr_ioctl cmd 2147767520 [ 1469.796043][T21668] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4615'. [ 1469.950039][T19422] DVB: Unable to find symbol stv0299_attach() [ 1470.076635][T19422] DVB: Unable to find symbol tda8083_attach() [ 1470.076654][T19422] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1470.248399][T21674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1470.358358][ T36] usb 7-1: USB disconnect, device number 80 [ 1470.415838][ T36] Unregistered device nBox DVB-T Dongle [ 1470.423090][ T36] as10x_usb: device has been disconnected [ 1470.474535][T21676] openvswitch: netlink: Message has 13064 unknown bytes. [ 1470.474718][T21676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1470.789866][T21682] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4620'. [ 1471.749675][ T36] usb 4-1: USB disconnect, device number 98 [ 1472.388455][T21712] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4628'. [ 1472.442404][T19422] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 1472.481891][ T36] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 1472.570729][T21716] openvswitch: netlink: Message has 13064 unknown bytes. [ 1472.570775][T21716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1472.645941][T19422] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1472.647640][T19422] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.665871][T19422] usb 7-1: config 0 descriptor?? [ 1472.696817][T19422] pwc: Samsung MPC-C10 USB webcam detected. [ 1472.722686][ T36] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1472.724427][ T36] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1472.724456][ T36] usb 4-1: config 0 has no interface number 0 [ 1472.724507][ T36] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1472.724540][ T36] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1472.724588][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.732006][ T36] usb 4-1: config 0 descriptor?? [ 1472.749618][T21702] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1472.859913][ T36] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1472.980237][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1472.980326][ T36] usb 4-1: USB disconnect, device number 99 [ 1473.235268][T19422] pwc: send_video_command error -71 [ 1473.235293][T19422] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1473.235434][T19422] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1473.301361][T19422] usb 7-1: USB disconnect, device number 81 [ 1473.624955][T21726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1474.391806][ T5604] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 1474.592579][ T5604] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1474.594119][ T5604] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1474.594148][ T5604] usb 7-1: config 0 has no interface number 0 [ 1474.597180][ T5604] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.597210][ T5604] usb 7-1: Product: syz [ 1474.597228][ T5604] usb 7-1: Manufacturer: syz [ 1474.597245][ T5604] usb 7-1: SerialNumber: syz [ 1474.627394][ T5604] usb 7-1: config 0 descriptor?? [ 1474.669286][ T5604] usb 7-1: selecting invalid altsetting 1 [ 1474.669466][ T5604] dvb_ttusb_budget: ttusb_init_controller: error [ 1474.669483][ T5604] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1474.832097][T19422] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 1474.854705][T19422] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1474.953654][T21745] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4639'. [ 1474.974610][ T5604] DVB: Unable to find symbol stv0299_attach() [ 1475.248687][ T5604] DVB: Unable to find symbol tda8083_attach() [ 1475.248709][ T5604] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1475.325423][T21752] openvswitch: netlink: Message has 13064 unknown bytes. [ 1475.325475][T21752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1475.961526][ T1532] IPVS: starting estimator thread 0... [ 1476.111859][T21765] IPVS: using max 7 ests per chain, 16800 per kthread [ 1476.633653][T21778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1476.633714][T21778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1476.840433][T21778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1476.840466][T21778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1476.951869][ T6676] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 1477.032900][ T5604] usb 7-1: USB disconnect, device number 82 [ 1477.104454][ T6676] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1477.106454][ T6676] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1477.106487][ T6676] usb 4-1: config 0 has no interface number 0 [ 1477.106544][ T6676] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1477.106580][ T6676] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1477.106632][ T6676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.244589][ T6676] usb 4-1: config 0 descriptor?? [ 1477.248797][T21780] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1477.325513][T21786] netlink: 27 bytes leftover after parsing attributes in process `syz.8.4652'. [ 1477.445981][T21788] openvswitch: netlink: Message has 6400 unknown bytes. [ 1477.446156][T21788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1477.555155][ T6676] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1477.613252][ T6676] usb 4-1: USB disconnect, device number 100 [ 1477.679132][T21790] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4655'. [ 1477.869882][T21795] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4656'. [ 1478.353561][ T5604] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 1478.371354][ T5604] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1479.121803][T19422] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1479.341810][T19422] usb 7-1: Using ep0 maxpacket: 32 [ 1479.342762][T19422] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1479.344382][T19422] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.388734][T19422] usb 7-1: config 0 descriptor?? [ 1479.445876][T19422] as10x_usb: device has been detected [ 1479.447001][T19422] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1479.476401][T19422] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1479.481074][T19422] as10x_usb: error during firmware upload part1 [ 1479.512994][T19422] Registered device nBox DVB-T Dongle [ 1479.639173][ T5604] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1479.852766][ T5604] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1479.854438][ T5604] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1479.854470][ T5604] usb 8-1: config 0 has no interface number 0 [ 1479.858695][ T5604] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.858732][ T5604] usb 8-1: Product: syz [ 1479.858752][ T5604] usb 8-1: Manufacturer: syz [ 1479.858772][ T5604] usb 8-1: SerialNumber: syz [ 1480.009984][ T5604] usb 8-1: config 0 descriptor?? [ 1480.022434][T21823] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4667'. [ 1480.087860][ T5604] usb 8-1: selecting invalid altsetting 1 [ 1480.088062][ T5604] dvb_ttusb_budget: ttusb_init_controller: error [ 1480.088082][ T5604] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1480.340476][T21829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1480.506897][ T5604] DVB: Unable to find symbol stv0299_attach() [ 1480.771438][ T5604] DVB: Unable to find symbol tda8083_attach() [ 1480.771459][ T5604] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1480.831916][T21834] openvswitch: netlink: Message has 6400 unknown bytes. [ 1480.831976][T21834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1481.797467][T21855] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1481.812410][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 1482.422591][ T3249] usb 8-1: USB disconnect, device number 2 [ 1482.679416][T10042] usb 7-1: USB disconnect, device number 83 [ 1483.087340][T10042] Unregistered device nBox DVB-T Dongle [ 1483.090380][T10042] as10x_usb: device has been disconnected [ 1483.191757][ T5604] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1483.268754][T21875] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4679'. [ 1483.268783][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4679'. [ 1483.341792][ T5604] usb 6-1: Using ep0 maxpacket: 32 [ 1483.342616][ T5604] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1483.344210][ T5604] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 1483.347506][ T5604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.347537][ T5604] usb 6-1: Product: syz [ 1483.347555][ T5604] usb 6-1: Manufacturer: syz [ 1483.347580][ T5604] usb 6-1: SerialNumber: syz [ 1483.391780][T10042] usb 7-1: new low-speed USB device number 84 using dummy_hcd [ 1483.424829][ T5604] usb 6-1: config 0 descriptor?? [ 1483.455359][ T5604] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1483.455405][ T5604] dvb-usb: bulk message failed: -22 (2/0) [ 1483.487068][ T5604] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1483.505310][ T5604] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1483.505361][ T5604] usb 6-1: media controller created [ 1483.553636][T10042] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1483.557231][T10042] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1483.557268][T10042] usb 7-1: config 0 has no interface number 0 [ 1483.557334][T10042] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1483.557370][T10042] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1483.557424][T10042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.635115][T21880] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4681'. [ 1483.640819][T10042] usb 7-1: config 0 descriptor?? [ 1483.650254][T21866] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1483.687108][T10042] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1483.722333][ T5604] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1483.801973][ T5604] usb 6-1: selecting invalid altsetting 7 [ 1483.801998][ T5604] cxusb: set interface failed [ 1483.809723][T21870] dvb-usb: bulk message failed: -22 (3/0) [ 1483.901529][ T5604] dvb-usb: bulk message failed: -22 (1/0) [ 1483.932453][ T5698] usb 7-1: USB disconnect, device number 84 [ 1483.932564][ C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1483.975967][T21884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1484.075425][T21879] openvswitch: netlink: Message has 6400 unknown bytes. [ 1484.075470][T21879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1484.113381][ T5604] DVB: Unable to find symbol lgdt330x_attach() [ 1484.113395][ T5604] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1484.283774][ T5604] rc_core: IR keymap rc-dvico-portable not found [ 1484.283794][ T5604] Registered IR keymap rc-empty [ 1484.285285][ T5604] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1484.302859][ T5604] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input46 [ 1484.333945][ T5604] dvb-usb: schedule remote query interval to 100 msecs. [ 1484.333983][ T5604] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1484.342268][ T8365] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1484.370344][ T5604] usb 6-1: USB disconnect, device number 114 [ 1484.502942][ T8365] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1484.504093][ T8365] usb 4-1: config 0 has no interfaces? [ 1484.506224][ T8365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1484.506257][ T8365] usb 4-1: SerialNumber: syz [ 1484.555468][ T8365] usb 4-1: config 0 descriptor?? [ 1484.786418][ T5604] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1484.861845][ T5872] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1484.955870][ T36] usb 4-1: USB disconnect, device number 101 [ 1485.022872][T21900] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1485.023555][ T5872] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1485.027968][ T5872] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1485.028003][ T5872] usb 9-1: config 0 has no interface number 0 [ 1485.066070][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.066106][ T5872] usb 9-1: Product: syz [ 1485.066126][ T5872] usb 9-1: Manufacturer: syz [ 1485.066146][ T5872] usb 9-1: SerialNumber: syz [ 1485.155660][ T5872] usb 9-1: config 0 descriptor?? [ 1485.236139][ T5872] usb 9-1: selecting invalid altsetting 1 [ 1485.237318][ T5872] dvb_ttusb_budget: ttusb_init_controller: error [ 1485.237811][ T5872] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1485.501925][ T5872] DVB: Unable to find symbol stv0299_attach() [ 1485.582990][ T5872] DVB: Unable to find symbol tda8083_attach() [ 1485.583005][ T5872] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1486.050350][T21918] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4690'. [ 1486.231766][ T5872] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1486.382617][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 1486.383682][ T5872] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1486.385361][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.408832][ T5872] usb 6-1: config 0 descriptor?? [ 1486.556369][ T5872] as10x_usb: device has been detected [ 1486.563956][ T5872] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1486.695422][ T5872] usb 6-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1486.765706][ T5872] as10x_usb: error during firmware upload part1 [ 1486.766444][ T5872] Registered device nBox DVB-T Dongle [ 1487.122878][T21935] openvswitch: netlink: Missing valid actions attribute. [ 1487.122942][T21935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1487.257081][T21937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1487.575686][ T8365] usb 9-1: USB disconnect, device number 5 [ 1488.252852][ T5698] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1488.389843][T10042] usb 7-1: new low-speed USB device number 85 using dummy_hcd [ 1488.423092][ T5698] usb 9-1: Using ep0 maxpacket: 32 [ 1488.439215][ T5698] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1488.441199][ T5698] usb 9-1: config index 0 descriptor too short (expected 19, got 18) [ 1488.467626][ T5698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.467679][ T5698] usb 9-1: Product: syz [ 1488.467699][ T5698] usb 9-1: Manufacturer: syz [ 1488.467718][ T5698] usb 9-1: SerialNumber: syz [ 1488.525836][ T5698] usb 9-1: config 0 descriptor?? [ 1488.544342][ T5698] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1488.544406][ T5698] dvb-usb: bulk message failed: -22 (2/0) [ 1488.575603][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1488.576617][ T5698] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1488.576686][ T5698] usb 9-1: media controller created [ 1488.604924][T10042] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1488.606670][T10042] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1488.606699][T10042] usb 7-1: config 0 has no interface number 0 [ 1488.606746][T10042] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1488.606777][T10042] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1488.606821][T10042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.678866][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1488.703481][T10042] usb 7-1: config 0 descriptor?? [ 1488.704802][T21954] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1488.742144][T21952] dvb-usb: bulk message failed: -22 (3/0) [ 1488.786509][T10042] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1488.908070][ T5698] usb 9-1: selecting invalid altsetting 7 [ 1488.908098][ T5698] cxusb: set interface failed [ 1488.908117][ T5698] dvb-usb: bulk message failed: -22 (1/0) [ 1488.942556][T10042] usb 7-1: USB disconnect, device number 85 [ 1489.046365][T21966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4703'. [ 1489.231419][ T8365] usb 6-1: USB disconnect, device number 115 [ 1489.243155][ T5698] DVB: Unable to find symbol lgdt330x_attach() [ 1489.243278][ T5698] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1489.436259][ T8365] Unregistered device nBox DVB-T Dongle [ 1489.446747][ T5698] rc_core: IR keymap rc-dvico-portable not found [ 1489.446771][ T5698] Registered IR keymap rc-empty [ 1489.448871][ T8365] as10x_usb: device has been disconnected [ 1489.448878][ T5698] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 1489.604169][ T5698] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input47 [ 1489.609680][ T5698] dvb-usb: schedule remote query interval to 100 msecs. [ 1489.609713][ T5698] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1489.666298][ T5698] usb 9-1: USB disconnect, device number 6 [ 1489.784456][T21979] openvswitch: netlink: Missing valid actions attribute. [ 1489.784515][T21979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1489.910981][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.950491][T21977] binder: BINDER_SET_CONTEXT_MGR already set [ 1489.950509][T21977] binder: 21976:21977 ioctl 4018620d 200000004a80 returned -16 [ 1490.389758][T21991] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4710'. [ 1490.389788][T21991] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4710'. [ 1490.446460][ T5698] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1490.978563][T22004] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4714'. [ 1491.531732][ T36] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1491.683467][ T36] usb 8-1: Using ep0 maxpacket: 32 [ 1491.684512][ T36] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1491.687748][ T36] usb 8-1: config index 0 descriptor too short (expected 19, got 18) [ 1491.696363][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.696457][ T36] usb 8-1: Product: syz [ 1491.696508][ T36] usb 8-1: Manufacturer: syz [ 1491.696561][ T36] usb 8-1: SerialNumber: syz [ 1491.760558][ T36] usb 8-1: config 0 descriptor?? [ 1491.789309][ T36] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1491.789354][ T36] dvb-usb: bulk message failed: -22 (2/0) [ 1491.904599][ T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1491.918569][ T36] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1491.918755][ T36] usb 8-1: media controller created [ 1492.026531][T22011] dvb-usb: bulk message failed: -22 (43/0) [ 1492.051474][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1492.158314][ T36] usb 8-1: selecting invalid altsetting 7 [ 1492.158341][ T36] cxusb: set interface failed [ 1492.158358][ T36] dvb-usb: bulk message failed: -22 (1/0) [ 1492.323539][T22022] openvswitch: netlink: Missing valid actions attribute. [ 1492.323592][T22022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1492.443574][ T36] DVB: Unable to find symbol lgdt330x_attach() [ 1492.443596][ T36] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1492.664076][T22040] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4723'. [ 1492.664472][T22040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4723'. [ 1492.772256][ T5872] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1492.806019][ T36] rc_core: IR keymap rc-dvico-portable not found [ 1492.806040][ T36] Registered IR keymap rc-empty [ 1492.847508][ T36] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1492.918925][ T36] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input48 [ 1492.922073][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 1492.932230][ T5872] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1492.963796][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.968339][ T36] dvb-usb: schedule remote query interval to 100 msecs. [ 1492.968370][ T36] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1493.071841][ T5604] dvb-usb: bulk message failed: -22 (1/0) [ 1493.098555][ T36] usb 8-1: USB disconnect, device number 3 [ 1493.142836][T22047] netlink: 27 bytes leftover after parsing attributes in process `syz.7.4724'. [ 1493.155029][ T5872] usb 6-1: config 0 descriptor?? [ 1493.225065][ T5872] as10x_usb: device has been detected [ 1493.225769][ T5872] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1493.599314][ T5872] usb 6-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1493.688229][T22052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4727'. [ 1493.857866][ T5872] as10x_usb: error during firmware upload part1 [ 1493.858574][ T5872] Registered device nBox DVB-T Dongle [ 1494.061326][ T36] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1494.438250][T22070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1494.731715][T10042] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1494.798586][T22076] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4735'. [ 1494.891748][T10042] usb 7-1: Using ep0 maxpacket: 32 [ 1494.892673][T10042] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1494.894764][T10042] usb 7-1: config index 0 descriptor too short (expected 19, got 18) [ 1494.899952][T10042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.899986][T10042] usb 7-1: Product: syz [ 1494.900006][T10042] usb 7-1: Manufacturer: syz [ 1494.900026][T10042] usb 7-1: SerialNumber: syz [ 1494.954344][T10042] usb 7-1: config 0 descriptor?? [ 1494.995325][T10042] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1494.995400][T10042] dvb-usb: bulk message failed: -22 (2/0) [ 1495.072408][T10042] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1495.093323][T10042] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1495.093401][T10042] usb 7-1: media controller created [ 1495.263410][T22074] dvb-usb: bulk message failed: -22 (43/0) [ 1495.297756][T10042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1495.489880][T10042] usb 7-1: selecting invalid altsetting 7 [ 1495.489908][T10042] cxusb: set interface failed [ 1495.489925][T10042] dvb-usb: bulk message failed: -22 (1/0) [ 1495.578042][T10042] DVB: Unable to find symbol lgdt330x_attach() [ 1495.578064][T10042] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1495.722041][T10042] rc_core: IR keymap rc-dvico-portable not found [ 1495.722066][T10042] Registered IR keymap rc-empty [ 1495.741381][ T5698] usb 6-1: USB disconnect, device number 116 [ 1495.766039][T10042] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1495.807451][T22099] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4740'. [ 1495.838330][T10042] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input49 [ 1495.951739][ T999] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1496.045185][T10042] dvb-usb: schedule remote query interval to 100 msecs. [ 1496.045216][T10042] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1496.105320][T10042] usb 7-1: USB disconnect, device number 86 [ 1496.118916][ T999] usb 4-1: not running at top speed; connect to a high speed hub [ 1496.118962][ T999] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1496.124362][ T999] usb 4-1: config index 0 descriptor too short (expected 161, got 153) [ 1496.124397][ T999] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1496.124477][ T999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.270088][ T5698] Unregistered device nBox DVB-T Dongle [ 1496.299593][ T5698] as10x_usb: device has been disconnected [ 1496.483077][ T999] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1496.757945][T10042] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1496.858966][ T999] gspca_spca501: reg write: error -71 [ 1496.858991][ T999] spca501 4-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 1496.859101][ T999] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 1496.888417][ T999] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 1496.889367][ T999] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1496.889812][ T999] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1496.889865][ T999] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 1496.952698][ T999] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 1497.005889][ T999] usb 4-1: USB disconnect, device number 102 [ 1497.018527][T22112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1497.358829][T22130] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4751'. [ 1497.841779][ T999] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1498.021902][ T999] usb 6-1: Using ep0 maxpacket: 32 [ 1498.022777][ T999] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1498.026864][ T999] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 1498.030274][ T999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.030306][ T999] usb 6-1: Product: syz [ 1498.030324][ T999] usb 6-1: Manufacturer: syz [ 1498.030342][ T999] usb 6-1: SerialNumber: syz [ 1498.099297][ T999] usb 6-1: config 0 descriptor?? [ 1498.136291][ T999] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1498.136354][ T999] dvb-usb: bulk message failed: -22 (2/0) [ 1498.162787][ T999] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1498.167888][ T999] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1498.167975][ T999] usb 6-1: media controller created [ 1498.232171][ T999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1498.325483][ T999] usb 6-1: selecting invalid altsetting 7 [ 1498.325513][ T999] cxusb: set interface failed [ 1498.325531][ T999] dvb-usb: bulk message failed: -22 (1/0) [ 1498.354074][T22138] dvb-usb: bulk message failed: -22 (43/0) [ 1498.655293][ T999] DVB: Unable to find symbol lgdt330x_attach() [ 1498.655314][ T999] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1498.852422][ T999] rc_core: IR keymap rc-dvico-portable not found [ 1498.852450][ T999] Registered IR keymap rc-empty [ 1498.878233][ T999] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1498.900637][ T999] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input50 [ 1498.915488][ T999] dvb-usb: schedule remote query interval to 100 msecs. [ 1498.915515][ T999] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1498.919045][ T999] usb 6-1: USB disconnect, device number 117 [ 1498.970175][T22161] netlink: 27 bytes leftover after parsing attributes in process `syz.8.4760'. [ 1499.041953][T10042] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1499.141987][ T999] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1499.201763][T10042] usb 8-1: Using ep0 maxpacket: 32 [ 1499.202685][T10042] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1499.207809][T10042] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.300396][T10042] usb 8-1: config 0 descriptor?? [ 1499.361325][T10042] as10x_usb: device has been detected [ 1499.367544][T10042] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1499.520049][T10042] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1499.681784][ T999] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 1499.758053][T10042] as10x_usb: error during firmware upload part1 [ 1499.788236][T10042] Registered device nBox DVB-T Dongle [ 1499.792867][T22168] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4763'. [ 1499.932776][ T999] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1499.934745][ T999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.997667][ T999] usb 6-1: config 0 descriptor?? [ 1500.025724][ T999] pwc: Samsung MPC-C10 USB webcam detected. [ 1500.309999][T22166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1500.380366][ T999] pwc: send_video_command error -71 [ 1500.380392][ T999] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1500.380530][ T999] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1500.418421][ T999] usb 6-1: USB disconnect, device number 118 [ 1500.958637][T22192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1501.308052][ T5698] usb 8-1: USB disconnect, device number 4 [ 1501.332147][ T999] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1501.493281][ T999] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1501.502057][ T999] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.536843][ T5698] Unregistered device nBox DVB-T Dongle [ 1501.592556][ T999] usb 9-1: config 0 descriptor?? [ 1501.616015][ T5698] as10x_usb: device has been disconnected [ 1502.311716][ T5698] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1502.462823][ T5698] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1502.463713][ T5698] usb 8-1: config 0 has no interfaces? [ 1502.465305][ T5698] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1502.465336][ T5698] usb 8-1: SerialNumber: syz [ 1502.501151][ T36] usb 7-1: new full-speed USB device number 87 using dummy_hcd [ 1502.515318][ T5698] usb 8-1: config 0 descriptor?? [ 1502.652710][ T36] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1502.654317][ T36] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1502.654350][ T36] usb 7-1: config 0 has no interface number 0 [ 1502.658205][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.658237][ T36] usb 7-1: Product: syz [ 1502.658256][ T36] usb 7-1: Manufacturer: syz [ 1502.658278][ T36] usb 7-1: SerialNumber: syz [ 1502.706594][ T999] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 1502.735582][ T36] usb 7-1: config 0 descriptor?? [ 1502.751110][ T36] usb 7-1: selecting invalid altsetting 1 [ 1502.751241][ T36] dvb_ttusb_budget: ttusb_init_controller: error [ 1502.751254][ T36] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1502.780889][ T5698] usb 8-1: USB disconnect, device number 5 [ 1502.862759][ T999] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1502.864144][ T999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.894762][ T999] usb 6-1: config 0 descriptor?? [ 1502.925471][ T999] pwc: Samsung MPC-C10 USB webcam detected. [ 1503.010421][ T36] DVB: Unable to find symbol stv0299_attach() [ 1503.080558][ T36] DVB: Unable to find symbol tda8083_attach() [ 1503.080573][ T36] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1503.260520][ T999] pwc: send_video_command error -71 [ 1503.260545][ T999] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1503.260680][ T999] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1503.286876][ T999] usb 6-1: USB disconnect, device number 119 [ 1503.778698][T22255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1503.817784][T22256] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1504.084734][T22252] kvm: pic: single mode not supported [ 1504.302161][ T5698] usb 9-1: USB disconnect, device number 7 [ 1505.091698][ T5698] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1505.204353][ T5872] usb 7-1: USB disconnect, device number 87 [ 1505.255843][ T5698] usb 4-1: Using ep0 maxpacket: 32 [ 1505.262147][ T5698] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1505.273866][ T5698] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 1505.360239][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.360276][ T5698] usb 4-1: Product: syz [ 1505.360296][ T5698] usb 4-1: Manufacturer: syz [ 1505.360315][ T5698] usb 4-1: SerialNumber: syz [ 1505.404570][ T5698] usb 4-1: config 0 descriptor?? [ 1505.439200][ T5698] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1505.439262][ T5698] dvb-usb: bulk message failed: -22 (2/0) [ 1505.456202][T19422] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 1505.484089][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1505.486573][ T5698] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1505.486638][ T5698] usb 4-1: media controller created [ 1505.552353][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1505.627175][T22269] dvb-usb: bulk message failed: -22 (63/0) [ 1505.639528][T19422] usb 6-1: not running at top speed; connect to a high speed hub [ 1505.639579][T19422] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1505.666823][T19422] usb 6-1: config index 0 descriptor too short (expected 161, got 153) [ 1505.666863][T19422] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1505.666941][T19422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.736049][ T5698] usb 4-1: selecting invalid altsetting 7 [ 1505.736076][ T5698] cxusb: set interface failed [ 1505.736095][ T5698] dvb-usb: bulk message failed: -22 (1/0) [ 1505.769871][T19422] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1506.105629][ T5698] DVB: Unable to find symbol lgdt330x_attach() [ 1506.105651][ T5698] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1506.209795][T19422] gspca_spca501: reg write: error -71 [ 1506.209819][T19422] spca501 6-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 1506.209918][T19422] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 1506.233804][T19422] uvcvideo 6-1:1.0: Found UVC 1.00 device (0000:0000) [ 1506.237949][T19422] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1506.238471][T19422] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1506.238535][T19422] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 1506.325786][T19422] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -71 [ 1506.351858][T19422] usb 6-1: USB disconnect, device number 120 [ 1506.571756][ T5698] rc_core: IR keymap rc-dvico-portable not found [ 1506.571781][ T5698] Registered IR keymap rc-empty [ 1506.600286][ T5698] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1506.630748][ T5698] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input51 [ 1506.656818][ T5698] dvb-usb: schedule remote query interval to 100 msecs. [ 1506.656845][ T5698] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1506.683560][ T5698] usb 4-1: USB disconnect, device number 103 [ 1506.701376][T22304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1506.851527][ T5698] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1506.881955][ T5872] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1507.032652][ T5872] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1507.037217][ T5872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.087366][ T5872] usb 9-1: config 0 descriptor?? [ 1508.111704][T10042] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1508.278014][T10042] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1508.279651][T10042] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1508.279678][T10042] usb 8-1: config 0 has no interface number 0 [ 1508.308964][T10042] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.308998][T10042] usb 8-1: Product: syz [ 1508.309016][T10042] usb 8-1: Manufacturer: syz [ 1508.309033][T10042] usb 8-1: SerialNumber: syz [ 1508.343232][T10042] usb 8-1: config 0 descriptor?? [ 1508.361222][T10042] usb 8-1: selecting invalid altsetting 1 [ 1508.370951][T10042] dvb_ttusb_budget: ttusb_init_controller: error [ 1508.370977][T10042] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1508.663798][T10042] DVB: Unable to find symbol stv0299_attach() [ 1508.816895][T10042] DVB: Unable to find symbol tda8083_attach() [ 1508.816917][T10042] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1508.897183][T10042] usb 8-1: USB disconnect, device number 6 [ 1509.562851][T10042] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1509.603443][T19422] usb 9-1: USB disconnect, device number 8 [ 1509.722298][T10042] usb 8-1: Using ep0 maxpacket: 32 [ 1509.727334][T10042] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1509.729026][T10042] usb 8-1: config index 0 descriptor too short (expected 19, got 18) [ 1509.765350][T10042] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.765384][T10042] usb 8-1: Product: syz [ 1509.765402][T10042] usb 8-1: Manufacturer: syz [ 1509.765420][T10042] usb 8-1: SerialNumber: syz [ 1509.821003][T10042] usb 8-1: config 0 descriptor?? [ 1509.863909][T10042] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1509.863966][T10042] dvb-usb: bulk message failed: -22 (2/0) [ 1509.912863][T10042] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1509.933526][T10042] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1509.933592][T10042] usb 8-1: media controller created [ 1509.996666][T10042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1510.068302][T22342] dvb-usb: bulk message failed: -22 (63/0) [ 1510.078702][T10042] usb 8-1: selecting invalid altsetting 7 [ 1510.078726][T10042] cxusb: set interface failed [ 1510.078743][T10042] dvb-usb: bulk message failed: -22 (1/0) [ 1510.231846][T10042] DVB: Unable to find symbol lgdt330x_attach() [ 1510.231866][T10042] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1510.345548][T22359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1510.375336][T10042] rc_core: IR keymap rc-dvico-portable not found [ 1510.375362][T10042] Registered IR keymap rc-empty [ 1510.378789][T10042] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1510.382203][ T5872] usb 6-1: new full-speed USB device number 121 using dummy_hcd [ 1510.415975][T10042] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input52 [ 1510.419966][T10042] dvb-usb: schedule remote query interval to 100 msecs. [ 1510.419991][T10042] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1510.467996][T10042] usb 8-1: USB disconnect, device number 7 [ 1510.545061][ T5872] usb 6-1: not running at top speed; connect to a high speed hub [ 1510.545113][ T5872] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1510.601165][ T5872] usb 6-1: config index 0 descriptor too short (expected 161, got 153) [ 1510.601205][ T5872] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1510.601280][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.613801][ T999] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1510.680823][T10042] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1510.751829][ T5872] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1510.797212][ T999] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1510.832003][ T999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.937772][ T999] usb 4-1: config 0 descriptor?? [ 1511.085243][ T999] pwc: Samsung MPC-C10 USB webcam detected. [ 1511.257226][ T5872] gspca_spca501: reg write: error -71 [ 1511.257310][ T5872] spca501 6-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 1511.257403][ T5872] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 1511.267407][ T5872] uvcvideo 6-1:1.0: Found UVC 1.00 device (0000:0000) [ 1511.268999][ T5872] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1511.269845][ T5872] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1511.269983][ T5872] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 1511.489937][ T999] pwc: send_video_command error -71 [ 1511.490042][ T999] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1511.490183][ T999] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1511.534959][ T5872] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -71 [ 1511.668154][ T999] usb 4-1: USB disconnect, device number 104 [ 1511.694889][ T5872] usb 6-1: USB disconnect, device number 121 [ 1512.062050][T10042] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1512.226607][T10042] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1512.230761][T10042] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1512.230791][T10042] usb 9-1: config 0 has no interface number 0 [ 1512.284588][T10042] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.284633][T10042] usb 9-1: Product: syz [ 1512.284654][T10042] usb 9-1: Manufacturer: syz [ 1512.284673][T10042] usb 9-1: SerialNumber: syz [ 1512.335583][T10042] usb 9-1: config 0 descriptor?? [ 1512.367979][T10042] usb 9-1: selecting invalid altsetting 1 [ 1512.368180][T10042] dvb_ttusb_budget: ttusb_init_controller: error [ 1512.368197][T10042] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1512.525206][T10042] DVB: Unable to find symbol stv0299_attach() [ 1512.654745][T10042] DVB: Unable to find symbol tda8083_attach() [ 1512.654766][T10042] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1512.684811][T10042] usb 9-1: USB disconnect, device number 9 [ 1513.221729][ T3249] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1513.415676][ T3249] usb 8-1: Using ep0 maxpacket: 32 [ 1513.421074][ T3249] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1513.423855][ T3249] usb 8-1: config index 0 descriptor too short (expected 19, got 18) [ 1513.447457][ T3249] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.447502][ T3249] usb 8-1: Product: syz [ 1513.447523][ T3249] usb 8-1: Manufacturer: syz [ 1513.447544][ T3249] usb 8-1: SerialNumber: syz [ 1513.498533][ T3249] usb 8-1: config 0 descriptor?? [ 1513.528115][ T3249] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1513.528179][ T3249] dvb-usb: bulk message failed: -22 (2/0) [ 1513.549720][ T3249] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1513.550591][ T3249] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1513.550660][ T3249] usb 8-1: media controller created [ 1513.599696][ T3249] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1513.634906][ T3249] usb 8-1: selecting invalid altsetting 7 [ 1513.634935][ T3249] cxusb: set interface failed [ 1513.634953][ T3249] dvb-usb: bulk message failed: -22 (1/0) [ 1513.719725][ T3249] DVB: Unable to find symbol lgdt330x_attach() [ 1513.719747][ T3249] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1513.774870][T22407] dvb-usb: bulk message failed: -22 (73/0) [ 1513.841716][ T3249] rc_core: IR keymap rc-dvico-portable not found [ 1513.841741][ T3249] Registered IR keymap rc-empty [ 1513.843864][ T3249] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1513.849901][ T3249] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input53 [ 1513.886174][ T3249] dvb-usb: schedule remote query interval to 100 msecs. [ 1513.886203][ T3249] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1513.912398][ T3249] usb 8-1: USB disconnect, device number 8 [ 1513.921972][ T36] usb 7-1: new full-speed USB device number 88 using dummy_hcd [ 1514.074899][ T36] usb 7-1: not running at top speed; connect to a high speed hub [ 1514.074953][ T36] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1514.077242][ T36] usb 7-1: config index 0 descriptor too short (expected 161, got 153) [ 1514.077280][ T36] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1514.077358][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.184096][ T3249] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1514.208187][ T36] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1514.426163][ T36] gspca_spca501: reg write: error -71 [ 1514.426187][ T36] spca501 7-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1514.426295][ T36] spca501 7-1:1.0: probe with driver spca501 failed with error -22 [ 1514.427889][ T36] uvcvideo 7-1:1.0: Found UVC 1.00 device (0000:0000) [ 1514.532059][ T36] uvcvideo 7-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1514.532831][ T36] uvcvideo 7-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1514.532908][ T36] uvcvideo 7-1:1.1: Failed to initialize the device (-71). [ 1514.533765][ T36] uvcvideo 7-1:1.0: probe with driver uvcvideo failed with error -71 [ 1514.755235][ T36] usb 7-1: USB disconnect, device number 88 [ 1514.811794][ T3249] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1514.973329][ T3249] usb 9-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1514.975362][ T3249] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.040974][ T3249] usb 9-1: config 0 descriptor?? [ 1515.055437][ T3249] pwc: Samsung MPC-C10 USB webcam detected. [ 1515.285968][T22446] netlink: 'syz.3.4845': attribute type 16 has an invalid length. [ 1515.285993][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4845'. [ 1515.408883][ T3249] pwc: send_video_command error -71 [ 1515.408910][ T3249] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1515.409059][ T3249] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 1515.468370][ T3249] usb 9-1: USB disconnect, device number 10 [ 1516.041927][ T999] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1516.264611][ T999] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1516.266052][ T999] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1516.266084][ T999] usb 4-1: config 0 has no interface number 0 [ 1516.268826][ T999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.268857][ T999] usb 4-1: Product: syz [ 1516.268877][ T999] usb 4-1: Manufacturer: syz [ 1516.268896][ T999] usb 4-1: SerialNumber: syz [ 1516.324750][ T999] usb 4-1: config 0 descriptor?? [ 1516.349542][ T999] usb 4-1: selecting invalid altsetting 1 [ 1516.349705][ T999] dvb_ttusb_budget: ttusb_init_controller: error [ 1516.349727][ T999] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1516.577471][ T999] DVB: Unable to find symbol stv0299_attach() [ 1516.697352][ T999] DVB: Unable to find symbol tda8083_attach() [ 1516.697370][ T999] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1516.729966][ T999] usb 4-1: USB disconnect, device number 105 [ 1516.932250][ T36] usb 7-1: new full-speed USB device number 89 using dummy_hcd [ 1517.065728][T22485] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4858'. [ 1517.086799][ T36] usb 7-1: not running at top speed; connect to a high speed hub [ 1517.086850][ T36] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1517.091351][ T36] usb 7-1: config index 0 descriptor too short (expected 161, got 153) [ 1517.091390][ T36] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1517.091468][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.170025][ T36] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1517.387957][T22490] netlink: 'syz.3.4859': attribute type 16 has an invalid length. [ 1517.387984][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4859'. [ 1517.405143][ T36] gspca_spca501: reg write: error -71 [ 1517.405198][ T36] spca501 7-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1517.405478][ T36] spca501 7-1:1.0: probe with driver spca501 failed with error -22 [ 1517.442670][ T36] uvcvideo 7-1:1.0: Found UVC 1.00 device (0000:0000) [ 1517.446484][ T36] uvcvideo 7-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1517.447774][ T36] uvcvideo 7-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1517.447932][ T36] uvcvideo 7-1:1.1: Failed to initialize the device (-71). [ 1517.448854][ T36] uvcvideo 7-1:1.0: probe with driver uvcvideo failed with error -71 [ 1517.490286][ T36] usb 7-1: USB disconnect, device number 89 [ 1517.629638][T22486] bridge1: port 1(erspan0) entered blocking state [ 1517.630871][T22486] bridge1: port 1(erspan0) entered disabled state [ 1517.631099][T22486] erspan0: entered allmulticast mode [ 1517.657169][T22486] erspan0: entered promiscuous mode [ 1517.673561][T22486] bridge1: port 1(erspan0) entered blocking state [ 1517.673674][T22486] bridge1: port 1(erspan0) entered forwarding state [ 1518.201747][ T3249] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1518.355751][ T3249] usb 8-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1518.360732][ T3249] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.399522][ T3249] usb 8-1: config 0 descriptor?? [ 1518.439102][ T3249] pwc: Samsung MPC-C10 USB webcam detected. [ 1518.474642][T10042] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1518.687677][T10042] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1518.690269][T10042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.761922][T10042] usb 7-1: config 0 descriptor?? [ 1518.764766][ T3249] pwc: send_video_command error -71 [ 1518.764786][ T3249] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1518.764965][ T3249] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 1518.819965][ T3249] usb 8-1: USB disconnect, device number 9 [ 1519.224505][T22524] netlink: 'syz.8.4872': attribute type 16 has an invalid length. [ 1519.224535][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4872'. [ 1519.389042][T22527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4874'. [ 1519.488240][T22527] bridge1: port 1(erspan0) entered blocking state [ 1519.488381][T22527] bridge1: port 1(erspan0) entered disabled state [ 1519.488617][T22527] erspan0: entered allmulticast mode [ 1519.492158][T22527] erspan0: entered promiscuous mode [ 1519.493447][T22527] bridge1: port 1(erspan0) entered blocking state [ 1519.493599][T22527] bridge1: port 1(erspan0) entered forwarding state [ 1519.493666][ T999] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1519.742738][ T999] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1519.744665][ T999] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1519.744701][ T999] usb 4-1: config 0 has no interface number 0 [ 1519.748012][ T999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.748047][ T999] usb 4-1: Product: syz [ 1519.748067][ T999] usb 4-1: Manufacturer: syz [ 1519.748087][ T999] usb 4-1: SerialNumber: syz [ 1519.763755][ T999] usb 4-1: config 0 descriptor?? [ 1519.807325][ T999] usb 4-1: selecting invalid altsetting 1 [ 1519.807530][ T999] dvb_ttusb_budget: ttusb_init_controller: error [ 1519.807551][ T999] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1520.121838][ T36] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1520.220131][ T999] DVB: Unable to find symbol stv0299_attach() [ 1520.273875][ T36] usb 8-1: not running at top speed; connect to a high speed hub [ 1520.274055][ T36] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1520.276001][ T36] usb 8-1: config index 0 descriptor too short (expected 161, got 153) [ 1520.276036][ T36] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1520.276112][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.372608][ T36] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1520.465397][ T999] DVB: Unable to find symbol tda8083_attach() [ 1520.465417][ T999] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1520.516710][ T999] usb 4-1: USB disconnect, device number 106 [ 1520.620758][ T36] gspca_spca501: reg write: error -71 [ 1520.620780][ T36] spca501 8-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1520.620881][ T36] spca501 8-1:1.0: probe with driver spca501 failed with error -22 [ 1520.666392][ T36] uvcvideo 8-1:1.0: Found UVC 1.00 device (0000:0000) [ 1520.677888][ T36] uvcvideo 8-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1520.678380][ T36] uvcvideo 8-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1520.678442][ T36] uvcvideo 8-1:1.1: Failed to initialize the device (-71). [ 1520.905660][ T36] uvcvideo 8-1:1.0: probe with driver uvcvideo failed with error -71 [ 1521.043299][ T36] usb 8-1: USB disconnect, device number 10 [ 1521.327228][ T3249] usb 7-1: USB disconnect, device number 90 [ 1521.611222][T22570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4887'. [ 1522.087704][T22589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1522.161479][T22578] bridge1: port 1(erspan0) entered blocking state [ 1522.168280][T22578] bridge1: port 1(erspan0) entered disabled state [ 1522.190103][T22578] erspan0: entered allmulticast mode [ 1522.264185][T22578] erspan0: entered promiscuous mode [ 1522.317911][T22578] bridge1: port 1(erspan0) entered blocking state [ 1522.319472][T22578] bridge1: port 1(erspan0) entered forwarding state [ 1523.091937][ T36] usb 7-1: new full-speed USB device number 91 using dummy_hcd [ 1523.242718][ T36] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1523.244264][ T36] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1523.244291][ T36] usb 7-1: config 0 has no interface number 0 [ 1523.248545][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.248578][ T36] usb 7-1: Product: syz [ 1523.248596][ T36] usb 7-1: Manufacturer: syz [ 1523.248613][ T36] usb 7-1: SerialNumber: syz [ 1523.308142][ T36] usb 7-1: config 0 descriptor?? [ 1523.321742][ T999] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1523.333004][ T5872] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 1523.344891][ T36] usb 7-1: selecting invalid altsetting 1 [ 1523.345400][ T36] dvb_ttusb_budget: ttusb_init_controller: error [ 1523.345442][ T36] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1523.472689][ T999] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1523.475790][ T36] DVB: Unable to find symbol stv0299_attach() [ 1523.476095][ T999] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.492855][ T5872] usb 6-1: not running at top speed; connect to a high speed hub [ 1523.492985][ T5872] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1523.555050][ T5872] usb 6-1: config index 0 descriptor too short (expected 161, got 153) [ 1523.555092][ T5872] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1523.555172][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.584993][ T999] usb 8-1: config 0 descriptor?? [ 1523.691208][ T5872] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1523.866150][ T36] DVB: Unable to find symbol tda8083_attach() [ 1523.866173][ T36] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1523.910241][ T36] usb 7-1: USB disconnect, device number 91 [ 1524.107522][ T5872] gspca_spca501: reg write: error -71 [ 1524.107543][ T5872] spca501 6-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 1524.107638][ T5872] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 1524.149535][ T5872] uvcvideo 6-1:1.0: Found UVC 1.00 device (0000:0000) [ 1524.172832][ T5872] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1524.178596][ T5872] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1524.178683][ T5872] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 1524.179526][ T5872] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -71 [ 1524.477122][ T5872] usb 6-1: USB disconnect, device number 122 [ 1524.791791][T22634] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1524.902486][T22638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4907'. [ 1524.927932][T22631] kvm: pic: single mode not supported [ 1525.137040][T22638] erspan0: left allmulticast mode [ 1525.137079][T22638] erspan0: left promiscuous mode [ 1525.137470][T22638] bridge1: port 1(erspan0) entered disabled state [ 1525.789235][T22651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1526.241167][T10042] usb 8-1: USB disconnect, device number 11 [ 1526.370073][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4914'. [ 1526.711739][T10042] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1526.813258][ T5927] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1526.873481][T10042] usb 6-1: not running at top speed; connect to a high speed hub [ 1526.873537][T10042] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1526.875119][T10042] usb 6-1: config index 0 descriptor too short (expected 161, got 153) [ 1526.875152][T10042] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1526.875222][T10042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.978176][ T5927] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1526.978880][ T5927] usb 7-1: config 0 has no interfaces? [ 1526.980203][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1526.980236][ T5927] usb 7-1: SerialNumber: syz [ 1527.056557][ T5927] usb 7-1: config 0 descriptor?? [ 1527.057288][T10042] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1527.359308][ T5927] usb 7-1: USB disconnect, device number 92 [ 1527.368880][T10042] gspca_spca501: reg write: error -71 [ 1527.368903][T10042] spca501 6-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 1527.369020][T10042] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 1527.397087][T10042] uvcvideo 6-1:1.0: Found UVC 1.00 device (0000:0000) [ 1527.413801][T10042] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1527.414356][T10042] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1527.414421][T10042] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 1527.415294][T10042] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -71 [ 1527.520329][T10042] usb 6-1: USB disconnect, device number 123 [ 1527.851780][T19422] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1528.021773][ T36] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1528.124162][T19422] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1528.128048][T19422] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1528.128079][T19422] usb 9-1: config 0 has no interface number 0 [ 1528.131199][T19422] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.131229][T19422] usb 9-1: Product: syz [ 1528.131247][T19422] usb 9-1: Manufacturer: syz [ 1528.131265][T19422] usb 9-1: SerialNumber: syz [ 1528.189709][T19422] usb 9-1: config 0 descriptor?? [ 1528.282039][T19422] usb 9-1: selecting invalid altsetting 1 [ 1528.283735][T19422] dvb_ttusb_budget: ttusb_init_controller: error [ 1528.283758][T19422] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1528.301709][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 1528.304156][ T36] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1528.308308][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.435243][ T36] usb 4-1: config 0 descriptor?? [ 1528.565350][T19422] DVB: Unable to find symbol stv0299_attach() [ 1528.617524][T19422] DVB: Unable to find symbol tda8083_attach() [ 1528.617544][T19422] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1528.639779][T19422] usb 9-1: USB disconnect, device number 11 [ 1528.697654][ T36] as10x_usb: device has been detected [ 1528.698678][ T36] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1528.714481][T10042] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1528.769197][ T36] usb 4-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1528.864768][T10042] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1528.866632][T10042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.960884][ T36] as10x_usb: error during firmware upload part1 [ 1528.961348][ T36] Registered device nBox DVB-T Dongle [ 1529.117166][T10042] usb 7-1: config 0 descriptor?? [ 1529.179331][T22702] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4927'. [ 1530.462731][ T8365] usb 4-1: USB disconnect, device number 107 [ 1530.524672][ T8365] Unregistered device nBox DVB-T Dongle [ 1530.533296][ T8365] as10x_usb: device has been disconnected [ 1531.381747][ T8365] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1531.467557][ T999] usb 7-1: USB disconnect, device number 93 [ 1531.535692][ T8365] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1531.536811][ T8365] usb 6-1: config 0 has no interfaces? [ 1531.538732][ T8365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1531.538762][ T8365] usb 6-1: SerialNumber: syz [ 1531.607564][ T8365] usb 6-1: config 0 descriptor?? [ 1531.927441][T19422] usb 6-1: USB disconnect, device number 124 [ 1532.033970][T22757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4944'. [ 1532.309910][T22765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1532.370953][ T37] audit: type=1804 audit(1790788271.933:974): pid=22762 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.4945" name="/newroot/99/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 1533.124553][ T999] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1533.223114][T22782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4952'. [ 1533.282580][ T999] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1533.284246][ T999] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.310133][ T999] usb 8-1: config 0 descriptor?? [ 1533.342007][ T5698] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1533.491732][ T5698] usb 7-1: Using ep0 maxpacket: 32 [ 1533.492827][ T5698] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1533.494419][ T5698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.525508][ T5698] usb 7-1: config 0 descriptor?? [ 1533.556820][ T5698] as10x_usb: device has been detected [ 1533.558848][ T5698] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1533.589888][ T5698] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1533.609215][ T5698] as10x_usb: error during firmware upload part1 [ 1533.609977][ T5698] Registered device nBox DVB-T Dongle [ 1534.011997][ T5698] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1534.172600][ T5698] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1534.174415][ T5698] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.178010][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.178041][ T5698] usb 4-1: Product: syz [ 1534.178059][ T5698] usb 4-1: Manufacturer: syz [ 1534.178076][ T5698] usb 4-1: SerialNumber: syz [ 1534.375758][ T5872] usb 7-1: USB disconnect, device number 94 [ 1534.483411][ T5872] Unregistered device nBox DVB-T Dongle [ 1534.487705][ T5872] as10x_usb: device has been disconnected [ 1535.224559][T22806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4959'. [ 1535.400471][ T5698] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1535.400525][ T5698] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1535.400552][ T5698] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1535.711996][T19422] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1535.817800][T22811] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1535.894670][T19422] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1535.917066][T19422] usb 7-1: config 0 has no interfaces? [ 1535.928937][T19422] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1535.929219][T19422] usb 7-1: SerialNumber: syz [ 1535.970363][T19422] usb 7-1: config 0 descriptor?? [ 1535.984787][ T5698] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 1536.008091][ T5698] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1536.036883][ T5698] usb 4-1: USB disconnect, device number 108 [ 1536.040428][ T5698] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1536.180358][ T999] usb 8-1: USB disconnect, device number 12 [ 1536.588058][ T999] usb 7-1: USB disconnect, device number 95 [ 1536.612387][T22818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1536.964352][T22825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4965'. [ 1537.671773][ T5698] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1537.753583][T22839] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4970'. [ 1537.831911][ T5698] usb 4-1: Using ep0 maxpacket: 32 [ 1537.832797][ T5698] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1537.835779][ T5698] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 1537.840179][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.840210][ T5698] usb 4-1: Product: syz [ 1537.840228][ T5698] usb 4-1: Manufacturer: syz [ 1537.840245][ T5698] usb 4-1: SerialNumber: syz [ 1537.927409][ T5698] usb 4-1: config 0 descriptor?? [ 1537.950094][ T5698] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1537.950154][ T5698] dvb-usb: bulk message failed: -22 (2/0) [ 1537.988211][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1537.989119][ T5698] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1537.989189][ T5698] usb 4-1: media controller created [ 1538.033788][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1538.074467][ T5698] usb 4-1: selecting invalid altsetting 7 [ 1538.074491][ T5698] cxusb: set interface failed [ 1538.074507][ T5698] dvb-usb: bulk message failed: -22 (1/0) [ 1538.098938][ T3249] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1538.160126][T22834] dvb-usb: bulk message failed: -22 (78/0) [ 1538.253011][ T3249] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1538.258724][ T3249] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.291414][ T3249] usb 8-1: config 0 descriptor?? [ 1538.301423][ T5698] DVB: Unable to find symbol lgdt330x_attach() [ 1538.301443][ T5698] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1538.521659][ T5698] rc_core: IR keymap rc-dvico-portable not found [ 1538.521687][ T5698] Registered IR keymap rc-empty [ 1538.541373][ T5698] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1538.580800][ T5698] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input54 [ 1538.599210][ T5698] dvb-usb: schedule remote query interval to 100 msecs. [ 1538.599240][ T5698] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1538.625221][ T5698] usb 4-1: USB disconnect, device number 109 [ 1538.769045][ T5698] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1539.106793][T22861] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1539.428125][T22866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4978'. [ 1539.721888][ T999] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1539.794082][T22877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1539.873007][ T999] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1539.875203][ T999] usb 6-1: config 0 has no interfaces? [ 1539.878630][ T999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1539.878663][ T999] usb 6-1: SerialNumber: syz [ 1539.936044][ T999] usb 6-1: config 0 descriptor?? [ 1540.212257][ T999] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 1540.218175][ T5698] usb 6-1: USB disconnect, device number 125 [ 1540.377814][ T999] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1540.379137][ T999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.401123][ T999] usb 7-1: config 0 descriptor?? [ 1540.427104][ T999] pwc: Samsung MPC-C10 USB webcam detected. [ 1540.673007][ T999] pwc: send_video_command error -71 [ 1540.673032][ T999] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1540.673175][ T999] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1540.707768][ T999] usb 7-1: USB disconnect, device number 96 [ 1540.877741][ T5872] usb 8-1: USB disconnect, device number 13 [ 1541.388685][T22898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4990'. [ 1541.441809][ T5872] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1541.591736][ T5872] usb 8-1: Using ep0 maxpacket: 32 [ 1541.593902][ T5872] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1541.597513][ T5872] usb 8-1: config index 0 descriptor too short (expected 19, got 18) [ 1541.599923][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.599956][ T5872] usb 8-1: Product: syz [ 1541.599968][ T5872] usb 8-1: Manufacturer: syz [ 1541.599979][ T5872] usb 8-1: SerialNumber: syz [ 1541.660687][ T5872] usb 8-1: config 0 descriptor?? [ 1541.687037][ T5872] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1541.687082][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 1541.714215][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1541.719084][ T5872] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1541.719155][ T5872] usb 8-1: media controller created [ 1541.800698][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1541.820510][T18691] Bluetooth: hci1: unexpected event for opcode 0x041b [ 1541.872981][T22894] cxusb: i2c wr: len=80 is too big! [ 1541.872981][T22894] [ 1541.901373][ T5872] usb 8-1: selecting invalid altsetting 7 [ 1541.901399][ T5872] cxusb: set interface failed [ 1541.901416][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 1542.026187][T22910] netlink: 'syz.3.4994': attribute type 1 has an invalid length. [ 1542.027296][T22910] netlink: 'syz.3.4994': attribute type 1 has an invalid length. [ 1542.030721][T22910] netlink: 'syz.3.4994': attribute type 1 has an invalid length. [ 1542.076213][ T5872] DVB: Unable to find symbol lgdt330x_attach() [ 1542.076235][ T5872] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1542.201871][ T5872] rc_core: IR keymap rc-dvico-portable not found [ 1542.201901][ T5872] Registered IR keymap rc-empty [ 1542.211030][ T5872] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1542.242505][ T5872] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input55 [ 1542.250520][ T5872] dvb-usb: schedule remote query interval to 100 msecs. [ 1542.250547][ T5872] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1542.278158][ T5872] usb 8-1: USB disconnect, device number 14 [ 1542.337594][T22918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1542.467046][ T5872] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1542.869835][ T5872] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1543.063451][ T5872] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1543.066337][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.099170][ T5872] usb 8-1: config 0 descriptor?? [ 1543.508668][T22932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5001'. [ 1543.694514][ T37] audit: type=1804 audit(1790788283.293:975): pid=22936 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.5002" name="/newroot/366/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 1543.833224][ T36] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 1543.984595][ T36] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1543.986086][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.019927][ T36] usb 6-1: config 0 descriptor?? [ 1544.054722][ T36] pwc: Samsung MPC-C10 USB webcam detected. [ 1544.272284][ T36] pwc: send_video_command error -71 [ 1544.272308][ T36] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1544.272464][ T36] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1544.406737][ T36] usb 6-1: USB disconnect, device number 126 [ 1545.303738][ T1532] netdevsim netdevsim30 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.451844][ T5698] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1545.520262][T22953] netdevsim netdevsim30 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.611886][ T5698] usb 7-1: Using ep0 maxpacket: 32 [ 1545.612899][ T5698] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1545.614477][ T5698] usb 7-1: config index 0 descriptor too short (expected 19, got 18) [ 1545.619647][ T5698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.619680][ T5698] usb 7-1: Product: syz [ 1545.619697][ T5698] usb 7-1: Manufacturer: syz [ 1545.619715][ T5698] usb 7-1: SerialNumber: syz [ 1545.678384][ T999] usb 8-1: USB disconnect, device number 15 [ 1545.718461][ T5698] usb 7-1: config 0 descriptor?? [ 1545.779717][ T5698] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1545.779765][ T5698] dvb-usb: bulk message failed: -22 (2/0) [ 1545.826828][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1545.827635][ T5698] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1545.827697][ T5698] usb 7-1: media controller created [ 1545.875885][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1545.948607][T22956] cxusb: i2c wr: len=80 is too big! [ 1545.948607][T22956] [ 1545.971942][ T5698] usb 7-1: selecting invalid altsetting 7 [ 1545.971970][ T5698] cxusb: set interface failed [ 1545.971987][ T5698] dvb-usb: bulk message failed: -22 (1/0) [ 1546.098758][ T5698] DVB: Unable to find symbol lgdt330x_attach() [ 1546.098778][ T5698] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1546.282217][ T5698] rc_core: IR keymap rc-dvico-portable not found [ 1546.282246][ T5698] Registered IR keymap rc-empty [ 1546.286405][ T5698] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1546.289960][ T5698] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input56 [ 1546.329578][ T5698] dvb-usb: schedule remote query interval to 100 msecs. [ 1546.329607][ T5698] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1546.361751][ T5698] usb 7-1: USB disconnect, device number 97 [ 1546.511311][ T5698] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1546.669083][T22968] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5012'. [ 1546.683105][T22968] erspan0: left allmulticast mode [ 1546.683145][T22968] erspan0: left promiscuous mode [ 1546.688825][T22968] bridge1: port 1(erspan0) entered disabled state [ 1547.171944][ T8365] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1547.321948][ T8365] usb 7-1: Using ep0 maxpacket: 32 [ 1547.323616][ T8365] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1547.324915][ T8365] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1547.324947][ T8365] usb 7-1: config 0 has no interface number 0 [ 1547.327557][ T8365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.327588][ T8365] usb 7-1: Product: syz [ 1547.327600][ T8365] usb 7-1: Manufacturer: syz [ 1547.327612][ T8365] usb 7-1: SerialNumber: syz [ 1547.345788][ T8365] usb 7-1: config 0 descriptor?? [ 1547.400143][ T8365] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1547.400166][ T8365] usb 7-1: selecting invalid altsetting 1 [ 1547.400179][ T8365] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1547.434054][ T8365] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1547.434491][ T8365] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1547.434531][ T8365] usb 7-1: media controller created [ 1547.456086][ T8365] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1548.249456][T19490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1548.328590][T19490] Bluetooth: hci5: command 0x0406 tx timeout [ 1548.346577][T19490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1548.422858][T22975] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1548.505352][T22975] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1548.519797][T22975] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1548.532247][ T8365] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1548.532319][ T8365] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1548.614838][T22970] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1549.087147][ T8365] usb 7-1: USB disconnect, device number 98 [ 1550.001917][ T8365] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 1550.153481][ T8365] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1550.155352][ T8365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.191425][ T8365] usb 6-1: config 0 descriptor?? [ 1550.227066][ T8365] pwc: Samsung MPC-C10 USB webcam detected. [ 1550.388827][T22973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.389078][T22973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.389269][T22973] bridge_slave_0: entered allmulticast mode [ 1550.393780][T22973] bridge_slave_0: entered promiscuous mode [ 1550.399715][T22973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.400064][T22973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.401020][T22973] bridge_slave_1: entered allmulticast mode [ 1550.408404][T22973] bridge_slave_1: entered promiscuous mode [ 1550.529977][T22973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.556024][T22973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.617615][ T8365] pwc: send_video_command error -71 [ 1550.617649][ T8365] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1550.617794][ T8365] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1550.656588][ T8365] usb 6-1: USB disconnect, device number 127 [ 1550.732430][T22973] team0: Port device team_slave_0 added [ 1550.735815][T22973] team0: Port device team_slave_1 added [ 1550.792650][T22973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.792676][T22973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.792700][T22973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.795214][T22973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.795229][T22973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.795253][T22973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.947434][T22973] hsr_slave_0: entered promiscuous mode [ 1550.948602][T22973] hsr_slave_1: entered promiscuous mode [ 1550.949428][T22973] debugfs: 'hsr0' already exists in 'hsr' [ 1550.949452][T22973] Cannot create hsr debugfs directory [ 1551.001842][ T36] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1551.091946][T18691] Bluetooth: hci6: command tx timeout [ 1551.153296][ T36] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1551.154052][ T36] usb 7-1: config 0 has no interfaces? [ 1551.155578][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1551.155606][ T36] usb 7-1: SerialNumber: syz [ 1551.161470][ T36] usb 7-1: config 0 descriptor?? [ 1551.357347][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.476526][T10042] usb 7-1: USB disconnect, device number 99 [ 1551.543144][ T5698] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1551.701940][ T5698] usb 6-1: Using ep0 maxpacket: 32 [ 1551.704872][ T5698] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1551.710091][ T5698] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 1551.750191][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.750224][ T5698] usb 6-1: Product: syz [ 1551.750242][ T5698] usb 6-1: Manufacturer: syz [ 1551.750259][ T5698] usb 6-1: SerialNumber: syz [ 1551.791378][ T5698] usb 6-1: config 0 descriptor?? [ 1551.804926][ T5698] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1551.804975][ T5698] dvb-usb: bulk message failed: -22 (2/0) [ 1551.810751][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1551.816972][ T5698] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1551.817031][ T5698] usb 6-1: media controller created [ 1551.862682][T22973] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1551.864672][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1551.903282][T22973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1551.904748][T22973] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1551.905697][ T5698] usb 6-1: selecting invalid altsetting 7 [ 1551.905720][ T5698] cxusb: set interface failed [ 1551.905737][ T5698] dvb-usb: bulk message failed: -22 (1/0) [ 1551.997998][ T5698] DVB: Unable to find symbol lgdt330x_attach() [ 1551.998019][ T5698] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1552.017956][T23008] cxusb: i2c wr: len=80 is too big! [ 1552.017956][T23008] [ 1552.030801][T22973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1552.039485][T22973] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1552.077146][T22973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1552.078581][T22973] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1552.141708][ T5698] rc_core: IR keymap rc-dvico-portable not found [ 1552.141736][ T5698] Registered IR keymap rc-empty [ 1552.143978][ T5698] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1552.147932][ T5698] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input57 [ 1552.160811][ T5698] dvb-usb: schedule remote query interval to 100 msecs. [ 1552.160890][ T5698] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1552.191467][ T5698] usb 6-1: USB disconnect, device number 2 [ 1552.219962][T22973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1552.260253][T18691] Bluetooth: hci1: unexpected event for opcode 0x041b [ 1552.402709][ T5698] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1552.423861][T22973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.529590][T22973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.568781][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.569995][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.702549][T17937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.702693][T17937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.001740][ T5698] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1553.161820][ T5698] usb 6-1: Using ep0 maxpacket: 32 [ 1553.162756][ T5698] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1553.165553][ T5698] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1553.165584][ T5698] usb 6-1: config 0 has no interface number 0 [ 1553.168832][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.168863][ T5698] usb 6-1: Product: syz [ 1553.168880][ T5698] usb 6-1: Manufacturer: syz [ 1553.168898][ T5698] usb 6-1: SerialNumber: syz [ 1553.171799][ T60] Bluetooth: hci6: command tx timeout [ 1553.236516][ T5698] usb 6-1: config 0 descriptor?? [ 1553.260821][ T5698] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1553.260854][ T5698] usb 6-1: selecting invalid altsetting 1 [ 1553.260874][ T5698] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1553.303851][ T5698] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1553.305656][ T5698] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1553.305718][ T5698] usb 6-1: media controller created [ 1553.354935][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1553.471781][T22973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1554.022935][ T8365] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1554.171823][ T8365] usb 7-1: Using ep0 maxpacket: 32 [ 1554.173846][ T8365] usb 7-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1554.207226][ T8365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.207264][ T8365] usb 7-1: Product: syz [ 1554.207284][ T8365] usb 7-1: Manufacturer: syz [ 1554.207304][ T8365] usb 7-1: SerialNumber: syz [ 1554.238074][ T8365] usb 7-1: config 0 descriptor?? [ 1554.266006][ T8365] usb 7-1: selecting invalid altsetting 3 [ 1554.266033][ T8365] comedi comedi5: could not set alternate setting 3 in high speed [ 1554.266049][ T8365] usbdux 7-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1554.291708][T18691] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1554.291866][ T60] Bluetooth: hci0: command 0x1407 tx timeout [ 1554.349033][ T8365] usbdux 7-1:0.0: probe with driver usbdux failed with error -22 [ 1554.366857][T22973] veth0_vlan: entered promiscuous mode [ 1554.398860][T22973] veth1_vlan: entered promiscuous mode [ 1554.469287][ T5698] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1554.469379][ T5698] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1554.502962][T23020] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1554.546890][ T3249] usb 7-1: USB disconnect, device number 100 [ 1554.566776][T22973] veth0_macvtap: entered promiscuous mode [ 1554.591115][T22973] veth1_macvtap: entered promiscuous mode [ 1554.630449][ T5698] usb 6-1: USB disconnect, device number 3 [ 1554.700773][T22973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.761324][T22973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1555.281311][T18691] Bluetooth: hci6: command tx timeout [ 1555.495148][ T1428] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.513162][ T1428] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.554338][ T1428] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.580991][ T1111] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.078897][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.078927][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.570254][T14978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.570282][T14978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.982304][T23063] digital: digital_start_poll: Unknown protocol [ 1557.012174][T10042] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1557.242457][T10042] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1557.243298][T10042] usb 7-1: config 0 has no interfaces? [ 1557.244649][T10042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1557.244681][T10042] usb 7-1: SerialNumber: syz [ 1557.287281][T10042] usb 7-1: config 0 descriptor?? [ 1557.332005][T18691] Bluetooth: hci6: command tx timeout [ 1557.471755][ T5872] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1557.659784][ T999] usb 7-1: USB disconnect, device number 101 [ 1557.691747][ T5872] usb 10-1: Using ep0 maxpacket: 32 [ 1557.712416][ T5872] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1557.714122][ T5872] usb 10-1: config index 0 descriptor too short (expected 19, got 18) [ 1557.717756][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.717783][ T5872] usb 10-1: Product: syz [ 1557.717798][ T5872] usb 10-1: Manufacturer: syz [ 1557.717813][ T5872] usb 10-1: SerialNumber: syz [ 1557.745589][ T5872] usb 10-1: config 0 descriptor?? [ 1557.795839][ T5872] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1557.795909][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 1557.825563][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1557.826370][ T5872] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1557.826431][ T5872] usb 10-1: media controller created [ 1557.869519][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1557.972477][ T5872] usb 10-1: selecting invalid altsetting 7 [ 1557.972502][ T5872] cxusb: set interface failed [ 1557.972516][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 1558.032933][T23068] cxusb: i2c wr: len=79 is too big! [ 1558.032933][T23068] [ 1558.077871][T23070] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 1558.130350][ T5872] DVB: Unable to find symbol lgdt330x_attach() [ 1558.130370][ T5872] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1558.251719][ T5872] rc_core: IR keymap rc-dvico-portable not found [ 1558.251744][ T5872] Registered IR keymap rc-empty [ 1558.255983][ T5872] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 1558.285399][ T5872] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input58 [ 1558.309496][ T5872] dvb-usb: schedule remote query interval to 100 msecs. [ 1558.309523][ T5872] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1558.335312][ T5872] usb 10-1: USB disconnect, device number 2 [ 1558.453615][ T5872] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1558.761948][ T8365] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1558.913507][ T8365] usb 7-1: Using ep0 maxpacket: 32 [ 1558.919402][ T8365] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1558.920915][ T8365] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1558.920943][ T8365] usb 7-1: config 0 has no interface number 0 [ 1558.977540][ T8365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.977574][ T8365] usb 7-1: Product: syz [ 1558.977592][ T8365] usb 7-1: Manufacturer: syz [ 1558.977610][ T8365] usb 7-1: SerialNumber: syz [ 1559.002584][T10042] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1559.014668][ T38] INFO: task syz.1.4410:20938 blocked for more than 143 seconds. [ 1559.014703][ T38] Tainted: G L syzkaller #0 [ 1559.014719][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1559.014733][ T38] task:syz.1.4410 state:D stack:27464 pid:20938 tgid:20929 ppid:12133 task_flags:0x400040 flags:0x00080002 [ 1559.014813][ T38] Call Trace: [ 1559.014824][ T38] [ 1559.014842][ T38] __schedule+0x16d9/0x5700 [ 1559.015017][ T38] ? __pfx___schedule+0x10/0x10 [ 1559.015078][ T38] rt_mutex_schedule+0x76/0xf0 [ 1559.015114][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1559.015162][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1559.015202][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1559.015242][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1559.015279][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1559.015672][ T38] ? write_threads+0x3b4/0x610 [ 1559.015716][ T38] ? write_threads+0x3b4/0x610 [ 1559.015742][ T38] mutex_lock_nested+0x168/0x1d0 [ 1559.015786][ T38] write_threads+0x3b4/0x610 [ 1559.015818][ T38] ? __pfx_write_threads+0x10/0x10 [ 1559.015871][ T38] ? _copy_from_user+0x94/0xb0 [ 1559.015911][ T38] ? simple_transaction_get+0x130/0x170 [ 1559.015946][ T38] nfsctl_transaction_write+0x112/0x160 [ 1559.015987][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1559.016017][ T38] vfs_write+0x29f/0xbb0 [ 1559.016061][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1559.016097][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1559.016131][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1559.016159][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 1559.016194][ T38] ? fdget_pos+0x252/0x320 [ 1559.024180][ T38] ksys_write+0x156/0x270 [ 1559.024225][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1559.024265][ T38] do_syscall_64+0x166/0x520 [ 1559.024289][ T38] ? trace_irq_disable+0x3b/0x140 [ 1559.024319][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.024341][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1559.024369][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.024410][ T38] RIP: 0033:0x7f1e9c66e159 [ 1559.024433][ T38] RSP: 002b:00007f1e9a8a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1559.024458][ T38] RAX: ffffffffffffffda RBX: 00007f1e9c8f6090 RCX: 00007f1e9c66e159 [ 1559.024475][ T38] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000003 [ 1559.024491][ T38] RBP: 00007f1e9c70506b R08: 0000000000000000 R09: 0000000000000000 [ 1559.024507][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.024522][ T38] R13: 00007f1e9c8f6128 R14: 00007f1e9c8f6090 R15: 00007ffe0b34aed8 [ 1559.024559][ T38] [ 1559.024614][ T38] [ 1559.024614][ T38] Showing all locks held in the system: [ 1559.024634][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 1559.024654][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1559.024720][ T38] locks held by kworker/u8:5/70: 5, last CPU#0: [ 1559.024735][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.024794][ T38] #1: ffffc9000155fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.024857][ T38] #2: ffff88803b57a310 (&devlink->lock_key#21){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1559.025005][ T38] #3: ffff88805f3f5920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1559.025066][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1559.025145][ T38] locks held by kworker/u8:13/1406: 7, last CPU#0: [ 1559.025161][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1559.025229][ T38] #1: ffffc90005c77c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.025303][ T38] #2: ffff8880293d6310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1559.025370][ T38] #3: ffff8880363c3920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1559.025433][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1559.025496][ T38] #5: ffff8880b8637350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1559.025602][ T38] #6: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1559.041114][ T38] locks held by kworker/0:3/3249: 3, last CPU#0: [ 1559.041197][ T38] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.041433][ T38] #1: ffffc9000eb9fc40 (pcpu_balance_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.041801][ T38] #2: ffffffff8e2d04b8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_balance_workfn+0x66/0x1000 [ 1559.041948][ T38] locks held by klogd/4949: 2, last CPU#0: [ 1559.041967][ T38] #0: ffffffff8e2f5420 (fs_reclaim){+.+.}-{0:0}, at: __kma ** replaying previous printk message ** [ 1559.041967][ T38] #0: ffffffff8e2f5420 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xb9/0x7b0 [ 1559.042112][ T38] #1: ffffffff8e30b240 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0x7c/0x100 [ 1559.042339][ T38] locks held by getty/5347: 2, on CPU#0: [ 1559.042393][ T38] #0: ffff888036c880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1559.071815][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1559.072208][ T38] locks held by kworker/1:6/5872: 2, last CPU#1: [ 1559.072268][ T38] #0: ffff88806d418d38 ((wq_completion)wg-crypt-wg1#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.072451][ T38] #1: ffffc900054c7c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.072666][ T38] locks held by kworker/1:8/8365: 6, last CPU#1: [ 1559.072724][ T38] #0: ffff88801a731538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.072941][ T38] #1: ffffc90004edfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.073139][ T38] #2: ffff88802a262210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1559.073350][ T38] #3: ffff8880719a8210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1559.094015][ T38] #4: ffff88813ff77238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1559.094232][ T38] #5: ffffffff8e0795c0 (sched_map-wait-type-override){+.+.}-{3:3}, at: rt_mutex_pre_schedule+0x7b/0x1d0 [ 1559.094444][ T38] locks held by kworker/0:6/10042: 6, on CPU#0: [ 1559.094501][ T38] #0: ffff88801a731538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.094702][ T38] #1: ffffc90004f87c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.094897][ T38] #2: ffff88802a41c210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1559.095050][ T38] #3: ffff88802a40d658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0 [ 1559.095215][ T38] #4: ffff88802a3b5058 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0 [ 1559.095381][ T38] #5: ffffffff8ee77de0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1800 [ 1559.116685][ T38] locks held by kworker/u8:6/14978: 6, last CPU#0: [ 1559.116744][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.116950][ T38] #1: ffffc900115dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.117160][ T38] #2: ffff888029a32310 (&devlink->lock_key#23){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1559.117340][ T38] #3: ffff88805dffd520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1559.117599][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1559.137020][ T38] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1559.137131][ T38] locks held by kworker/u8:7/17937: 6, on CPU#0: [ 1559.137151][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.137313][ T38] #1: ffffc90004e3fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.137536][ T38] #2: ffff88803b58c310 (&devlink->lock_key#20){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1559.137747][ T38] #3: ffff8880354a5120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1559.137943][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1559.138083][ T38] #5: ffff8880b8637350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1559.138287][ T38] locks held by syz-executor/20117: 2, on CPU#1: [ 1559.138307][ T38] #0: ffff88806271e0e0 (&type->s_umount_key#82){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1559.138511][ T38] #1: ffffffff8e4f86d8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1559.138730][ T38] locks held by syz.1.4410/20932: 3, on CPU#1: [ 1559.138787][ T38] #0: ffff88803e57e128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1559.138963][ T38] #1: ffff888078ce0510 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1559.139177][ T38] #2: ffffffff8e4f86d8 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1559.139350][ T38] locks held by syz.1.4410/20938: 3, on CPU#1: [ 1559.139398][ T38] #0: ffff88805fb1d128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1559.139504][ T38] #1: ffff888078ce0510 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1559.139841][ T38] #2: ffffffff8e4f86d8 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 1559.140047][ T38] locks held by kworker/u8:1/21962: 6, last CPU#0: [ 1559.140103][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.140301][ T38] #1: ffffc90005e37c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1559.140518][ T38] #2: ffff888020fd0310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1559.140730][ T38] #3: ffff88805de6cd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1559.140934][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1559.141051][ T38] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1559.141222][ T38] locks held by syz.8.4945/22758: 3, on CPU#1: [ 1559.141279][ T38] #0: ffff8880589f5328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1559.141476][ T38] #1: ffff888036a76510 [ 1559.185316][T10042] usb 10-1: Using ep0 maxpacket: 32 [ 1559.198664][T10042] usb 10-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1559.268788][ T38] (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1559.268865][ T38] #2: ffffffff8e4f86d8 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1559.269306][ T38] locks held by syz.3.5002/22934: 3, on CPU#0: [ 1559.269328][ T38] #0: ffff88803e61af28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1559.269474][ T38] #1: ffff88805fc46510 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1559.269551][ T38] #2: ffffffff8e4f86d8 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1559.269689][ T38] locks held by syz.3.5002/22936: 2, on CPU#1: [ 1559.269708][ T38] #0: ffff888035a67d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1559.269839][ T38] #1: ffffffff8e4f86d8 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1559.269909][ T38] locks held by syz.9.5037/23081: 2, last CPU#0: [ 1559.269990][ T38] #0: ffffffff8e951eb8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 1559.270064][ T38] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 1559.270203][ T38] locks held by syz-executor/23080: 10, last CPU#0: [ 1559.270224][ T38] #0: ffffffff8e29f550 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 1559.270358][ T38] #1: ffff88803f2390b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18e/0x1d80 [ 1559.270497][ T38] #2: ffff88802b7610b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x27d/0x1d80 [ 1559.270579][ T38] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1559.270720][ T38] #4: ffff8880756a7958 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1559.328030][ T38] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1559.329553][ T38] #6: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1559.330071][ T38] #7: ffff888035a24598 (ptlock_ptr(ptdesc) [ 1559.339495][ T8365] usb 7-1: config 0 descriptor?? [ 1559.339597][ T38] #2/1){+.+.}-{3:3}, at: copy_pmd_range+0x569/0x58f0 [ 1559.339669][ T38] #8: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1e0/0x400 [ 1559.347974][ T38] #9: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: page_table_check_set+0x127/0x530 [ 1559.361362][ T38] locks held by syz.5.5039/23082: 1, last CPU#0: [ 1559.361402][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 1559.361750][ T38] locks held by syz.5.5039/23083: 7, last CPU#0: [ 1559.361768][ T38] #0: ffff888029ecbbc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1559.364057][ T38] #1: ffffe8ffffc32aa8 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_decompress+0x146/0x850 [ 1559.364270][ T38] #2: ffff88805ed4f2f8 (zspage->lock){.+.+}-{0:0}, at: zswap_decompress+0x1e4/0x850 [ 1559.364474][ T38] #3: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1559.364834][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1559.367998][ T38] #5: ffffe8ffffc32b28 (&ps->lock#2){+...}-{3:3}, at: _crypto_acomp_lock_stream_bh+0xa0/0x230 [ 1559.373522][ T38] #6: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1559.378162][ T38] [ 1559.378175][ T38] ============================================= [ 1559.378175][ T38] [ 1559.378189][ T38] NMI backtrace for cpu 0 [ 1559.378256][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1559.378323][ T38] Tainted: [L]=SOFTLOCKUP [ 1559.378334][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1559.378351][ T38] Call Trace: [ 1559.378363][ T38] [ 1559.378383][ T38] dump_stack_lvl+0xe8/0x150 [ 1559.378492][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1559.378668][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1559.378716][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1559.378828][ T38] sys_info+0x135/0x170 [ 1559.378863][ T38] watchdog+0xfd7/0x1030 [ 1559.378948][ T38] ? watchdog+0x1c7/0x1030 [ 1559.379016][ T38] kthread+0x38b/0x470 [ 1559.379046][ T38] ? __pfx_watchdog+0x10/0x10 [ 1559.379115][ T38] ? __pfx_kthread+0x10/0x10 [ 1559.379175][ T38] ret_from_fork+0x514/0xb70 [ 1559.379208][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1559.379251][ T38] ? __switch_to+0xc89/0x1420 [ 1559.379345][ T38] ? __pfx_kthread+0x10/0x10 [ 1559.379375][ T38] ret_from_fork_asm+0x1a/0x30 [ 1559.379480][ T38] [ 1559.379535][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1559.379579][ C1] NMI backtrace for cpu 1 [ 1559.379601][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1559.379630][ C1] Tainted: [L]=SOFTLOCKUP [ 1559.379637][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1559.379651][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x80 [ 1559.379686][ C1] Code: 00 00 00 48 8b 3d 54 cc eb 0b 48 89 de 5b e9 43 93 60 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 04 24 65 48 8b 0d e8 fb de 10 65 48 8b 15 e8 fb de 10 89 d7 [ 1559.379704][ C1] RSP: 0018:ffffc900001674a8 EFLAGS: 00000012 [ 1559.379724][ C1] RAX: ffffffff81b2e362 RBX: ffff8880b8728540 RCX: ffff88801caf5dc0 [ 1559.379741][ C1] RDX: 0000000040000000 RSI: 0000016af3c87eed RDI: 0000016af3c9b7e8 [ 1559.379756][ C1] RBP: 1ffff110170e50c5 R08: 0000000000000000 R09: 0000000000000000 [ 1559.379770][ C1] R10: 0000000000000100 R11: 0000000000000002 R12: ffff8880b8728628 [ 1559.379785][ C1] R13: 0000016af3c87eed R14: ffff8880b873d080 R15: 0000016af3c9b7e8 [ 1559.379801][ C1] FS: 0000000000000000(0000) GS:ffff888125cc4000(0000) knlGS:0000000000000000 [ 1559.379819][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1559.379833][ C1] CR2: 00007fa5626237b8 CR3: 0000000037c1a000 CR4: 00000000003526f0 [ 1559.379852][ C1] Call Trace: [ 1559.379861][ C1] [ 1559.379869][ C1] hrtimer_reprogram+0x2b8/0x450 [ 1559.379891][ C1] ? hrtimer_start_range_ns+0x1a3/0x3f0 [ 1559.379915][ C1] hrtimer_start_range_ns+0x1ab/0x3f0 [ 1559.379941][ C1] finish_task_switch+0x3c0/0xc60 [ 1559.379979][ C1] __schedule+0x16e1/0x5700 [ 1559.380030][ C1] ? __pfx___schedule+0x10/0x10 [ 1559.380065][ C1] ? __pfx___schedule+0x10/0x10 [ 1559.380103][ C1] preempt_schedule_irq+0x4b/0x90 [ 1559.380124][ C1] irqentry_exit+0x14f/0x910 [ 1559.380145][ C1] ? trace_irq_disable+0x3b/0x140 [ 1559.380179][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1559.380203][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1559.380285][ C1] Code: e8 8e 9f 64 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 df 88 d0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1559.380304][ C1] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 1559.380322][ C1] RAX: 1ffffffff33d5200 RBX: 00000000000003fd RCX: 0000000000000000 [ 1559.380337][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1559.380350][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1559.380364][ C1] R10: dffffc0000000000 R11: ffffffff85622430 R12: dffffc0000000000 [ 1559.380381][ C1] R13: 0000000000000000 R14: ffffffff99ea9420 R15: 0000000000000000 [ 1559.380399][ C1] ? __pfx_io_serial_in+0x10/0x10 [ 1559.380435][ C1] ? io_serial_in+0x52/0xc0 [ 1559.380467][ C1] wait_for_lsr+0x190/0x300 [ 1559.380498][ C1] __serial8250_console_fifo_write+0xd0/0x3f0 [ 1559.380568][ C1] serial8250_console_write+0xac5/0x1230 [ 1559.380604][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1559.380643][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 1559.380685][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1559.380720][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1559.380764][ C1] nbcon_kthread_func+0x679/0x880 [ 1559.380798][ C1] ? nbcon_kthread_func+0x163/0x880 [ 1559.380827][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1559.380861][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1559.380893][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1559.380928][ C1] kthread+0x38b/0x470 [ 1559.380978][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1559.381006][ C1] ? __pfx_kthread+0x10/0x10 [ 1559.381028][ C1] ret_from_fork+0x514/0xb70 [ 1559.381051][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1559.381071][ C1] ? __switch_to+0xc89/0x1420 [ 1559.381103][ C1] ? __pfx_kthread+0x10/0x10 [ 1559.381125][ C1] ret_from_fork_asm+0x1a/0x30 [ 1559.381154][ C1] [ 1559.547033][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1560.958739][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1560.970062][ T38] Tainted: [L]=SOFTLOCKUP [ 1560.974450][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1560.984533][ T38] Call Trace: [ 1560.987878][ T38] [ 1560.990858][ T38] vpanic+0x56d/0xa60 [ 1560.994882][ T38] ? __pfx___schedule+0x10/0x10 [ 1560.999794][ T38] ? __pfx_vpanic+0x10/0x10 [ 1561.004351][ T38] panic+0xc5/0xd0 [ 1561.008103][ T38] ? __pfx_panic+0x10/0x10 [ 1561.012554][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1561.018056][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1561.023478][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1561.029680][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1561.036242][ T38] watchdog+0x1030/0x1030 [ 1561.041535][ T38] ? watchdog+0x1c7/0x1030 [ 1561.046040][ T38] kthread+0x38b/0x470 [ 1561.050260][ T38] ? __pfx_watchdog+0x10/0x10 [ 1561.054994][ T38] ? __pfx_kthread+0x10/0x10 [ 1561.059641][ T38] ret_from_fork+0x514/0xb70 [ 1561.064292][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1561.069459][ T38] ? __switch_to+0xc89/0x1420 [ 1561.074217][ T38] ? __pfx_kthread+0x10/0x10 [ 1561.079476][ T38] ret_from_fork_asm+0x1a/0x30 [ 1561.084700][ T38] [ 1561.088701][ T38] Kernel Offset: disabled [ 1561.093379][ T38] Rebooting in 86400 seconds..