last executing test programs: 34m55.990890475s ago: executing program 32 (id=26): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) socket(0x18, 0x5, 0x1046) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 29m28.914635964s ago: executing program 33 (id=624): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f00000007c0)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x2, &(0x7f0000019940)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, &(0x7f0000019980)={0x0, 0x0, &(0x7f00000199c0), 0x0}, 0x20) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000003c0)) 27m6.408919904s ago: executing program 34 (id=855): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000400)=@vmx={0x103, 0x0, 0x2080, {0x10000, 0xffff1000, {}, 0x1, 0x20000009a4}, {"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", "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"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000200)=ANY=[]) 21m41.677334826s ago: executing program 35 (id=1306): r0 = dup(0xffffffffffffffff) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(r0, 0x0, 0x1b7) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) io_uring_setup(0x1b7b, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x17f) r2 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000000c0), 0x4) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000500)=""/176, 0xb0}, 0x3}], 0x1, 0x2122, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./trace\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000740)="737562d751f911e16c5765f406a35b36743a6d6f643ab6b7d71eadc67410", 0x1e) 18m29.246103194s ago: executing program 6 (id=1612): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x109) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/vhci\x00', 0x2, 0x20) r0 = syz_open_dev$video(&(0x7f0000000380), 0x81, 0xa082) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 18m28.608560859s ago: executing program 6 (id=1625): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x109) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/vhci\x00', 0x2, 0x20) r0 = syz_open_dev$video(&(0x7f0000000380), 0x81, 0xa082) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 18m24.343704262s ago: executing program 6 (id=1616): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000001240)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_acct\x00') preadv(r4, &(0x7f0000000100), 0x0, 0x3, 0xd) 18m22.011145469s ago: executing program 6 (id=1619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) 18m20.238378019s ago: executing program 6 (id=1621): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) setrlimit(0xd, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x10002, 0x0) setrlimit(0x2, &(0x7f0000000140)={0xfffffffffffffe01, 0x3ac}) write$proc_mixer(r1, 0x0, 0xe1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r3, &(0x7f0000000700), 0x0, 0x2}, 0x20) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1}) read$msr(r5, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000200), 0x1058, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000380)=0xffffffffffffffff) r8 = syz_open_dev$radio(&(0x7f00000003c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000400)={0xf010000, 0x0, 0x0, r7, 0x0, 0x0}) 18m18.951871739s ago: executing program 6 (id=1623): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x4010, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000019300)=0x5, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8994, 0x0) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f00000001c0)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='ap', 0x2) 18m10.720873875s ago: executing program 7 (id=1635): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) write$usbip_server(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000030000000192792b760a361c7744e7dbba4c0e0b09cd463edae2c7c022deecd1defebb882d11e15a9b6dcb829dd5054ffc1a6283798e14ecdda27aab28a464656c318cc08af1637f2991200baad7d33efbc81d68e70150d12c34e13a12ed853330dbf7ad63cc7c3f838348ee4fbee3d8966b984aef"], 0x35) 18m5.876478927s ago: executing program 7 (id=1639): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000015c0)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001600)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001640)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000016c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001740), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000017c0)=0x6) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)) getdents(r5, &(0x7f0000000480)=""/4085, 0xff5) 18m3.823909095s ago: executing program 36 (id=1623): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x4010, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000019300)=0x5, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8994, 0x0) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f00000001c0)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='ap', 0x2) 18m3.790077779s ago: executing program 7 (id=1643): socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001600)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001640)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001680)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000016c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001700), 0x0, 0x0) read$msr(r2, &(0x7f0000001740)=""/102392, 0x18ff8) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r3, &(0x7f0000000040)=""/43, 0xfd8a, 0x3c) 18m2.873514052s ago: executing program 7 (id=1644): syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x2840) r0 = syz_usb_connect(0x3, 0x54, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002e0010140120a01000000010203010902360002010080000904000003e00101000705810310000107050202000200070582020002"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000480), 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000004c0), 0x88802) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x68, &(0x7f0000000400)=ANY=[]) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 17m59.682549766s ago: executing program 7 (id=1648): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x6) syz_open_dev$video4linux(0x0, 0xff, 0x100082) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap(&(0x7f0000518000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x3a28d000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102368, 0x18fe0) gettid() timer_create(0x0, 0x0, &(0x7f0000019180)=0x0) timer_settime(r4, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000019200)=0x407) syz_open_dev$sndpcmp(&(0x7f0000019240), 0x0, 0x14b000) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000019280)={0x0, 0x0, &(0x7f00000192c0)={&(0x7f0000019300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r5 = openat(0xffffffffffffff9c, &(0x7f0000019340)='.\x00', 0x0, 0x0) fchown(r5, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000019380)='.\x00', 0xffffffd3) capset(0x0, &(0x7f0000019400)={0x0, 0x0, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000019440)='./file1\x00', 0x14e174135c0b86de) 17m51.299143057s ago: executing program 7 (id=1652): syz_usbip_server_init(0x5) socket(0xa, 0x2, 0x7f7f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) io_uring_setup(0x4dec, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000193c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019480)={0xe, 0x4, &(0x7f0000019540)=ANY=[], &(0x7f0000019580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sched_setscheduler(r0, 0x2, &(0x7f00000195c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019640)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000196c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000019700), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = getpgrp(0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) sched_setaffinity(r3, 0x0, 0x0) 17m35.486570443s ago: executing program 37 (id=1652): syz_usbip_server_init(0x5) socket(0xa, 0x2, 0x7f7f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) io_uring_setup(0x4dec, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000193c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019480)={0xe, 0x4, &(0x7f0000019540)=ANY=[], &(0x7f0000019580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sched_setscheduler(r0, 0x2, &(0x7f00000195c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019640)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000196c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000019700), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = getpgrp(0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) sched_setaffinity(r3, 0x0, 0x0) 12m52.807024029s ago: executing program 1 (id=2070): r0 = syz_usb_connect(0x3, 0x54, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002e0010140120a01000000010203010902360002010080000904000003e00101000705810310000107050202000200070582"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x68, &(0x7f0000000400)=ANY=[]) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 12m47.864170051s ago: executing program 1 (id=2077): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000195c0)={0x11, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r0}, 0xc) 12m47.346052873s ago: executing program 1 (id=2079): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28041, 0x0) write$dsp(r0, &(0x7f0000000040)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 12m46.20270686s ago: executing program 1 (id=2083): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x90}}, 0x0) syz_io_uring_setup(0xfff, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000000a40)=""/102392, 0x18ff8) symlinkat(&(0x7f0000019a40)='.\x00', 0xffffffffffffff9c, &(0x7f0000019a80)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000019ac0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000019b00)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000019b40)='./bus\x00', &(0x7f0000019b80), 0x0, &(0x7f0000019bc0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000019c00)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000019c40)='./file7\x00', 0x1ac) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x56}, 0x28) 12m44.743422318s ago: executing program 1 (id=2085): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x749}) r1 = epoll_create1(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0xfffffed5, 0x26006850) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f00000002c0)=""/102368, 0x18fe0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000192c0)={0x140000008}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r0, &(0x7f0000019340)=[{&(0x7f0000019380)=""/163, 0xa3}], 0x1) 12m36.021832383s ago: executing program 1 (id=2097): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain=0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain=0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000004600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004680)={&(0x7f00000046c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000004740)={&(0x7f0000004780)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 12m4.111328055s ago: executing program 3 (id=2140): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x80008100, 0x0, 0xff28, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r0, &(0x7f0000000740)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none, 0x1}, 0x8) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000080)) 12m2.346644834s ago: executing program 8 (id=2141): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x90}}, 0x0) syz_io_uring_setup(0xfff, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000000a40)=""/102392, 0x18ff8) symlinkat(&(0x7f0000019a40)='.\x00', 0xffffffffffffff9c, &(0x7f0000019a80)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000019ac0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000019b00)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000019b40)='./bus\x00', &(0x7f0000019b80), 0x0, &(0x7f0000019bc0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000019c00)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000019c40)='./file7\x00', 0x1ac) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003"], 0x0, 0x56}, 0x28) 12m1.080576382s ago: executing program 8 (id=2142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640", @ANYRESHEX], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x30044803}, 0x20000040) 12m1.027099038s ago: executing program 3 (id=2143): syz_emit_ethernet(0x60, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) 11m53.086478954s ago: executing program 3 (id=2149): r0 = socket$netlink(0x10, 0x3, 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000700)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r3, &(0x7f0000002080)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000001b080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000400)={'bridge0\x00', 0x60000000}) syz_open_dev$audion(&(0x7f00000000c0), 0x3, 0x101400) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 11m50.636578133s ago: executing program 3 (id=2150): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000004440)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004480)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000045c0)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000004600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004680)={&(0x7f00000046c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000004740)={&(0x7f0000004780)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 11m45.661185949s ago: executing program 39 (id=2142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640", @ANYRESHEX], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x30044803}, 0x20000040) 11m34.610168831s ago: executing program 40 (id=2150): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000004440)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004480)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000045c0)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000004600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004680)={&(0x7f00000046c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000004740)={&(0x7f0000004780)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 41.476880667s ago: executing program 2 (id=3287): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000019280), 0x4) sendmsg$kcm(r0, &(0x7f00000192c0)={&(0x7f000001dc40)=@phonet={0x23, 0x0, 0x0, 0x3f}, 0x80, &(0x7f0000019380)}, 0x0) r1 = getpgrp(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000191c0)={0x0, 0x0, &(0x7f0000019200)={&(0x7f0000019240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8004) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) r4 = open(&(0x7f0000019180)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f000001d740)={{0x8, 0x5, 0x5, 0xffffffff, 'syz0\x00', 0x1}, 0x1, [0xc2a8, 0x7, 0x0, 0x81, 0x5d60b543, 0x80, 0x8, 0x10000, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x8, 0x8, 0x5, 0x4, 0x8, 0x1, 0xde, 0xc, 0x8, 0x2ca2, 0x8000, 0x9, 0x81, 0x4, 0x8, 0x3, 0x80, 0x7fff, 0x3, 0x7fff, 0x1, 0x5, 0x3, 0x6, 0x33, 0x4, 0x401, 0x7, 0x6, 0x8000000000000000, 0x4, 0x7, 0x7, 0x3, 0x9, 0x401, 0xff, 0xa, 0xedf, 0x5, 0x3, 0x8b8, 0x8001, 0xd6, 0x8, 0x8000000000000001, 0x1, 0x5, 0x0, 0x6, 0x7, 0x5, 0x1, 0x7, 0x2, 0x10000, 0x8, 0x20, 0x4, 0x1, 0x8, 0x10001, 0x7f, 0x100, 0x3ff, 0xc, 0x9, 0xed1, 0xb, 0x4, 0x6, 0x0, 0x5, 0x3, 0xfffffffffffffff7, 0x2, 0x9, 0x1, 0xc, 0x6bcc035b, 0x8, 0x3, 0x0, 0xfff, 0x9, 0xbde, 0x4, 0xc, 0xdb9, 0x981, 0x5, 0xc, 0x5, 0x8000000000000000, 0x8, 0xffffffffffffff01, 0x9, 0x5, 0xe65c, 0x100000000, 0x6, 0x6, 0x7, 0xf, 0x8000, 0x947, 0x7, 0x1, 0xe56f, 0x645, 0x9, 0x0, 0x5, 0x80000001, 0x7a6, 0x5]}) fcntl$notify(r4, 0x402, 0x80000024) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x6, 0x3ff}) sendmmsg$inet(r5, &(0x7f0000000000), 0x2, 0x0) 39.764730901s ago: executing program 2 (id=3292): clock_gettime(0x7, &(0x7f00000009c0)) syz_open_dev$video(&(0x7f0000000000), 0xa7, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0x3) mq_open(0x0, 0x8c2, 0x30, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000480), 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)}}], 0x1, 0x2400c890) mkdir(&(0x7f0000000600)='./file2\x00', 0x1ff) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mount(&(0x7f0000000800)=@filename='127.0.0.1:/\x00', &(0x7f0000000900)='./file2\x00', &(0x7f0000000940)='nfs\x00', 0x0, &(0x7f0000000980)='addr=127.0.0.1,vers=3,proto=udp\x00') mkdir(&(0x7f0000000a00)='./file4\x00', 0x1ff) getsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000a40)=""/4096, &(0x7f0000001a40)=0x1000) mount(0x0, &(0x7f0000001a80)='./file4\x00', &(0x7f0000001ac0)='rpc_pipefs\x00', 0x0, 0x0) io_setup(0x6, &(0x7f00000000c0)) 36.759954086s ago: executing program 9 (id=3299): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket(0x2, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000780), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000007c0), 0x2, 0x141102) writev(r3, &(0x7f0000000800)=[{&(0x7f0000000840)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f00000008c0)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2, 0x0, @multicast2}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x5, 0x200, 0x3, 0xfffffff7, 0x3c27, 0x3, 0x3}}], 0x30, 0x40}, 0x63287280381f4dcf) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20842, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x24004001) r6 = getpid() prlimit64(r6, 0x7, &(0x7f0000000140)={0x6, 0x4}, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000006c0), 0x8) 30.752827866s ago: executing program 9 (id=3303): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000019280), 0x4) sendmsg$kcm(r0, &(0x7f00000192c0)={&(0x7f000001dc40)=@phonet={0x23, 0x0, 0x0, 0x3f}, 0x80, &(0x7f0000019380)}, 0x0) r1 = getpgrp(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000191c0)={0x0, 0x0, &(0x7f0000019200)={&(0x7f0000019240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8004) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) r4 = open(&(0x7f0000019180)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f000001d740)={{0x8, 0x5, 0x5, 0xffffffff, 'syz0\x00', 0x1}, 0x1, [0xc2a8, 0x7, 0x0, 0x81, 0x5d60b543, 0x80, 0x8, 0x10000, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x8, 0x8, 0x5, 0x4, 0x8, 0x1, 0xde, 0xc, 0x8, 0x2ca2, 0x8000, 0x9, 0x81, 0x4, 0x8, 0x3, 0x80, 0x7fff, 0x3, 0x7fff, 0x1, 0x5, 0x3, 0x6, 0x33, 0x4, 0x401, 0x7, 0x6, 0x8000000000000000, 0x4, 0x7, 0x7, 0x3, 0x9, 0x401, 0xff, 0xa, 0xedf, 0x5, 0x3, 0x8b8, 0x8001, 0xd6, 0x8, 0x8000000000000001, 0x1, 0x5, 0x0, 0x6, 0x7, 0x5, 0x1, 0x7, 0x2, 0x10000, 0x8, 0x20, 0x4, 0x1, 0x8, 0x10001, 0x7f, 0x100, 0x3ff, 0xc, 0x9, 0xed1, 0xb, 0x4, 0x6, 0x0, 0x5, 0x3, 0xfffffffffffffff7, 0x2, 0x9, 0x1, 0xc, 0x6bcc035b, 0x8, 0x3, 0x0, 0xfff, 0x9, 0xbde, 0x4, 0xc, 0xdb9, 0x981, 0x5, 0xc, 0x5, 0x8000000000000000, 0x8, 0xffffffffffffff01, 0x9, 0x5, 0xe65c, 0x100000000, 0x6, 0x6, 0x7, 0xf, 0x8000, 0x947, 0x7, 0x1, 0xe56f, 0x645, 0x9, 0x0, 0x5, 0x80000001, 0x7a6, 0x5]}) fcntl$notify(r4, 0x402, 0x80000024) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x6, 0x3ff}) sendmmsg$inet(r5, &(0x7f0000000000), 0x2, 0x0) 29.522966891s ago: executing program 9 (id=3304): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000019280), 0x4) sendmsg$kcm(r0, &(0x7f00000192c0)={&(0x7f000001dc40)=@phonet={0x23, 0x0, 0x0, 0x3f}, 0x80, &(0x7f0000019380)}, 0x0) r1 = getpgrp(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000191c0)={0x0, 0x0, &(0x7f0000019200)={&(0x7f0000019240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8004) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) r4 = open(&(0x7f0000019180)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f000001d740)={{0x8, 0x5, 0x5, 0xffffffff, 'syz0\x00', 0x1}, 0x1, [0xc2a8, 0x7, 0x0, 0x81, 0x5d60b543, 0x80, 0x8, 0x10000, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x8, 0x8, 0x5, 0x4, 0x8, 0x1, 0xde, 0xc, 0x8, 0x2ca2, 0x8000, 0x9, 0x81, 0x4, 0x8, 0x3, 0x80, 0x7fff, 0x3, 0x7fff, 0x1, 0x5, 0x3, 0x6, 0x33, 0x4, 0x401, 0x7, 0x6, 0x8000000000000000, 0x4, 0x7, 0x7, 0x3, 0x9, 0x401, 0xff, 0xa, 0xedf, 0x5, 0x3, 0x8b8, 0x8001, 0xd6, 0x8, 0x8000000000000001, 0x1, 0x5, 0x0, 0x6, 0x7, 0x5, 0x1, 0x7, 0x2, 0x10000, 0x8, 0x20, 0x4, 0x1, 0x8, 0x10001, 0x7f, 0x100, 0x3ff, 0xc, 0x9, 0xed1, 0xb, 0x4, 0x6, 0x0, 0x5, 0x3, 0xfffffffffffffff7, 0x2, 0x9, 0x1, 0xc, 0x6bcc035b, 0x8, 0x3, 0x0, 0xfff, 0x9, 0xbde, 0x4, 0xc, 0xdb9, 0x981, 0x5, 0xc, 0x5, 0x8000000000000000, 0x8, 0xffffffffffffff01, 0x9, 0x5, 0xe65c, 0x100000000, 0x6, 0x6, 0x7, 0xf, 0x8000, 0x947, 0x7, 0x1, 0xe56f, 0x645, 0x9, 0x0, 0x5, 0x80000001, 0x7a6, 0x5]}) fcntl$notify(r4, 0x402, 0x80000024) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x6, 0x3ff}) sendmmsg$inet(r5, &(0x7f0000000000), 0x2, 0x0) 27.800576106s ago: executing program 2 (id=3309): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, &(0x7f0000000840)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0xc240, 0x0) getpgid(0x0) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000680)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r6 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r6, r6, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), 0x0) syz_usb_connect$midi(0x0, 0x38, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) userfaultfd(0x80001) 22.571682177s ago: executing program 9 (id=3314): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000019280), 0x4) sendmsg$kcm(r0, &(0x7f00000192c0)={&(0x7f000001dc40)=@phonet={0x23, 0x0, 0x0, 0x3f}, 0x80, &(0x7f0000019380)}, 0x0) r1 = getpgrp(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000191c0)={0x0, 0x0, &(0x7f0000019200)={&(0x7f0000019240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8004) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/102392, 0x18ff8) r4 = open(&(0x7f0000019180)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f000001d740)={{0x8, 0x5, 0x5, 0xffffffff, 'syz0\x00', 0x1}, 0x1, [0xc2a8, 0x7, 0x0, 0x81, 0x5d60b543, 0x80, 0x8, 0x10000, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x8, 0x8, 0x5, 0x4, 0x8, 0x1, 0xde, 0xc, 0x8, 0x2ca2, 0x8000, 0x9, 0x81, 0x4, 0x8, 0x3, 0x80, 0x7fff, 0x3, 0x7fff, 0x1, 0x5, 0x3, 0x6, 0x33, 0x4, 0x401, 0x7, 0x6, 0x8000000000000000, 0x4, 0x7, 0x7, 0x3, 0x9, 0x401, 0xff, 0xa, 0xedf, 0x5, 0x3, 0x8b8, 0x8001, 0xd6, 0x8, 0x8000000000000001, 0x1, 0x5, 0x0, 0x6, 0x7, 0x5, 0x1, 0x7, 0x2, 0x10000, 0x8, 0x20, 0x4, 0x1, 0x8, 0x10001, 0x7f, 0x100, 0x3ff, 0xc, 0x9, 0xed1, 0xb, 0x4, 0x6, 0x0, 0x5, 0x3, 0xfffffffffffffff7, 0x2, 0x9, 0x1, 0xc, 0x6bcc035b, 0x8, 0x3, 0x0, 0xfff, 0x9, 0xbde, 0x4, 0xc, 0xdb9, 0x981, 0x5, 0xc, 0x5, 0x8000000000000000, 0x8, 0xffffffffffffff01, 0x9, 0x5, 0xe65c, 0x100000000, 0x6, 0x6, 0x7, 0xf, 0x8000, 0x947, 0x7, 0x1, 0xe56f, 0x645, 0x9, 0x0, 0x5, 0x80000001, 0x7a6, 0x5]}) fcntl$notify(r4, 0x402, 0x80000024) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x6, 0x3ff}) sendmmsg$inet(r5, &(0x7f0000000000), 0x2, 0x0) 21.797918736s ago: executing program 2 (id=3317): syz_mount_image$squashfs(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x0, &(0x7f0000000e00), 0x1, 0x175, &(0x7f0000000fc0)="$eJzskj9OAkEUxr9Zlj9aGE2saCCRKBbKsqgxNlpi7wEksCJxUWE3UQjFGmMoLIylJ+AaJl5AC+MBqCmItVkzs28ns17B+RV8+755b2beG869npcF8DMfNXEEQQpL+GAMJoACi7yZEekz6SfpUyR4p7xj8u9J895geNFwXadfPChiJWEA+BaetLzDOwMzsdXXfNTkH6cAwjAMudcCeDrUnBSAnpKTN4FV0UQoc3gjPNgAUPG71xVvMNzqdBttp+1c2nZtz9qxrF27ctZxHSv6ZcoR1Aq4bgLg81pQ1tMAHihnEUmYcjVaZ2ptRplheS1Zayi1sTK8ytos4vcCTrCOHICbgCluSexiQrRUB0OKgqqp3C86KycWtptXbmsMBhaXTWDKPapTpGVgq0FtP4ivPSYtkdZJJ6RT0sKfv4wp3vaRonIAZHDb8P1+lQ8p+pKeLT17OVAHxk99MZLNvRnQaDQajUaj0Wg0mv/ObwAAAP///ip6PA==") getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x5, 0x84) add_key$fscrypt_provisioning(&(0x7f0000000440), 0x0, &(0x7f0000000480)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r2, 0x200, 0x95ef5ff63994adf3}, &(0x7f0000000400)=0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r3, 0x0, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/profiling', 0x1c3001, 0x11) write$tcp_mem(r5, &(0x7f0000000700)={0x17, 0x2d, 0x5, 0x3a, 0x73be, 0x2c}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) syz_mount_image$omfs(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x400000, &(0x7f0000000840)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000000,uid=', @ANYRESHEX=0x0, @ANYRES8=0x0], 0xfd, 0x9e34, &(0x7f0000001140)="$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") close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000af80)) openat$sequencer2(0xffffffffffffff9c, &(0x7f000000afc0), 0x902, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x4, &(0x7f000000b000)=0x1, 0x4) 19.435164566s ago: executing program 2 (id=3324): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000019280), 0x4) sendmsg$kcm(r0, &(0x7f00000192c0)={&(0x7f000001dc40)=@phonet={0x23, 0x0, 0x0, 0x3f}, 0x80, &(0x7f0000019380)}, 0x0) r1 = getpgrp(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000191c0)={0x0, 0x0, &(0x7f0000019200)={&(0x7f0000019240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8004) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) r4 = open(&(0x7f0000019180)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f000001d740)={{0x8, 0x5, 0x5, 0xffffffff, 'syz0\x00', 0x1}, 0x1, [0xc2a8, 0x7, 0x0, 0x81, 0x5d60b543, 0x80, 0x8, 0x10000, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x8, 0x8, 0x5, 0x4, 0x8, 0x1, 0xde, 0xc, 0x8, 0x2ca2, 0x8000, 0x9, 0x81, 0x4, 0x8, 0x3, 0x80, 0x7fff, 0x3, 0x7fff, 0x1, 0x5, 0x3, 0x6, 0x33, 0x4, 0x401, 0x7, 0x6, 0x8000000000000000, 0x4, 0x7, 0x7, 0x3, 0x9, 0x401, 0xff, 0xa, 0xedf, 0x5, 0x3, 0x8b8, 0x8001, 0xd6, 0x8, 0x8000000000000001, 0x1, 0x5, 0x0, 0x6, 0x7, 0x5, 0x1, 0x7, 0x2, 0x10000, 0x8, 0x20, 0x4, 0x1, 0x8, 0x10001, 0x7f, 0x100, 0x3ff, 0xc, 0x9, 0xed1, 0xb, 0x4, 0x6, 0x0, 0x5, 0x3, 0xfffffffffffffff7, 0x2, 0x9, 0x1, 0xc, 0x6bcc035b, 0x8, 0x3, 0x0, 0xfff, 0x9, 0xbde, 0x4, 0xc, 0xdb9, 0x981, 0x5, 0xc, 0x5, 0x8000000000000000, 0x8, 0xffffffffffffff01, 0x9, 0x5, 0xe65c, 0x100000000, 0x6, 0x6, 0x7, 0xf, 0x8000, 0x947, 0x7, 0x1, 0xe56f, 0x645, 0x9, 0x0, 0x5, 0x80000001, 0x7a6, 0x5]}) fcntl$notify(r4, 0x402, 0x80000024) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x6, 0x3ff}) sendmmsg$inet(r5, &(0x7f0000000000), 0x2, 0x0) 18.292548982s ago: executing program 2 (id=3325): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000406d042bc500240102000109022200010100a0320904000001030000000921110100012215000705810340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000340), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000380)=' ') close(0xffffffffffffffff) 18.291584342s ago: executing program 4 (id=3326): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000380)) close(0x3) r3 = fsopen(&(0x7f00000003c0)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000440)='[:ew0\xccp\xee', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000480)='::0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r0, 0x80047437, 0x10004000000006) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x100000001, 0x0, 0x6, 0x1e, 0xc, "619419c409610ee156c514e9078ffe42322e77609997f7e8fcbad910eb7f5ecc681ebc680ead067ca6004d5e3937286251f398212536f37fe48c74775451f763", "07f20a990e64b26d314436f6fc559a618594ca9fa438bdaf00e192eb7a06ce71180473cb9ab1cb4f2ddb1fd592e307645b58576a04a3445ae26027abb68c38b5", "43a7089f299f6a75de91531795cdeb5a9116b4a756147d1590834d8cd6282968", [0x589f, 0x3]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac0000001800dd8d0310000000000000022000000000fa700693156535d3150001000000880016808400010001000000000000003a0e040707506100ff02000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000aafe88000000000000000000000000010100000000000000000000ffff7f000001fc000000000000000000000000000001fe8000000000000000000000000000aa"], 0xac}}, 0x0) 16.329759061s ago: executing program 4 (id=3329): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x2581) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80005520, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='rt1719 0x4', 0xa) 13.610710097s ago: executing program 4 (id=3332): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 13.435043555s ago: executing program 0 (id=3334): clock_gettime(0x7, &(0x7f00000009c0)) syz_open_dev$video(&(0x7f0000000000), 0xa7, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0x3) mq_open(0x0, 0x8c2, 0x30, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000480), 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)}}], 0x1, 0x2400c890) mkdir(&(0x7f0000000600)='./file2\x00', 0x1ff) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mount(&(0x7f0000000800)=@filename='127.0.0.1:/\x00', &(0x7f0000000900)='./file2\x00', &(0x7f0000000940)='nfs\x00', 0x0, &(0x7f0000000980)='addr=127.0.0.1,vers=3,proto=udp\x00') mkdir(&(0x7f0000000a00)='./file4\x00', 0x1ff) getsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000a40)=""/4096, &(0x7f0000001a40)=0x1000) mount(0x0, &(0x7f0000001a80)='./file4\x00', &(0x7f0000001ac0)='rpc_pipefs\x00', 0x0, 0x0) io_setup(0x6, &(0x7f00000000c0)) 12.320666858s ago: executing program 9 (id=3335): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x2581) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80005520, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000300)='rt1719 0x4', 0xa) 12.30216939s ago: executing program 4 (id=3336): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000019280), 0x4) sendmsg$kcm(r0, &(0x7f00000192c0)={&(0x7f000001dc40)=@phonet={0x23, 0x0, 0x0, 0x3f}, 0x80, &(0x7f0000019380)}, 0x0) r1 = getpgrp(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000191c0)={0x0, 0x0, &(0x7f0000019200)={&(0x7f0000019240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8004) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/102392, 0x18ff8) r4 = open(&(0x7f0000019180)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f000001d740)={{0x8, 0x5, 0x5, 0xffffffff, 'syz0\x00', 0x1}, 0x1, [0xc2a8, 0x7, 0x0, 0x81, 0x5d60b543, 0x80, 0x8, 0x10000, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x8, 0x8, 0x5, 0x4, 0x8, 0x1, 0xde, 0xc, 0x8, 0x2ca2, 0x8000, 0x9, 0x81, 0x4, 0x8, 0x3, 0x80, 0x7fff, 0x3, 0x7fff, 0x1, 0x5, 0x3, 0x6, 0x33, 0x4, 0x401, 0x7, 0x6, 0x8000000000000000, 0x4, 0x7, 0x7, 0x3, 0x9, 0x401, 0xff, 0xa, 0xedf, 0x5, 0x3, 0x8b8, 0x8001, 0xd6, 0x8, 0x8000000000000001, 0x1, 0x5, 0x0, 0x6, 0x7, 0x5, 0x1, 0x7, 0x2, 0x10000, 0x8, 0x20, 0x4, 0x1, 0x8, 0x10001, 0x7f, 0x100, 0x3ff, 0xc, 0x9, 0xed1, 0xb, 0x4, 0x6, 0x0, 0x5, 0x3, 0xfffffffffffffff7, 0x2, 0x9, 0x1, 0xc, 0x6bcc035b, 0x8, 0x3, 0x0, 0xfff, 0x9, 0xbde, 0x4, 0xc, 0xdb9, 0x981, 0x5, 0xc, 0x5, 0x8000000000000000, 0x8, 0xffffffffffffff01, 0x9, 0x5, 0xe65c, 0x100000000, 0x6, 0x6, 0x7, 0xf, 0x8000, 0x947, 0x7, 0x1, 0xe56f, 0x645, 0x9, 0x0, 0x5, 0x80000001, 0x7a6, 0x5]}) fcntl$notify(r4, 0x402, 0x80000024) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x6, 0x3ff}) sendmmsg$inet(r5, &(0x7f0000000000), 0x2, 0x0) 11.728754269s ago: executing program 5 (id=3337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x10000007) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f0000000180)="ab", 0xfffd, 0xc1, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) readv(r3, &(0x7f0000000280)=[{&(0x7f0000001b40)=""/4096, 0x1000}], 0x1) 10.675045605s ago: executing program 4 (id=3338): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x1, 0x110, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f000000a000), 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bind$bt_hci(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000003c0), 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0xc0802, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000440)=0x6100204) r7 = epoll_create(0xa67) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000480)={0x10000000}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0x10) socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040}, 0x80) write(r1, &(0x7f000000a040)='dir ./f', 0x7) write(r1, &(0x7f000000a080)='bin', 0x3) 10.493389974s ago: executing program 0 (id=3339): socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000001940)=@hci, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001a00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000001b00)={0x8, 0x80000100008b}, 0x0) lstat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001b80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001bc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000001c00), 0x0, 0x0) read$msr(r4, &(0x7f0000001c40)=""/102392, 0x18ff8) sendmsg$tipc(r1, &(0x7f000001ac40)={0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x161d) 8.36314271s ago: executing program 5 (id=3340): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket(0x2, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000780), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000007c0), 0x2, 0x141102) writev(r3, &(0x7f0000000800)=[{&(0x7f0000000840)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f00000008c0)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2, 0x0, @multicast2}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x5, 0x200, 0x3, 0xfffffff7, 0x3c27, 0x3, 0x3}}], 0x30, 0x40}, 0x63287280381f4dcf) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20842, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x24004001) r6 = getpid() prlimit64(r6, 0x7, &(0x7f0000000140)={0x6, 0x4}, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000006c0), 0x8) 8.031477234s ago: executing program 0 (id=3341): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000380)) close(0x3) r3 = fsopen(&(0x7f00000003c0)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000440)='[:ew0\xccp\xee', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000480)='::0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r0, 0x80047437, 0x10004000000006) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x100000001, 0x0, 0x6, 0x1e, 0xc, "619419c409610ee156c514e9078ffe42322e77609997f7e8fcbad910eb7f5ecc681ebc680ead067ca6004d5e3937286251f398212536f37fe48c74775451f763", "07f20a990e64b26d314436f6fc559a618594ca9fa438bdaf00e192eb7a06ce71180473cb9ab1cb4f2ddb1fd592e307645b58576a04a3445ae26027abb68c38b5", "43a7089f299f6a75de91531795cdeb5a9116b4a756147d1590834d8cd6282968", [0x589f, 0x3]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac0000001800dd8d0310000000000000022000000000fa700693156535d3150001000000880016808400010001000000000000003a0e040707506100ff02000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000aafe88000000000000000000000000010100000000000000000000ffff7f000001fc000000000000000000000000000001fe8000000000000000000000000000aa"], 0xac}}, 0x0) 6.160706274s ago: executing program 0 (id=3342): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, &(0x7f0000000840)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0xc240, 0x0) getpgid(0x0) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000680)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r6 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r6, r6, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), 0x0) syz_usb_connect$midi(0x0, 0x38, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) userfaultfd(0x80001) 5.891337001s ago: executing program 5 (id=3343): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002940)=0x6) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a40)=@newtaction={0x54, 0x30, 0x51b, 0x70bd2b, 0x0, {}, [{0x40, 0x1, [@m_skbmod={0x3c, 0x2, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x54}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001f00)={0x0, 0x4, @start={0x0, 0x0, "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", "6755b493cd7056302eb95690044cb45f35f8ff90d44d388f33acd4bc383209dadfa9c5758fa5d401fa6735ff1e9dce666e96918dfbb04b3c48619c443c0e2427fe3ecc71da93fbb56f0fc77b1909db694b5e84d5dc5907df32d9c49115668359b3233bda4cad4f42a8e6c8ca21b0b11ecceaf264d0c0714f93e8893f0ce7c5864d73f5305e395afc247b51ce50ebd882726655f5f902c3798a8dc496663bd42297cad1ab5013f7bf32088187320603aa6ca4cb6d5049f772b35e04eb692d94a0e8d46be0cf9d8be5233b296c12c3e93aedf60cd99eb7d0723fa1c9d0087868dcc760849d587d7059523487c21efcd229f662c820e83e7cd1be8d1d8ce1e4c4d80342a79cec61d33a9c78a208972e0e17f7dbf5085a2c40ee9ae587e8eaeabf0dfc1fc88b8bea9c44142317a39856e518e86c1a818cedc358fa9671ff92ea1096a43e8f019d43ba99b9bb261701064d9bf7d2f6a577b6d7411f50c534251b4f74042a7a6579042b94a45e34aacebcd6a8ebcd3996df0e18fdeeaab216d060bf62d8d95b5a14fba43f441b3b029323b720ef74d4e40961c2b5fef8e74d5258be4921ee4e25a73a8bfa198c201c62a31a493dc7281cff24c784bdb65b5ed82c5c24dde4de00c56a363e4853d638d6bedf5408d85b883a660343657c2096b50b8be41c75eb6fde1a33af10b570150ee3805457a6361e32ec3b6e449143876c1200c54f23b02ab0e0056f60d611df61313a53e0224b27d1fa7117f0d60488db5851dff32ef0daee48cfe5c2f4654bcd963516e6428e7b94b7f8f409d4ff6d0c61f1a6873a1fa5c51f76b4bc79ca5155b66810b9ee3fc51ce9fef662e557d1a2dd3ab5f1ac66c415cde705fb76e0ca81d97b856d04ba4eb2b1935e41781a6cdcd797b552b043c83bb310126423a9d0b39fc72ef96967570a5f37eda0e15f7710b84bb55ebce6af77041732c4c67400562ec209a8a6c32b7faf1abdd4de1d3582e6fdce6d78a175ca4f66706a85817d0e8a4a280fcf49aec037bac926d193e3209c442cc8fe08b9c2946327bfb74b70828e8dfd4b716be471a194bd3dd54cd750e205171f285186312aac6e76c619768e6fbc6c6a1a900173a852b9cd64c17b0df5d223274c021bc45cdf94521942164bc4933fd5ff088f92beba0e868bc46ec33673fc776adfe6f805114b2890961d69de8ae8094f5a08e341f13542d905ac361a8e6c53608a2c27ef239b6e05eeef00b0f53190e7b4c1f056bc81eb825fcab541e678a4358f46394ef6a881591cb3c3c2f07f216c32cfb6ff0b0aa9d6233bbbc4356c6c886b059ac5f8f1a8c7f8607e5e53438855615e664f4637828afa991ca5a3c733220b3d2faa44be1c0888ecf1588ee89ba60f8083e24c541a1d9b52decdec23026a2a5daa6576fee461d32706d8bc34a19ce2111a844a6120a6049ec940d7afeb"}, [0xfff, 0x6c3, 0x9, 0x7ff, 0xfffffffffffffffd, 0x8, 0x7, 0xb, 0xffffffffffffffff, 0x10004, 0x9, 0x6, 0x7, 0x80000001, 0x0, 0x8, 0x3, 0x2, 0xfff, 0xfffffffffffffe00, 0x9, 0xcbe1, 0x9, 0x80000, 0x4, 0xa, 0x6, 0x9, 0x398a0ea0, 0x7, 0x1, 0xf72f, 0xffff, 0x6, 0x7, 0x11, 0x7, 0x80000001, 0x1, 0xfbfb, 0x1, 0x6, 0x3, 0xffffffffffffd0ed, 0x100, 0x7, 0xffc, 0x7, 0x10000, 0x8000000000000001, 0x1, 0xe10, 0x1e, 0x9, 0x7fffffff, 0x5, 0x8001, 0x8, 0x3, 0x655, 0xfd9, 0x2, 0x7, 0x4]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) write$UHID_CREATE2(r4, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x12e) fsopen(0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 4.840197968s ago: executing program 5 (id=3344): r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000680)={0xa0002018}) 4.454536657s ago: executing program 5 (id=3345): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1, &(0x7f00000003c0)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) bind(r1, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, {0xa, 0x4e22, 0x10000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}}}, 0x80) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x3b9b4aedd61a3686, 0x0) write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d9", 0x4b) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x4382, 0x4) 1.96401762s ago: executing program 41 (id=3325): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000406d042bc500240102000109022200010100a0320904000001030000000921110100012215000705810340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000340), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000380)=' ') close(0xffffffffffffffff) 1.540265923s ago: executing program 0 (id=3347): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f000001ad40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f000001aec0), 0x4) sendmsg$inet(r2, &(0x7f000001af00)={0x0, 0x0, 0x0}, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000780)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019780)=0x410000002) r4 = syz_io_uring_setup(0x254a, &(0x7f00000197c0)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f0000019840), &(0x7f0000019880), &(0x7f00000198c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000019900)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x6, &(0x7f0000019940)={0x0, 0x0, &(0x7f0000019980), 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_FP_MODE(0x42, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f000001ad00)={&(0x7f0000000380)={0xa, 0x4e24, 0xbbcc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x52}, 0x1c, &(0x7f0000019980)=[{&(0x7f00000003c0)="d504807f0a8d385c472494c4e1da78380bdb4457807405913c45dfb66663ee2c9650b071ca5314a9b0f0d60c175ebba46a5fdc59dd45ac890a0de72de130716476da7f9fa2d3e93b76ed6d7eceb418cb15cd30bd92fb42b6feaace0dec48c9f578f54e05b20ec808ffcdc47cc7db63c39a22e4cd", 0x74}, {&(0x7f0000000440)="e8b75dcc23e68237732879d55fc072add7fad25eb9bb8e7f43251d87c8d68526ec0fe4c1b49317f08e005b22430b56f46faf1265194d7c53397cb4ca5485fe0e8531ce7e07babf357565292dfdf5a8da987960d8e8417a9f4730aa40a33155f849310ab5b61da29114ed284abae9386c754cc9f612081b77f9b47f46d2e8e81e4802d9ca6a2d70977b44a0a5e7be3629ac6a241d3f0eafc931aa9d32a45be3aca77f2779a2858f0ddd79ff6b0e6760586201d59e6a73a6950855c0ee0ac5904ecb58818fbd", 0xc5}, {&(0x7f0000000540)="5c204cda0bf2d52510", 0x9}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="05db8b2d40e058fc2f9e0071a5cf14c911be", 0x12}], 0x5, &(0x7f0000019a00)=[@hopopts={{0x48, 0x29, 0x36, {0x21, 0x5, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x20, {0x3, 0x6, 0x6, 0x5, [0x7fff, 0x1, 0x7fff]}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x25, 0x9, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x9, 0x8000, [0x9, 0x1, 0x1e]}}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3c}}}, @dstopts={{0xd8, 0x29, 0x37, {0x67, 0x17, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @generic={0x0, 0x6e, "1736e7858a5463bab9542ea2385c58fb40e101305b3c3d59998ecb3065aa31fe0fbaace0164307f91d25178a73d34c58e5fd24ee9727511b33908c1c88598c1918bdff79c4408e247c769f72a53c6952c126374a0be18d5ae8c38214bc6ffc2067d8b86747d4330b47a848cb6cfe"}, @enc_lim={0x4, 0x1, 0xa}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9, 0x0, [0x8, 0xc000, 0x0]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x5, 0x9, [0x3]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @rthdr={{0x68, 0x29, 0x39, {0x33, 0xa, 0x2, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, @rand_addr=' \x01\x00']}}}], 0x220}, 0x24044080) 683.45107ms ago: executing program 5 (id=3348): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000019280), 0x4) sendmsg$kcm(r0, &(0x7f00000192c0)={&(0x7f000001dc40)=@phonet={0x23, 0x0, 0x0, 0x3f}, 0x80, &(0x7f0000019380)}, 0x0) r1 = getpgrp(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000191c0)={0x0, 0x0, &(0x7f0000019200)={&(0x7f0000019240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8004) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/102392, 0x18ff8) r4 = open(&(0x7f0000019180)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f000001d740)={{0x8, 0x5, 0x5, 0xffffffff, 'syz0\x00', 0x1}, 0x1, [0xc2a8, 0x7, 0x0, 0x81, 0x5d60b543, 0x80, 0x8, 0x10000, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x8, 0x8, 0x5, 0x4, 0x8, 0x1, 0xde, 0xc, 0x8, 0x2ca2, 0x8000, 0x9, 0x81, 0x4, 0x8, 0x3, 0x80, 0x7fff, 0x3, 0x7fff, 0x1, 0x5, 0x3, 0x6, 0x33, 0x4, 0x401, 0x7, 0x6, 0x8000000000000000, 0x4, 0x7, 0x7, 0x3, 0x9, 0x401, 0xff, 0xa, 0xedf, 0x5, 0x3, 0x8b8, 0x8001, 0xd6, 0x8, 0x8000000000000001, 0x1, 0x5, 0x0, 0x6, 0x7, 0x5, 0x1, 0x7, 0x2, 0x10000, 0x8, 0x20, 0x4, 0x1, 0x8, 0x10001, 0x7f, 0x100, 0x3ff, 0xc, 0x9, 0xed1, 0xb, 0x4, 0x6, 0x0, 0x5, 0x3, 0xfffffffffffffff7, 0x2, 0x9, 0x1, 0xc, 0x6bcc035b, 0x8, 0x3, 0x0, 0xfff, 0x9, 0xbde, 0x4, 0xc, 0xdb9, 0x981, 0x5, 0xc, 0x5, 0x8000000000000000, 0x8, 0xffffffffffffff01, 0x9, 0x5, 0xe65c, 0x100000000, 0x6, 0x6, 0x7, 0xf, 0x8000, 0x947, 0x7, 0x1, 0xe56f, 0x645, 0x9, 0x0, 0x5, 0x80000001, 0x7a6, 0x5]}) fcntl$notify(r4, 0x402, 0x80000024) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x6, 0x3ff}) sendmmsg$inet(r5, &(0x7f0000000000), 0x2, 0x0) 113.550978ms ago: executing program 0 (id=3349): r0 = syz_open_dev$usbfs(0x0, 0x75, 0x943f41) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000080)={0x1, 0x1}) mount$tmpfs(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYBLOB="1f6f6ebc8ae4f9b936d1aa3bbd3c98d580d64ba42e2a98d3704eacf4ff1952356cd6733e118374e98686ff56877d1b0bcbee805977733e484baa3952e246b626fece9155c975f124177fe2d8f3a57c53d0a301ba9a2bf808ef27ad043c015e838de9d31b80e61bc3672c878a43658225920b1681a34a28b8d32a"]) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000003c0)={0x3, 0x80000000, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000400)={0x3, 0x6, 0xffffffffffffffff, 0xb, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) setpgid(0x0, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '0\x00'}}, [@crypt={0x0, 0x1000, 0x0, 0xa8, 'crypt\x00', {'capi:xts(aes)-random', 0x20, @fixed='0123456789abcdef0123456789abcdef01234567', 0x20, '4096', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1024'}, ' 2 sector_size:4096 iv_large_sectors'}}]}) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x24200, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) waitid(0x1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000ac0)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000b00)="060000000300010000", 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80003, 0xff) pipe2(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002c00)={0x10, 0xfffffffffffffffe, r6}, 0x66) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0xe) 82.645061ms ago: executing program 9 (id=3350): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') readv(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x8d}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='source', &(0x7f0000000640)='c:::\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) gettid() ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000900)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) 0s ago: executing program 4 (id=3351): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') readv(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x8d}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='source', &(0x7f0000000640)='c:::\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() tkill(r5, 0xb) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000900)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000980)={"fc7fbced01eb1b00000000000000000700", 0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000a00)=[{r8, 0x200}], 0x1, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ][T16417] ? skb_clone+0x1e7/0x370 [ 1756.447426][T16417] skb_clone+0x1e7/0x370 [ 1756.451708][T16417] bpf_clone_redirect+0x169/0x4a0 [ 1756.456841][T16417] bpf_prog_208b094576c80b22+0x56/0x5b [ 1756.462332][T16417] ? register_lock_class+0x580/0x870 [ 1756.467677][T16417] ? lock_chain_count+0x20/0x20 [ 1756.472569][T16417] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1756.478923][T16417] ? lockdep_hardirqs_on+0x94/0x140 [ 1756.484182][T16417] ? ktime_get+0x7b/0x270 [ 1756.488540][T16417] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1756.494815][T16417] ? ktime_get_real_ts64+0x440/0x440 [ 1756.500140][T16417] ? read_lock_is_recursive+0x10/0x10 [ 1756.505553][T16417] ? __might_sleep+0xd0/0xd0 [ 1756.510250][T16417] ? __lock_acquire+0x7ea0/0x7ea0 [ 1756.515330][T16417] ? __cant_sleep+0x220/0x220 [ 1756.520036][T16417] ? bpf_test_timer_continue+0x144/0x400 [ 1756.525748][T16417] bpf_test_run+0x2b6/0x830 [ 1756.530293][T16417] ? dst_hold+0xb0/0xb0 [ 1756.534478][T16417] ? eth_get_headlen+0x200/0x200 [ 1756.539506][T16417] ? __build_skb+0x24b/0x3b0 [ 1756.544175][T16417] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 1756.549598][T16417] ? cpu_online+0xa0/0xa0 [ 1756.553983][T16417] bpf_prog_test_run+0x31c/0x390 [ 1756.559033][T16417] __sys_bpf+0x62b/0x780 [ 1756.563322][T16417] ? bpf_link_show_fdinfo+0x550/0x550 [ 1756.568761][T16417] ? lock_chain_count+0x20/0x20 [ 1756.573661][T16417] __x64_sys_bpf+0x78/0x90 [ 1756.578112][T16417] do_syscall_64+0x4c/0xa0 [ 1756.582563][T16417] ? clear_bhb_loop+0x60/0xb0 [ 1756.587359][T16417] ? clear_bhb_loop+0x60/0xb0 [ 1756.592070][T16417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1756.598001][T16417] RIP: 0033:0x7fc7adb9fb19 [ 1756.602492][T16417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1756.622166][T16417] RSP: 002b:00007fc7aeaa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1756.630655][T16417] RAX: ffffffffffffffda RBX: 00007fc7ade26180 RCX: 00007fc7adb9fb19 [ 1756.638745][T16417] RDX: 0000000000000050 RSI: 00002000000014c0 RDI: 000000000000000a [ 1756.646741][T16417] RBP: 00007fc7adc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1756.654739][T16417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1756.662741][T16417] R13: 00007fc7ade26218 R14: 00007fc7ade26180 R15: 00007ffd89e85038 [ 1756.670758][T16417] [ 1756.823131][ T77] bond0 (unregistering): Released all slaves [ 1757.087667][T11615] infiniband : ib_query_port failed (-19) [ 1758.832283][T16448] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2553'. [ 1761.436006][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1761.446992][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1761.455278][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1761.465167][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1761.474750][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1761.484652][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1761.673066][T16472] rxe_eth0 speed is unknown, defaulting to 1000 [ 1761.924524][T16482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.979026][T16482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.994606][T11615] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1762.208958][T11615] usb 10-1: Using ep0 maxpacket: 16 [ 1762.216298][T11615] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1762.259484][T11615] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1762.300785][T11615] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1762.327934][T11615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.347297][T11615] usb 10-1: Product: syz [ 1762.367496][T11615] usb 10-1: Manufacturer: syz [ 1762.379734][T11615] usb 10-1: SerialNumber: syz [ 1762.429920][T11615] usb 10-1: config 0 descriptor?? [ 1762.698965][T11615] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input137 [ 1763.123512][T16472] chnl_net:caif_netlink_parms(): no params data found [ 1763.512621][T16472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.520004][T16472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.535996][T16472] device bridge_slave_0 entered promiscuous mode [ 1763.546187][T16472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.558831][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 1763.566340][T16472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1763.580514][T16472] device bridge_slave_1 entered promiscuous mode [ 1763.640598][T16472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1763.662334][T16472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1763.768522][T16472] team0: Port device team_slave_0 added [ 1763.774891][T11615] rc_core: IR keymap rc-imon-pad not found [ 1763.782438][T11615] Registered IR keymap rc-empty [ 1763.788131][T11615] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1765.240515][T11615] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1765.372629][ C0] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1765.381836][T11615] imon:send_packet: packet tx failed (-71) [ 1765.411584][T11615] imon 10-1:0.0: remote input dev register failed [ 1765.418177][T11615] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 1765.429884][T16472] team0: Port device team_slave_1 added [ 1765.570383][T11615] imon 10-1:0.0: unable to initialize intf0, err 0 [ 1765.599987][T11615] imon:imon_probe: failed to initialize context! [ 1765.606433][T11615] imon 10-1:0.0: unable to register, err -19 [ 1765.638792][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 1765.648245][T11615] usb 10-1: USB disconnect, device number 23 [ 1765.703257][T16472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1765.723155][T16472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1765.833227][T16472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1765.887198][T16472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1765.915039][T16472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1766.007107][T16472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1766.018991][T11615] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1766.256161][T11615] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1766.308827][T11615] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1766.404220][T16472] device hsr_slave_0 entered promiscuous mode [ 1766.429545][T16472] device hsr_slave_1 entered promiscuous mode [ 1766.465822][T11615] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1766.524794][T16472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1766.537116][T11615] usb 10-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 1766.543618][T16472] Cannot create hsr debugfs directory [ 1766.643874][T11615] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.731201][T11615] usb 10-1: config 0 descriptor?? [ 1767.563780][T11615] hid_mf 0003:0079:1844.0011: unknown main item tag 0x0 [ 1767.645018][T11615] hid_mf 0003:0079:1844.0011: unknown main item tag 0x0 [ 1767.721831][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 1767.806543][T11615] hid_mf 0003:0079:1844.0011: unknown main item tag 0x0 [ 1767.908924][T11615] hid_mf 0003:0079:1844.0011: unknown main item tag 0x0 [ 1767.917071][T11615] hid_mf 0003:0079:1844.0011: unknown main item tag 0x0 [ 1768.023535][T11615] hid_mf 0003:0079:1844.0011: unknown main item tag 0x0 [ 1768.043700][T11615] hid_mf 0003:0079:1844.0011: unknown main item tag 0x0 [ 1768.097760][T11615] hid_mf 0003:0079:1844.0011: unknown main item tag 0x0 [ 1768.122178][T11615] hid_mf 0003:0079:1844.0011: unknown main item tag 0x0 [ 1768.137830][T11615] hid_mf 0003:0079:1844.0011: unknown main item tag 0x0 [ 1768.200720][T11615] hid_mf 0003:0079:1844.0011: hidraw0: USB HID v0.0d Device [HID 0079:1844] on usb-dummy_hcd.9-1/input0 [ 1768.278419][T11615] hid_mf 0003:0079:1844.0011: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 1768.386051][T11615] usb 10-1: USB disconnect, device number 24 [ 1768.756184][T16557] fido_id[16557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1768.949314][T11615] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1769.181083][T11615] usb 10-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1769.228142][T11615] usb 10-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1769.283132][T11615] usb 10-1: Product: syz [ 1769.303485][T11615] usb 10-1: Manufacturer: syz [ 1769.324165][T11615] usb 10-1: SerialNumber: syz [ 1769.370540][T11615] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1769.613554][T16556] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1769.799057][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 1769.938220][T16556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.359652][T16556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.598016][T16587] tmpfs: Unknown parameter 'grpquota' [ 1770.683827][T11615] vp7045: USB control message 'in' went wrong. [ 1770.743642][T11615] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1770.754295][T11615] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1770.777908][T11615] usb 10-1: USB disconnect, device number 25 [ 1770.911997][ T77] device hsr_slave_0 left promiscuous mode [ 1770.929461][T16595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.939085][T16595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.974878][ T77] device hsr_slave_1 left promiscuous mode [ 1771.142183][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1771.169345][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1771.288648][ T77] device bridge_slave_1 left promiscuous mode [ 1771.813501][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.901875][ T77] device bridge_slave_0 left promiscuous mode [ 1771.918539][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.023044][T16605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1772.054209][T16605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.201217][ T77] team0 (unregistering): Port device team_slave_1 removed [ 1773.265654][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 1773.355891][T16619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.368802][ T4376] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1773.376832][T16619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.662998][ T4376] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1773.689816][ T77] team0 (unregistering): Port device team_slave_0 removed [ 1774.222021][ T4376] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1774.298985][ T4376] usb 6-1: Product: syz [ 1774.314156][ T4376] usb 6-1: Manufacturer: syz [ 1774.340547][ T4376] usb 6-1: SerialNumber: syz [ 1774.395590][T16627] tmpfs: Unknown parameter 'grpquota' [ 1774.406130][ T4376] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1774.421762][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1774.594235][T16614] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1774.766337][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1774.840670][T16614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.881363][T16614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.258833][ T2044] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1776.490841][ T2044] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1776.528819][ T2044] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1776.619136][ T2044] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1776.650215][ T2044] usb 10-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 1776.702161][ T77] bond0 (unregistering): Released all slaves [ 1776.710237][ T2044] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.773477][ T2044] usb 10-1: config 0 descriptor?? [ 1776.838994][ T4376] vp7045: USB control message 'in' went wrong. [ 1776.863821][ T4376] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1776.932809][ T4376] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1777.053079][ T4376] usb 6-1: USB disconnect, device number 27 [ 1777.216892][ T2044] hid_parser_main: 12 callbacks suppressed [ 1777.216915][ T2044] hid_mf 0003:0079:1844.0012: unknown main item tag 0x0 [ 1777.278747][ T2044] hid_mf 0003:0079:1844.0012: unknown main item tag 0x0 [ 1777.318855][ T2044] hid_mf 0003:0079:1844.0012: unknown main item tag 0x0 [ 1777.320511][T16472] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1777.325909][ T2044] hid_mf 0003:0079:1844.0012: unknown main item tag 0x0 [ 1777.411019][ T2044] hid_mf 0003:0079:1844.0012: unknown main item tag 0x0 [ 1777.449601][ T2044] hid_mf 0003:0079:1844.0012: unknown main item tag 0x0 [ 1777.493932][ T2044] hid_mf 0003:0079:1844.0012: unknown main item tag 0x0 [ 1778.368084][ T2044] hid_mf 0003:0079:1844.0012: unknown main item tag 0x0 [ 1778.375486][ T2044] hid_mf 0003:0079:1844.0012: unknown main item tag 0x0 [ 1778.385658][ T2044] hid_mf 0003:0079:1844.0012: unknown main item tag 0x0 [ 1778.395855][ T2044] hid_mf 0003:0079:1844.0012: hidraw0: USB HID v0.0d Device [HID 0079:1844] on usb-dummy_hcd.9-1/input0 [ 1778.407249][ T2044] hid_mf 0003:0079:1844.0012: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 1778.444517][ T2044] usb 10-1: USB disconnect, device number 26 [ 1778.525796][T16472] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1778.597898][T16472] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1778.697889][T16472] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1778.933931][T16653] fido_id[16653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1779.188799][ T7637] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1779.299619][T16472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1779.420158][ T7637] usb 6-1: config 6 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1779.435193][T16472] 8021q: adding VLAN 0 to HW filter on device team0 [ 1779.472456][ T7637] usb 6-1: config 6 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1779.525859][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1779.556485][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1779.586449][ T7637] usb 6-1: config 6 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1779.632156][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1779.680440][ T7637] usb 6-1: config 6 interface 0 has no altsetting 0 [ 1779.685786][T16668] tmpfs: Unknown parameter 'grpquota' [ 1779.704597][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1779.733852][ T7637] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1779.759782][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.766960][ T4518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1779.804992][ T7637] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.869085][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1779.935548][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1780.025118][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.032330][ T4518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1780.184888][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1780.264955][ T7637] usbhid 6-1:6.0: can't add hid device: -71 [ 1780.288584][ T7637] usbhid: probe of 6-1:6.0 failed with error -71 [ 1780.296349][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1780.357757][ T7637] usb 6-1: USB disconnect, device number 28 [ 1780.380092][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1780.441113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1781.432647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1781.566115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1783.153095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1783.200034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1784.601242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1784.642366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1784.679772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1784.731317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1785.820368][T16697] tipc: Enabling of bearer rejected, failed to enable media [ 1788.344132][T16708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.386596][T16708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.443525][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1788.489019][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1788.575607][T16472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1788.729293][T16714] gadgetfs: bound to dummy_udc driver [ 1788.832127][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1788.915294][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1789.048984][ T2044] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1789.110139][ C1] gadgetfs: connected [ 1789.123535][ T2044] gadgetfs: disconnected [ 1789.379243][ C1] gadgetfs: connected [ 1789.385847][ T2044] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1789.414027][ T2044] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1789.478076][T16712] gadgetfs: suspended from state 3 [ 1789.483534][T16712] gadgetfs: disconnected [ 1789.573003][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1789.609543][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1789.658764][ T2044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.726514][T16472] device veth0_vlan entered promiscuous mode [ 1791.194991][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1791.203261][ T2044] usb 2-1: can't set config #1, error -71 [ 1791.233933][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1791.268216][ T2044] usb 2-1: USB disconnect, device number 64 [ 1791.284277][T16472] device veth1_vlan entered promiscuous mode [ 1791.433321][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1791.457801][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1791.552450][T16472] device veth0_macvtap entered promiscuous mode [ 1791.587643][T16472] device veth1_macvtap entered promiscuous mode [ 1791.651741][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.658072][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.726117][T16472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1791.814389][T16472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.848916][T16472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1791.892427][T16472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.908728][T16472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1791.943555][T16472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.967774][T16472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1792.008887][T16472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1792.050991][T16472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1792.100182][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1792.126512][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1792.159761][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1792.198850][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1792.218767][T12645] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1792.270207][T16472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1792.324557][T16472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1792.354040][T16472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1792.398282][T16472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1792.425297][T12645] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1792.435038][T16472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1792.463980][T16472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1792.465420][T12645] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1792.498015][T16472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1792.533363][T16472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1792.553822][T12645] usb 6-1: Product: syz [ 1792.558108][T12645] usb 6-1: Manufacturer: syz [ 1792.614294][T12645] usb 6-1: SerialNumber: syz [ 1792.648907][T16472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1792.657290][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1792.689855][T12645] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1792.699744][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1792.760435][T16472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.799097][T16472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.807887][T16472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.878046][T16472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.894964][T16726] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1793.128005][T16726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.139341][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.157946][T16726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.165980][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.192110][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1793.202105][T12645] vp7045: USB control message 'in' went wrong. [ 1793.220922][T12645] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1793.240185][T12645] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1793.258651][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.275083][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.303139][T12645] usb 6-1: USB disconnect, device number 29 [ 1793.311214][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1793.498823][T11615] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1793.705010][T11615] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.777308][T11615] usb 10-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 1793.790593][T16749] tmpfs: Unknown parameter 'grpquota' [ 1793.864039][T11615] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.363722][T11615] msi2500 10-1:1.0: Registered as swradio24 [ 1795.398362][T11615] msi2500 10-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 1796.445060][T11615] usb 10-1: USB disconnect, device number 27 [ 1796.498910][ T4358] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1796.689506][ T4358] usb 3-1: Using ep0 maxpacket: 16 [ 1796.713225][ T4358] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.723981][ T4358] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1796.797897][ T4358] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1796.880527][ T4358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1796.888598][ T4358] usb 3-1: SerialNumber: syz [ 1796.904531][ T4358] usb 3-1: 0:2 : does not exist [ 1798.606223][ T4358] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1798.705107][ T4358] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1798.764174][ T4358] usb 3-1: USB disconnect, device number 67 [ 1798.928955][T11615] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1800.854941][T11615] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1800.965207][T11615] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1801.419559][T16801] CacheFiles: Failed to register: -2 [ 1801.591711][T16797] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1801.598332][T11615] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1801.606759][T11615] usb 10-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 1801.616275][T11615] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.651908][T11615] usb 10-1: config 0 descriptor?? [ 1801.843760][T11615] usb 10-1: can't set config #0, error -71 [ 1801.858000][T11615] usb 10-1: USB disconnect, device number 28 [ 1808.907076][T16851] CacheFiles: Failed to register: -2 [ 1809.239731][T16849] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1813.938912][ T4352] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1814.028958][ T22] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1814.038875][ T7] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1814.162892][ T4352] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1814.182534][ T4352] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1814.225147][ T4352] usb 6-1: Product: syz [ 1814.229673][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 1814.238340][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.250612][ T7] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1814.266622][ T4352] usb 6-1: Manufacturer: syz [ 1814.271940][ T4352] usb 6-1: SerialNumber: syz [ 1814.277562][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1814.282640][ T7] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1814.331919][ T4352] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1814.342016][ T22] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1814.361677][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1814.368947][ T7] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1814.380360][ T22] usb 3-1: SerialNumber: syz [ 1814.406907][ T7] usb 10-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 1814.433801][ T22] usb 3-1: 0:2 : does not exist [ 1814.458772][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.509073][ T7] usb 10-1: config 0 descriptor?? [ 1814.545306][T16880] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1814.822030][T16880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.833042][ T22] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1814.871159][T16880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.924068][ T7] hid_parser_main: 8 callbacks suppressed [ 1814.924091][ T7] hid_mf 0003:0079:1844.0013: unknown main item tag 0x0 [ 1814.925355][ T22] usb 3-1: USB disconnect, device number 68 [ 1814.954797][ T7] hid_mf 0003:0079:1844.0013: unknown main item tag 0x0 [ 1814.956476][ T4352] vp7045: USB control message 'in' went wrong. [ 1814.990963][ T7] hid_mf 0003:0079:1844.0013: unknown main item tag 0x0 [ 1814.995494][ T4352] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1815.030939][ T7] hid_mf 0003:0079:1844.0013: unknown main item tag 0x0 [ 1815.037966][ T7] hid_mf 0003:0079:1844.0013: unknown main item tag 0x0 [ 1815.045493][ T4352] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1815.063152][T16900] udevd[16900]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 1815.098499][ T7] hid_mf 0003:0079:1844.0013: unknown main item tag 0x0 [ 1815.126911][ T4352] usb 6-1: USB disconnect, device number 30 [ 1815.133084][ T7] hid_mf 0003:0079:1844.0013: unknown main item tag 0x0 [ 1815.160343][ T7] hid_mf 0003:0079:1844.0013: unknown main item tag 0x0 [ 1815.191122][ T7] hid_mf 0003:0079:1844.0013: unknown main item tag 0x0 [ 1815.217614][ T7] hid_mf 0003:0079:1844.0013: unknown main item tag 0x0 [ 1815.241239][ T7] hid_mf 0003:0079:1844.0013: hidraw0: USB HID v0.0d Device [HID 0079:1844] on usb-dummy_hcd.9-1/input0 [ 1815.276766][ T7] hid_mf 0003:0079:1844.0013: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 1815.308007][ T7] usb 10-1: USB disconnect, device number 29 [ 1815.482739][T16906] fido_id[16906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1815.959585][ T7] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1816.070848][T16927] ip_tables: iptables: counters copy to user failed while replacing table [ 1816.345358][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.847583][ T7] usb 6-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 1817.129845][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1817.138108][ T7] usb 6-1: Product: syz [ 1817.143443][ T7] usb 6-1: Manufacturer: syz [ 1817.269515][T16929] CacheFiles: Failed to register: -2 [ 1817.441742][T16923] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1817.795089][ T7] usbhid 6-1:1.0: can't add hid device: -71 [ 1819.546958][ T7] usbhid: probe of 6-1:1.0 failed with error -71 [ 1819.654097][ T7] usb 6-1: USB disconnect, device number 31 [ 1820.675161][T16954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.954743][T16954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.078256][T16954] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1821.161279][T16961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.247589][T16961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.528942][ T22] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1821.732674][ T22] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1821.813080][T16975] ip_tables: iptables: counters copy to user failed while replacing table [ 1821.846964][ T22] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1822.045540][ T22] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1822.141227][ T22] usb 6-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 1822.286497][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.478951][ T22] usb 6-1: config 0 descriptor?? [ 1822.878970][T12645] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1822.929992][ T22] usbhid 6-1:0.0: can't add hid device: -71 [ 1823.029511][T16989] CacheFiles: Failed to register: -2 [ 1823.543350][T16983] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1823.551288][ T22] usbhid: probe of 6-1:0.0 failed with error -71 [ 1823.561457][ T22] usb 6-1: USB disconnect, device number 32 [ 1823.758804][T12645] usb 3-1: device descriptor read/64, error -71 [ 1825.618854][T12645] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1825.648891][T16999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.708898][T16999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.881656][T17017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.327851][T17017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.516909][ T2044] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1827.923018][T17022] ip_tables: iptables: counters copy to user failed while replacing table [ 1827.983289][T17017] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1828.050763][T17017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.103079][T17017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.158831][ T2044] usb 6-1: Using ep0 maxpacket: 16 [ 1828.165744][ T2044] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1828.222886][ T2044] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1828.280839][ T2044] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1828.322159][ T2044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1828.377486][ T2044] usb 6-1: SerialNumber: syz [ 1828.415535][T17031] CacheFiles: Failed to register: -2 [ 1828.600436][ T2044] usb 6-1: 0:2 : does not exist [ 1828.955849][ T2044] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1829.138980][T17028] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1829.226352][ T2044] usb 6-1: USB disconnect, device number 33 [ 1831.032883][T17044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.108999][T17044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.448962][ T2044] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1831.614258][ T2044] usb 6-1: device descriptor read/64, error -71 [ 1831.898829][ T2044] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1832.078775][ T2044] usb 6-1: device descriptor read/64, error -71 [ 1832.199031][ T2044] usb usb6-port1: attempt power cycle [ 1832.257167][T17067] ip_tables: iptables: counters copy to user failed while replacing table [ 1833.558897][ T2044] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1833.609554][ T2044] usb 6-1: device descriptor read/8, error -71 [ 1833.878890][ T2044] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1833.894244][T17082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1833.919628][ T2044] usb 6-1: device descriptor read/8, error -71 [ 1833.924663][T17082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1833.979025][T17082] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1834.000173][T17082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1834.023374][T17082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.043693][ T2044] usb usb6-port1: unable to enumerate USB device [ 1834.211356][T17089] CacheFiles: Failed to register: -2 [ 1834.876557][T17085] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1836.897375][T17109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.970461][T17109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.952772][T17119] ip_tables: iptables: counters copy to user failed while replacing table [ 1839.185407][T17140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2730'. [ 1839.198895][T12645] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1839.224705][T17140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2730'. [ 1839.388959][T12645] usb 3-1: Using ep0 maxpacket: 8 [ 1839.397673][T12645] usb 3-1: no configurations [ 1839.413627][T12645] usb 3-1: can't read configurations, error -22 [ 1839.584389][T12645] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1839.669427][T17150] CacheFiles: Failed to register: -2 [ 1839.768850][T12645] usb 3-1: Using ep0 maxpacket: 8 [ 1839.775906][T12645] usb 3-1: no configurations [ 1839.847656][T12645] usb 3-1: can't read configurations, error -22 [ 1839.958837][T12645] usb usb3-port1: attempt power cycle [ 1840.362876][T17148] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1840.438880][T12645] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1840.489906][T12645] usb 3-1: Using ep0 maxpacket: 8 [ 1840.508848][T12645] usb 3-1: no configurations [ 1840.533974][T12645] usb 3-1: can't read configurations, error -22 [ 1840.779317][T12645] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1841.340168][T12645] usb 3-1: Using ep0 maxpacket: 8 [ 1841.345885][T12645] usb 3-1: no configurations [ 1841.359012][T12645] usb 3-1: can't read configurations, error -22 [ 1841.375443][T12645] usb usb3-port1: unable to enumerate USB device [ 1841.958973][ T4358] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1843.793347][ T4358] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1843.814638][ T4358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.829545][T17172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.848415][ T4358] usb 6-1: Product: syz [ 1843.861260][T17172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.879020][ T4358] usb 6-1: Manufacturer: syz [ 1843.896975][ T4358] usb 6-1: SerialNumber: syz [ 1844.080885][ T4358] usb 6-1: can't set config #1, error -71 [ 1844.225452][T17180] ip_tables: iptables: counters copy to user failed while replacing table [ 1844.924176][ T4358] usb 6-1: USB disconnect, device number 38 [ 1845.858576][T17202] CacheFiles: Failed to register: -2 [ 1846.540669][T17200] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1847.042784][T17207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.113234][T17207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.256225][T17218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1848.274642][T17218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.508767][ T7] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1849.458728][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 1849.464519][ T7] usb 3-1: no configurations [ 1849.475970][ T7] usb 3-1: can't read configurations, error -22 [ 1849.639541][ T7] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1849.828944][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 1849.840878][ T7] usb 3-1: no configurations [ 1849.873941][ T7] usb 3-1: can't read configurations, error -22 [ 1849.910101][ T7] usb usb3-port1: attempt power cycle [ 1850.269996][T17244] ip_tables: iptables: counters copy to user failed while replacing table [ 1850.338735][ T7] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1850.999470][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 1851.005529][ T7] usb 3-1: no configurations [ 1851.019089][ T7] usb 3-1: can't read configurations, error -22 [ 1851.178743][ T7] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1851.288498][ T7] usb 3-1: device descriptor read/8, error -71 [ 1851.409705][ T7] usb usb3-port1: unable to enumerate USB device [ 1851.621137][T17257] CacheFiles: Failed to register: -2 [ 1852.332166][T17253] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1853.084414][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.091843][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.638079][T17274] tmpfs: Unknown parameter 'grpquota' [ 1854.698905][T14788] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1855.360504][T14788] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1855.970848][T14788] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1855.987655][T14788] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1855.995235][T14788] usb 6-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 1856.007694][T14788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.039526][T14788] usb 6-1: config 0 descriptor?? [ 1856.473760][T14788] usbhid 6-1:0.0: can't add hid device: -71 [ 1856.483913][T14788] usbhid: probe of 6-1:0.0 failed with error -71 [ 1856.538301][T14788] usb 6-1: USB disconnect, device number 39 [ 1856.749445][ T4358] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1856.964261][ T4358] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1857.022091][ T4358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.118728][ T4358] usb 3-1: Product: syz [ 1857.155910][ T4358] usb 3-1: Manufacturer: syz [ 1857.214575][ T4358] usb 3-1: SerialNumber: syz [ 1857.592594][T17301] ip_tables: iptables: counters copy to user failed while replacing table [ 1858.222444][ T4278] Bluetooth: hci2: command 0x0405 tx timeout [ 1858.223237][ T4358] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1858.294676][ T4358] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1858.347048][ T4358] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1858.379071][ T4358] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1858.446703][ T4358] lan78xx: probe of 3-1:1.0 failed with error -32 [ 1859.904517][ T4358] usb 3-1: USB disconnect, device number 79 [ 1860.088746][ T2044] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1862.599916][ T2044] usb 6-1: Using ep0 maxpacket: 16 [ 1862.606904][ T2044] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.653703][ T2044] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1862.788868][T17327] CacheFiles: Failed to register: -2 [ 1863.010596][T17319] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1863.201602][ T2044] usb 6-1: string descriptor 0 read error: -71 [ 1863.214075][ T2044] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1863.282047][ T2044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1863.394238][ T2044] usb 6-1: can't set config #1, error -71 [ 1863.571407][ T2044] usb 6-1: USB disconnect, device number 40 [ 1864.499711][T17341] sctp: failed to load transform for md5: -2 [ 1864.982635][T17361] ip_tables: iptables: counters copy to user failed while replacing table [ 1866.707069][T17371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.717485][T17371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1867.328738][T14788] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1867.593627][T14788] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1867.607776][T14788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.229120][T14788] usb 3-1: Product: syz [ 1868.233386][T14788] usb 3-1: Manufacturer: syz [ 1868.328054][T14788] usb 3-1: SerialNumber: syz [ 1869.299607][T14788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1869.504867][T17402] CacheFiles: Failed to register: -2 [ 1869.568770][ T4278] Bluetooth: hci2: command 0x0405 tx timeout [ 1869.592727][T14788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1869.943952][T17397] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1870.048309][T14788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1870.159169][T14788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1870.346553][T14788] lan78xx: probe of 3-1:1.0 failed with error -32 [ 1873.285172][ T4358] usb 3-1: USB disconnect, device number 80 [ 1873.575353][T17423] ip_tables: iptables: counters copy to user failed while replacing table [ 1876.994644][T17440] CacheFiles: Failed to register: -2 [ 1878.038885][T17434] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1881.876291][T17460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.918332][T17460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1883.294957][T17475] ip_tables: iptables: counters copy to user failed while replacing table [ 1885.879385][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 1886.647668][T17497] CacheFiles: Failed to register: -2 [ 1887.350121][T17495] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1888.719013][T14788] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1889.012770][T14788] usb 10-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1889.074119][T14788] usb 10-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1889.125078][T14788] usb 10-1: Product: syz [ 1889.138748][T14788] usb 10-1: Manufacturer: syz [ 1889.143491][T14788] usb 10-1: SerialNumber: syz [ 1889.226460][T14788] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1889.407806][T17504] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1889.687190][T17504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.766355][T17525] ip_tables: iptables: counters copy to user failed while replacing table [ 1890.450424][T17504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1890.474955][T14788] vp7045: USB control message 'in' went wrong. [ 1890.488742][ T22] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1890.497465][T14788] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1890.510176][T14788] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1890.537134][T14788] usb 10-1: USB disconnect, device number 30 [ 1890.702511][ T22] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1890.744138][ T22] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1890.824073][ T22] usb 6-1: Product: syz [ 1890.842248][ T22] usb 6-1: Manufacturer: syz [ 1890.863743][ T22] usb 6-1: SerialNumber: syz [ 1890.984650][ T22] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1891.161055][T17520] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1891.243068][T17520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1891.310704][T17520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1891.401733][ T22] vp7045: USB control message 'out' went wrong. [ 1891.419325][ T22] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1891.491913][ T22] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1891.647292][ T22] usb 6-1: USB disconnect, device number 41 [ 1891.988840][T16341] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1892.204441][T16341] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1892.229689][T16341] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.300534][T16341] usb 10-1: Product: syz [ 1892.304865][T16341] usb 10-1: Manufacturer: syz [ 1893.120499][T16341] usb 10-1: SerialNumber: syz [ 1893.410033][T16341] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1893.640146][T16341] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1893.713998][T16341] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1893.818085][T16341] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1893.913820][T17558] CacheFiles: Failed to register: -2 [ 1894.619578][T17556] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1894.671670][T16341] lan78xx: probe of 10-1:1.0 failed with error -32 [ 1895.905568][T16341] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1895.975196][ T22] usb 10-1: USB disconnect, device number 31 [ 1896.110788][T16341] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1896.173425][T16341] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1896.415804][T17574] ip_tables: iptables: counters copy to user failed while replacing table [ 1897.118845][T16341] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1897.139205][T16341] usb 6-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 1897.243329][T16341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.314721][T16341] usb 6-1: config 0 descriptor?? [ 1897.693447][T12645] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1897.785850][T16341] hid_parser_main: 6 callbacks suppressed [ 1897.785890][T16341] hid_mf 0003:0079:1844.0014: unknown main item tag 0x0 [ 1898.186629][T16341] hid_mf 0003:0079:1844.0014: unknown main item tag 0x0 [ 1898.220944][T12645] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1898.246489][T16341] hid_mf 0003:0079:1844.0014: unknown main item tag 0x0 [ 1898.254191][T12645] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1898.276787][T16341] hid_mf 0003:0079:1844.0014: unknown main item tag 0x0 [ 1898.303501][T12645] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1898.322695][T16341] hid_mf 0003:0079:1844.0014: unknown main item tag 0x0 [ 1898.342351][T16341] hid_mf 0003:0079:1844.0014: unknown main item tag 0x0 [ 1898.357562][T12645] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1898.386847][T16341] hid_mf 0003:0079:1844.0014: unknown main item tag 0x0 [ 1898.407002][T12645] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1898.423830][T16341] hid_mf 0003:0079:1844.0014: unknown main item tag 0x0 [ 1898.450716][T16341] hid_mf 0003:0079:1844.0014: unknown main item tag 0x0 [ 1898.473475][T12645] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 1898.525690][T16341] hid_mf 0003:0079:1844.0014: unknown main item tag 0x0 [ 1898.578500][T12645] usb 10-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1898.607388][T16341] hid_mf 0003:0079:1844.0014: unbalanced collection at end of report description [ 1898.649672][T16341] hid_mf 0003:0079:1844.0014: HID parse failed. [ 1898.655993][T16341] hid_mf: probe of 0003:0079:1844.0014 failed with error -22 [ 1900.136543][T12645] usb 10-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 1900.166345][T12645] usb 10-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 1900.216759][T16341] usb 6-1: USB disconnect, device number 42 [ 1900.222852][T12645] usb 10-1: Product: syz [ 1900.254404][T12645] usb 10-1: Manufacturer: syz [ 1900.331644][T12645] usb 10-1: SerialNumber: syz [ 1901.289133][T12645] usb 10-1: can't set config #1, error -71 [ 1901.311632][T12645] usb 10-1: USB disconnect, device number 32 [ 1901.399306][T17601] CacheFiles: Failed to register: -2 [ 1902.117020][T17599] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1902.312750][T17604] phram: not enough arguments [ 1903.058797][ T22] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1904.163236][ T22] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1904.230798][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.251549][ T22] usb 6-1: Product: syz [ 1904.279680][ T22] usb 6-1: Manufacturer: syz [ 1904.288950][ T22] usb 6-1: SerialNumber: syz [ 1904.589700][ T22] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1904.813483][ T22] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1904.874317][T17628] ip_tables: iptables: counters copy to user failed while replacing table [ 1905.477803][ T22] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1905.487557][ T22] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1905.530065][ T22] lan78xx: probe of 6-1:1.0 failed with error -32 [ 1905.676310][T17633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1905.701928][T17633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1905.740838][T17633] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1906.355597][ T7] usb 6-1: USB disconnect, device number 43 [ 1907.100638][ T4358] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1907.326232][ T4358] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1907.337479][ T4358] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1907.350831][ T4358] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1907.357514][ T4358] usb 6-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 1907.366997][ T4358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.378430][ T4358] usb 6-1: config 0 descriptor?? [ 1907.582768][T17651] tmpfs: Unknown parameter 'grpquota' [ 1908.420519][ T4358] hid_parser_main: 4 callbacks suppressed [ 1908.420537][ T4358] hid_mf 0003:0079:1844.0015: unknown main item tag 0x0 [ 1908.508058][T17677] CacheFiles: Failed to register: -2 [ 1909.209157][T17673] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1909.352695][ T4358] hid_mf 0003:0079:1844.0015: unknown main item tag 0x0 [ 1909.365143][T17679] phram: not enough arguments [ 1909.401428][ T4358] hid_mf 0003:0079:1844.0015: unknown main item tag 0x0 [ 1909.532220][ T4358] hid_mf 0003:0079:1844.0015: unknown main item tag 0x0 [ 1909.651994][ T4358] hid_mf 0003:0079:1844.0015: unknown main item tag 0x0 [ 1909.699042][ T4358] hid_mf 0003:0079:1844.0015: unknown main item tag 0x0 [ 1909.723415][ T4358] hid_mf 0003:0079:1844.0015: unknown main item tag 0x0 [ 1909.743694][ T4358] hid_mf 0003:0079:1844.0015: unknown main item tag 0x0 [ 1909.758321][ T4358] hid_mf 0003:0079:1844.0015: unknown main item tag 0x0 [ 1909.774054][ T4358] hid_mf 0003:0079:1844.0015: unknown main item tag 0x0 [ 1909.788747][ T4358] hid_mf 0003:0079:1844.0015: unbalanced collection at end of report description [ 1909.809180][ T4358] hid_mf 0003:0079:1844.0015: HID parse failed. [ 1909.826277][ T4358] hid_mf: probe of 0003:0079:1844.0015 failed with error -22 [ 1909.868722][ T4358] usb 6-1: USB disconnect, device number 44 [ 1910.190479][T17695] ip_tables: iptables: counters copy to user failed while replacing table [ 1912.358830][ T22] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 1912.999166][T17716] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1914.002476][ T22] usb 10-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1914.178095][ T22] usb 10-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1914.320162][ T22] usb 10-1: Product: syz [ 1914.324787][ T22] usb 10-1: Manufacturer: syz [ 1914.350493][ T22] usb 10-1: SerialNumber: syz [ 1914.529545][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.536043][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.725177][ T22] usb 10-1: can't set config #4, error -71 [ 1914.938276][T17729] tmpfs: Unknown parameter 'grpquota' [ 1915.102231][ T22] usb 10-1: USB disconnect, device number 33 [ 1915.619995][T17741] phram: not enough arguments [ 1915.628758][ T22] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1915.820486][ T22] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1915.880852][ T22] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1916.479807][ T22] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1916.489123][ T22] usb 10-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 1916.607817][ T22] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.730257][ T22] usb 10-1: config 0 descriptor?? [ 1916.987126][T17507] udevd[17507]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 1917.045609][T17755] nbd4: detected capacity change from 0 to 4 [ 1917.101495][T17507] udevd[17507]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 1917.118523][T17756] block nbd4: shutting down sockets [ 1917.143195][ T22] hid_parser_main: 4 callbacks suppressed [ 1917.143211][ T22] hid_mf 0003:0079:1844.0016: unknown main item tag 0x0 [ 1917.312858][T17759] ip_tables: iptables: counters copy to user failed while replacing table [ 1917.984433][ T22] hid_mf 0003:0079:1844.0016: unknown main item tag 0x0 [ 1918.058229][ T22] hid_mf 0003:0079:1844.0016: unknown main item tag 0x0 [ 1919.171322][ T22] hid_mf 0003:0079:1844.0016: unknown main item tag 0x0 [ 1919.178383][ T22] hid_mf 0003:0079:1844.0016: unknown main item tag 0x0 [ 1919.249083][ T22] hid_mf 0003:0079:1844.0016: unknown main item tag 0x0 [ 1919.282086][ T22] hid_mf 0003:0079:1844.0016: unknown main item tag 0x0 [ 1919.319020][ T22] hid_mf 0003:0079:1844.0016: unknown main item tag 0x0 [ 1919.349417][ T22] hid_mf 0003:0079:1844.0016: unknown main item tag 0x0 [ 1921.336578][ T22] hid_mf 0003:0079:1844.0016: unknown main item tag 0x0 [ 1921.389935][ T22] hid_mf 0003:0079:1844.0016: unbalanced collection at end of report description [ 1921.450645][ T22] hid_mf 0003:0079:1844.0016: HID parse failed. [ 1921.486714][ T22] hid_mf: probe of 0003:0079:1844.0016 failed with error -22 [ 1921.540419][T17509] udevd[17509]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 1921.566597][ T22] usb 10-1: USB disconnect, device number 34 [ 1921.908770][ T4352] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1922.093207][ T4352] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1922.108763][ T4352] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1922.167993][ T4352] usb 6-1: Product: syz [ 1922.198378][ T4352] usb 6-1: Manufacturer: syz [ 1922.218787][ T4352] usb 6-1: SerialNumber: syz [ 1922.260377][ T4352] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1922.464423][T17779] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1923.217828][T17793] tmpfs: Unknown parameter 'grpquota' [ 1923.351112][ T4352] vp7045: USB control message 'in' went wrong. [ 1923.370751][ T4352] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1923.445771][ T4352] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1923.541219][ T4352] usb 6-1: USB disconnect, device number 45 [ 1923.695843][T17809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2882'. [ 1924.950308][T17813] rxe_eth0 speed is unknown, defaulting to 1000 [ 1925.229800][T17823] tipc: Enabling of bearer rejected, failed to enable media [ 1925.508828][ T22] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1927.038781][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 1928.060492][ T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1928.197971][ T22] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1928.322478][ T22] usb 6-1: string descriptor 0 read error: -71 [ 1928.352287][ T22] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1928.405884][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1928.507531][ T22] usb 6-1: can't set config #1, error -71 [ 1928.566590][ T22] usb 6-1: USB disconnect, device number 46 [ 1928.908409][T17837] ip_tables: iptables: counters copy to user failed while replacing table [ 1933.418745][ T14] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1933.482444][T17877] tmpfs: Unknown parameter 'grpquota' [ 1933.623510][ T14] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1933.664433][ T14] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1933.704607][ T14] usb 6-1: Product: syz [ 1933.714075][ T14] usb 6-1: Manufacturer: syz [ 1933.722766][ T14] usb 6-1: SerialNumber: syz [ 1933.764564][ T14] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1933.898805][T14788] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1933.962868][T17867] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1933.997366][T17867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1934.075038][T17867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1934.108692][T14788] usb 3-1: Using ep0 maxpacket: 16 [ 1934.117749][T14788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1934.168830][ T14] vp7045: USB control message 'out' went wrong. [ 1934.179766][ T14] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1934.209065][T14788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1934.233073][ T14] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1934.323326][T14788] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1934.324264][ T14] usb 6-1: USB disconnect, device number 47 [ 1934.428712][T14788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1934.483479][T14788] usb 3-1: SerialNumber: syz [ 1934.595695][T14788] usb 3-1: 0:2 : does not exist [ 1936.145764][T14788] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1936.226466][T14788] usb 3-1: USB disconnect, device number 81 [ 1936.741000][T17905] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 1937.115381][T17913] ip_tables: iptables: counters copy to user failed while replacing table [ 1940.402185][T17929] tmpfs: Unknown parameter 'grpquota' [ 1941.271392][T17934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1941.357656][T17934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.119035][ T22] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1943.318828][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 1943.333267][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.216154][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1944.315982][ T22] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1944.408723][T16341] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1945.621871][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1945.705801][ T22] usb 3-1: SerialNumber: syz [ 1945.965095][ T22] usb 3-1: can't set config #1, error -71 [ 1946.016375][ T22] usb 3-1: USB disconnect, device number 82 [ 1946.397290][T17964] lo speed is unknown, defaulting to 1000 [ 1946.407412][T17964] lo speed is unknown, defaulting to 1000 [ 1946.432330][T17964] lo speed is unknown, defaulting to 1000 [ 1946.679763][T17964] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1947.480873][T17964] lo speed is unknown, defaulting to 1000 [ 1947.487693][T17964] lo speed is unknown, defaulting to 1000 [ 1947.494153][T17964] lo speed is unknown, defaulting to 1000 [ 1947.500654][T17964] lo speed is unknown, defaulting to 1000 [ 1947.507068][T17964] lo speed is unknown, defaulting to 1000 [ 1947.608725][T16341] usb 10-1: Using ep0 maxpacket: 32 [ 1947.802533][T16341] usb 10-1: device descriptor read/all, error -71 [ 1947.977127][T17974] ip_tables: iptables: counters copy to user failed while replacing table [ 1950.695934][ T27] audit: type=1807 audit(1794101564.807:968): UNKNOWN=a res=0 [ 1950.710946][ T27] audit: type=1802 audit(1794101564.807:969): pid=17991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.2925" res=0 errno=0 [ 1950.819023][T17989] ima: policy update failed [ 1951.198758][ T27] audit: type=1802 audit(1794101564.937:970): pid=17989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2925" res=0 errno=0 [ 1956.744647][T18020] ip_tables: iptables: counters copy to user failed while replacing table [ 1958.452390][T18036] TC_ACT_REPEAT abuse ? [ 1959.378924][ T4352] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1960.001272][T18057] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2933'. [ 1960.383391][ T4352] usb 6-1: Using ep0 maxpacket: 16 [ 1960.390969][ T4352] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1960.413157][ T4352] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1960.423695][ T4352] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1960.517059][ T4352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1960.538452][ T4352] usb 6-1: SerialNumber: syz [ 1960.620794][ T4352] usb 6-1: 0:2 : does not exist [ 1962.330087][ T4352] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1962.758894][ T4352] usb 6-1: USB disconnect, device number 48 [ 1962.808392][T18075] ip_tables: iptables: counters copy to user failed while replacing table [ 1963.257218][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'. [ 1964.400740][T18027] udevd[18027]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1964.639352][T18090] tmpfs: Unknown parameter 'grpquota' [ 1966.972311][T18102] tmpfs: Unknown parameter 'grpquota' [ 1967.028944][T18105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1967.078040][T18105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1969.565547][T18125] ip_tables: iptables: counters copy to user failed while replacing table [ 1970.306974][T18128] hsr0 speed is unknown, defaulting to 1000 [ 1970.336090][T18128] hsr0 speed is unknown, defaulting to 1000 [ 1970.381691][T18128] hsr0 speed is unknown, defaulting to 1000 [ 1970.448525][T18128] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1970.601349][T18128] hsr0 speed is unknown, defaulting to 1000 [ 1970.650624][T18128] hsr0 speed is unknown, defaulting to 1000 [ 1970.694227][T18128] hsr0 speed is unknown, defaulting to 1000 [ 1970.733634][T18128] hsr0 speed is unknown, defaulting to 1000 [ 1970.766879][T18128] hsr0 speed is unknown, defaulting to 1000 [ 1975.963766][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.971818][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.804494][T18171] ip_tables: iptables: counters copy to user failed while replacing table [ 1982.911752][T18225] rxe_eth0 speed is unknown, defaulting to 1000 [ 1983.014171][T18225] lo speed is unknown, defaulting to 1000 [ 1983.021026][T18225] hsr0 speed is unknown, defaulting to 1000 [ 1985.348636][T18243] ip_tables: iptables: counters copy to user failed while replacing table [ 1988.264053][T18247] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2992'. [ 1989.458924][ T14] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1990.500276][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1991.835335][ T14] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1993.148057][ T14] usb 3-1: string descriptor 0 read error: -71 [ 1993.162635][ T14] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 1993.279739][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1993.454593][ T14] usb 3-1: can't set config #1, error -71 [ 1995.768884][ T14] usb 3-1: USB disconnect, device number 83 [ 1996.558937][ T14] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1996.593223][T18322] FAULT_INJECTION: forcing a failure. [ 1996.593223][T18322] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.750945][ T14] usb 10-1: config 5 has an invalid interface number: 143 but max is 0 [ 1996.771868][ T14] usb 10-1: config 5 has no interface number 0 [ 1996.794636][ T14] usb 10-1: config 5 interface 143 has no altsetting 0 [ 1996.810868][T18322] CPU: 1 PID: 18322 Comm: syz.4.3010 Not tainted syzkaller #0 [ 1996.817821][ T14] usb 10-1: New USB device found, idVendor=187f, idProduct=0500, bcdDevice=8d.b8 [ 1996.818384][T18322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1996.837639][T18322] Call Trace: [ 1996.840988][T18322] [ 1996.841665][ T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.843953][T18322] dump_stack_lvl+0x188/0x24e [ 1996.854621][T12645] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1996.856741][T18322] ? show_regs_print_info+0x12/0x12 [ 1996.869585][T18322] ? load_image+0x410/0x410 [ 1996.874162][T18322] ? __might_sleep+0xd0/0xd0 [ 1996.878786][T18322] ? __lock_acquire+0x7ea0/0x7ea0 [ 1996.883862][T18322] should_fail_ex+0x390/0x4c0 [ 1996.888597][T18322] should_failslab+0x5/0x20 [ 1996.893133][T18322] slab_pre_alloc_hook+0x59/0x300 [ 1996.898266][T18322] ? io_sq_offload_create+0x18c/0x10e2 [ 1996.903785][T18322] ? io_rsrc_node_switch_start+0x7f/0x1b0 [ 1996.909589][T18322] __kmem_cache_alloc_node+0x4f/0x270 [ 1996.914985][T18322] ? io_rsrc_node_switch_start+0x7f/0x1b0 [ 1996.920738][T18322] kmalloc_trace+0x26/0xe0 [ 1996.925171][T18322] io_rsrc_node_switch_start+0x7f/0x1b0 [ 1996.930737][T18322] io_uring_create+0x5b1/0xd6c [ 1996.935525][T18322] __x64_sys_io_uring_setup+0x21b/0x230 [ 1996.941160][T18322] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 1996.946820][T18322] ? lockdep_hardirqs_on+0x94/0x140 [ 1996.952035][T18322] do_syscall_64+0x4c/0xa0 [ 1996.956468][T18322] ? clear_bhb_loop+0x60/0xb0 [ 1996.961253][T18322] ? clear_bhb_loop+0x60/0xb0 [ 1996.965952][T18322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1996.971879][T18322] RIP: 0033:0x7f348a59fb19 [ 1996.976345][T18322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1996.996129][T18322] RSP: 002b:00007f348b51ffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1997.004606][T18322] RAX: ffffffffffffffda RBX: 0000200000001a80 RCX: 00007f348a59fb19 [ 1997.012784][T18322] RDX: 0000200000001b40 RSI: 0000200000001a80 RDI: 0000000000005069 [ 1997.013080][ T14] usb 10-1: Product: syz [ 1997.020791][T18322] RBP: 00007f348a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1997.020813][T18322] R10: 0000200000001b80 R11: 0000000000000206 R12: 0000200000001b40 [ 1997.020829][T18322] R13: 0000200000001b80 R14: 0000200000001b00 R15: 00007ffe192915f8 [ 1997.020863][T18322] [ 1997.168799][T12645] usb 3-1: Using ep0 maxpacket: 32 [ 1997.176966][T12645] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1997.204681][ T14] usb 10-1: Manufacturer: syz [ 1997.219909][ T14] usb 10-1: SerialNumber: syz [ 1997.226425][T12645] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1997.318974][T12645] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1997.361048][T12645] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1997.408693][T12645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1997.477592][T12645] usb 3-1: config 0 descriptor?? [ 1997.492870][ T14] smsusb:smsusb_probe: board id=17, interface number 143 [ 1997.587072][ T14] usb 10-1: USB disconnect, device number 37 [ 1997.934846][T12645] hid_parser_main: 4 callbacks suppressed [ 1997.934860][T12645] corsair-cpro 0003:1B1C:0C10.0017: unknown main item tag 0x0 [ 1997.960001][T12645] corsair-cpro 0003:1B1C:0C10.0017: unknown main item tag 0x0 [ 1997.990474][T12645] corsair-cpro 0003:1B1C:0C10.0017: unknown main item tag 0x0 [ 1998.014164][T12645] corsair-cpro 0003:1B1C:0C10.0017: unknown main item tag 0x0 [ 1998.088127][T12645] corsair-cpro 0003:1B1C:0C10.0017: unknown main item tag 0x0 [ 1998.176390][T12645] corsair-cpro 0003:1B1C:0C10.0017: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 1998.330183][T12645] corsair-cpro: probe of 0003:1B1C:0C10.0017 failed with error -38 [ 1998.400438][T12645] usb 3-1: USB disconnect, device number 84 [ 1998.486195][T18339] udevd[18339]: open /dev/null failed: No such file or directory [ 1998.628665][ T14] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1999.109791][ T14] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2000.778801][ T14] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2000.826317][ T14] usb 10-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 2000.845180][ T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2000.862157][ T14] usb 10-1: Product: syz [ 2000.866472][ T14] usb 10-1: Manufacturer: syz [ 2000.904082][ T14] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 2004.722931][T10481] usb 10-1: USB disconnect, device number 38 [ 2011.928734][ T14] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2014.538763][T12645] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 2014.931774][T18455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3033'. [ 2014.940823][T18455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3033'. [ 2015.802114][T12645] usb 10-1: Using ep0 maxpacket: 32 [ 2015.826067][T12645] usb 10-1: config 0 interface 0 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 2015.898671][T12645] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2015.925855][T12645] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2015.968883][T12645] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.004643][T12645] usb 10-1: config 0 descriptor?? [ 2016.446875][T12645] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 2016.494501][T12645] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 2016.518723][T12645] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 2016.553646][T12645] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 2016.622654][T12645] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 2016.684255][T12645] corsair-cpro 0003:1B1C:0C10.0018: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.9-1/input0 [ 2016.800376][T12645] corsair-cpro: probe of 0003:1B1C:0C10.0018 failed with error -38 [ 2016.859785][T12645] usb 10-1: USB disconnect, device number 39 [ 2016.982018][T18464] udevd[18464]: open /dev/null failed: No such file or directory [ 2020.428760][T17829] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2020.652178][T17829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2020.749788][T17829] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2021.016487][T17829] usb 6-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 2021.117923][T17829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2021.226476][T17829] usb 6-1: Product: syz [ 2021.271659][T17829] usb 6-1: Manufacturer: syz [ 2021.401485][T17829] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 2023.510676][T17829] usb 6-1: USB disconnect, device number 50 [ 2024.466494][T18521] FAULT_INJECTION: forcing a failure. [ 2024.466494][T18521] name failslab, interval 1, probability 0, space 0, times 0 [ 2024.564103][T18521] CPU: 0 PID: 18521 Comm: syz.5.3055 Not tainted syzkaller #0 [ 2024.571653][T18521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2024.581757][T18521] Call Trace: [ 2024.585092][T18521] [ 2024.588081][T18521] dump_stack_lvl+0x188/0x24e [ 2024.592844][T18521] ? show_regs_print_info+0x12/0x12 [ 2024.598107][T18521] ? load_image+0x410/0x410 [ 2024.602671][T18521] ? verify_lock_unused+0x140/0x140 [ 2024.607934][T18521] ? verify_lock_unused+0x140/0x140 [ 2024.613204][T18521] should_fail_ex+0x390/0x4c0 [ 2024.617943][T18521] should_failslab+0x5/0x20 [ 2024.622498][T18521] slab_pre_alloc_hook+0x59/0x300 [ 2024.627583][T18521] ? tipc_group_create+0x97/0x4e0 [ 2024.632738][T18521] __kmem_cache_alloc_node+0x4f/0x270 [ 2024.638174][T18521] ? tipc_group_create+0x97/0x4e0 [ 2024.643270][T18521] kmalloc_trace+0x26/0xe0 [ 2024.647754][T18521] tipc_group_create+0x97/0x4e0 [ 2024.652697][T18521] tipc_sk_join+0x256/0x6a0 [ 2024.657267][T18521] ? __tipc_sendstream+0x1330/0x1330 [ 2024.662627][T18521] tipc_setsockopt+0x6b8/0x960 [ 2024.667557][T18521] ? tipc_shutdown+0x560/0x560 [ 2024.672403][T18521] ? aa_sock_opt_perm+0x74/0x100 [ 2024.677500][T18521] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 2024.683140][T18521] ? security_socket_setsockopt+0x7a/0xa0 [ 2024.688941][T18521] ? tipc_shutdown+0x560/0x560 [ 2024.693741][T18521] __sys_setsockopt+0x2bf/0x3d0 [ 2024.698642][T18521] __x64_sys_setsockopt+0xb1/0xc0 [ 2024.703706][T18521] do_syscall_64+0x4c/0xa0 [ 2024.708161][T18521] ? clear_bhb_loop+0x60/0xb0 [ 2024.712884][T18521] ? clear_bhb_loop+0x60/0xb0 [ 2024.717596][T18521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2024.723524][T18521] RIP: 0033:0x7fc7adb9fb19 [ 2024.727981][T18521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2024.747643][T18521] RSP: 002b:00007fc7aeae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2024.756099][T18521] RAX: ffffffffffffffda RBX: 00007fc7ade25fa0 RCX: 00007fc7adb9fb19 [ 2024.764103][T18521] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 2024.772116][T18521] RBP: 00007fc7adc37b70 R08: 0000000000000010 R09: 0000000000000000 [ 2024.780111][T18521] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 2024.788106][T18521] R13: 00007fc7ade26038 R14: 00007fc7ade25fa0 R15: 00007ffd89e85038 [ 2024.796121][T18521] [ 2026.416476][T18539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2026.470596][T18539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.878788][T17829] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2027.038738][ T2044] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2027.718960][ T2044] usb 3-1: Using ep0 maxpacket: 8 [ 2027.725884][T17829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2027.738806][ T2044] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 2027.757511][T17829] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 2027.775997][ T2044] usb 3-1: config 0 has no interface number 0 [ 2027.813336][ T2044] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2027.827912][T17829] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2027.887067][ T2044] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 2027.919715][T17829] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 2027.964700][ T2044] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 2027.980616][T17829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.031669][T17829] usb 6-1: Product: syz [ 2028.042929][ T2044] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2028.069222][T17829] usb 6-1: Manufacturer: syz [ 2028.094465][T17829] usb 6-1: SerialNumber: syz [ 2028.135552][ T2044] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2028.154585][T18543] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2028.170515][T17829] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2028.210948][ T2044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.243142][T17829] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2028.269394][ T2044] usb 3-1: Product: syz [ 2028.290644][ T2044] usb 3-1: Manufacturer: syz [ 2028.308640][T17829] usbserial_generic 6-1:1.0: generic converter detected [ 2028.325054][ T2044] usb 3-1: SerialNumber: syz [ 2028.375980][T17829] usb 6-1: generic converter now attached to ttyUSB0 [ 2028.400283][ T2044] usb 3-1: config 0 descriptor?? [ 2028.456293][ T2044] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 2028.477065][T17829] usb 6-1: USB disconnect, device number 51 [ 2028.508012][T17829] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 2028.557655][T17829] usbserial_generic 6-1:1.0: device disconnected [ 2030.260441][ T4376] usb 3-1: USB disconnect, device number 85 [ 2030.414491][T18574] tipc: Started in network mode [ 2030.420278][T18574] tipc: Node identity 4, cluster identity 4711 [ 2030.426552][T18574] tipc: Node number set to 4 [ 2030.648839][T16341] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 2030.664017][T18575] netlink: 400 bytes leftover after parsing attributes in process `syz.5.3069'. [ 2030.826510][T18577] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 2030.868833][T16341] usb 10-1: Using ep0 maxpacket: 16 [ 2030.892065][T16341] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2031.752836][T18581] CacheFiles: No cache directory specified [ 2031.898965][T16341] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2031.907094][T16341] usb 10-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 2031.916509][T16341] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.932091][T18578] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2033.248659][T16341] usb 10-1: config 0 descriptor?? [ 2034.998976][T16341] usb 10-1: can't set config #0, error -71 [ 2035.074986][T16341] usb 10-1: USB disconnect, device number 40 [ 2038.016768][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.050416][T18608] gadgetfs: bound to dummy_udc driver [ 2038.068665][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.123914][T18610] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2038.132971][T18610] overlayfs: missing 'lowerdir' [ 2040.389295][T18637] CacheFiles: Empty directory specified [ 2040.395774][T18637] CacheFiles: No cache directory specified [ 2040.508841][T11615] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2040.727793][T11615] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2040.822920][T11615] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2040.862949][T11615] usb 10-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 2040.888642][T11615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2040.897197][T11615] usb 10-1: Product: syz [ 2040.906356][T11615] usb 10-1: Manufacturer: syz [ 2040.950387][T11615] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 2041.061343][T18633] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2044.833341][T17829] usb 10-1: USB disconnect, device number 41 [ 2049.112721][T18682] ip_tables: iptables: counters copy to user failed while replacing table [ 2051.687783][T18691] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 2051.687783][T18691] [ 2051.702030][T18691] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 2051.717307][T18691] CIFS: Attempting to mount \\127.0.0.1\share [ 2052.041919][T18691] CIFS: VFS: cifs_mount failed w/return code = -112 [ 2054.784802][T18722] CacheFiles: Empty directory specified [ 2054.791730][T18722] CacheFiles: No cache directory specified [ 2055.754735][T18718] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2056.763355][T18735] device bridge1 entered promiscuous mode [ 2057.373830][T18743] ip_tables: iptables: counters copy to user failed while replacing table [ 2060.356734][T18764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.365858][T18764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2062.594724][T18779] loop4: detected capacity change from 0 to 1024 [ 2064.093009][T18779] EXT4-fs: Ignoring removed bh option [ 2064.190606][T18795] CacheFiles: Empty directory specified [ 2064.196781][T18795] CacheFiles: No cache directory specified [ 2064.337600][T18785] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2064.374695][T18794] udevd[18794]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 2064.474788][T18779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2064.477220][T18794] udevd[18794]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 2064.494628][T18779] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2065.427034][ T27] audit: type=1800 audit(1794101679.467:971): pid=18800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3116" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 2065.553220][T14918] EXT4-fs (loop4): unmounting filesystem. [ 2065.563071][ T27] audit: type=1800 audit(1794101679.467:972): pid=18804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3116" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 2065.665546][T18807] ip_tables: iptables: counters copy to user failed while replacing table [ 2065.693893][T18794] udevd[18794]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 2065.767400][T18794] udevd[18794]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 2068.178404][T18827] device bridge1 entered promiscuous mode [ 2070.825432][T18841] rt1719: probe of 0-0004 failed with error -5 [ 2070.833409][T18841] i2c i2c-0: new_device: Instantiated device rt1719 at 0x04 [ 2074.474691][T18870] ip_tables: iptables: counters copy to user failed while replacing table [ 2078.431236][T18881] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2085.764369][T18917] blktrace: Concurrent blktraces are not allowed on loop4 [ 2086.531244][ T4284] Bluetooth: Wrong link type (-22) [ 2087.498969][T18933] device bridge2 entered promiscuous mode [ 2089.018945][T18935] CacheFiles: Failed to register: -95 [ 2089.219216][T18928] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2089.609581][T18941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2089.692478][T18943] loop4: detected capacity change from 0 to 512 [ 2089.743438][T18941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2090.201152][T18944] udevd[18944]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 2090.305307][T18943] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 2090.389381][T18943] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2090.492067][T18943] EXT4-fs (loop4): 1 truncate cleaned up [ 2090.514780][T18943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2090.649532][T18955] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3153'. [ 2091.307041][T18967] ip_tables: iptables: counters copy to user failed while replacing table [ 2094.331460][T14918] EXT4-fs (loop4): unmounting filesystem. [ 2094.447173][T18973] udevd[18973]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 2094.696594][T18979] device bridge1 entered promiscuous mode [ 2096.392779][T18973] udevd[18973]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 2096.605331][T18986] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 2097.635628][T18996] CacheFiles: Failed to register: -95 [ 2098.749193][T18989] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2098.827226][T18988] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2098.851453][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.857973][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.219065][T19007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2099.286054][T19007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2100.568401][T19024] loop5: detected capacity change from 0 to 8 [ 2100.861002][T18973] udevd[18973]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 2101.243632][T19025] tmpfs: Unknown parameter 'grpquota' [ 2101.342416][T19024] SQUASHFS error: lzo decompression failed, data probably corrupt [ 2101.519499][T19024] SQUASHFS error: Failed to read block 0x28d: -5 [ 2101.593330][T19024] SQUASHFS error: Unable to read metadata cache entry [28b] [ 2101.631522][T19024] SQUASHFS error: Unable to read inode 0x11f [ 2101.718799][T18973] udevd[18973]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 2101.762517][T19036] ip_tables: iptables: counters copy to user failed while replacing table [ 2101.821741][T18973] udevd[18973]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 2102.252011][T19043] kernel profiling enabled (shift: 23) [ 2102.298453][T19043] loop5: detected capacity change from 0 to 128 [ 2104.263066][T18973] udevd[18973]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 2104.552858][T19043] omfs: sysblock size (-58445445) is out of range [ 2104.948470][T18973] udevd[18973]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 2105.023073][T18973] udevd[18973]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 2105.793708][T19052] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2106.679075][T19058] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2107.468779][T16341] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 2108.328675][T16341] usb 10-1: Using ep0 maxpacket: 32 [ 2108.336815][T16341] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2108.451464][T16341] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2108.492689][T16341] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2108.536542][T16341] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.604512][T16341] usb 10-1: config 0 descriptor?? [ 2110.315866][T16341] usbhid 10-1:0.0: can't add hid device: -71 [ 2110.326639][T16341] usbhid: probe of 10-1:0.0 failed with error -71 [ 2110.420468][T16341] usb 10-1: USB disconnect, device number 42 [ 2110.712998][T19094] tmpfs: Unknown parameter 'grpquota' [ 2113.678054][T19110] loop9: detected capacity change from 0 to 8 [ 2115.264676][T18973] udevd[18973]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 2115.714308][T19110] SQUASHFS error: lzo decompression failed, data probably corrupt [ 2115.831452][T19109] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2115.894262][T19110] SQUASHFS error: Failed to read block 0x28d: -5 [ 2115.959454][T19110] SQUASHFS error: Unable to read metadata cache entry [28b] [ 2115.966832][T19110] SQUASHFS error: Unable to read inode 0x11f [ 2116.517286][T19117] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2116.688359][T18973] udevd[18973]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 2116.761225][T18973] udevd[18973]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 2117.368652][ T22] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2117.568770][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 2117.576270][ T22] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2117.690118][ T22] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2117.761645][ T22] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2117.828643][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.869569][ T22] usb 6-1: config 0 descriptor?? [ 2118.066877][T19141] ip_tables: iptables: counters copy to user failed while replacing table [ 2120.716591][ T22] usbhid 6-1:0.0: can't add hid device: -71 [ 2120.729069][ T22] usbhid: probe of 6-1:0.0 failed with error -71 [ 2120.737619][ T22] usb 6-1: USB disconnect, device number 52 [ 2120.977224][ T27] audit: type=1326 audit(1794101735.087:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.5.3201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7adb9fb19 code=0x7ffc0000 [ 2121.038666][T19161] tipc: Enabling of bearer rejected, failed to enable media [ 2121.057691][T19161] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 2121.822789][ T27] audit: type=1326 audit(1794101735.087:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.5.3201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7adb9fb19 code=0x7ffc0000 [ 2121.846980][ T27] audit: type=1326 audit(1794101735.087:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.5.3201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7adb9fb19 code=0x7ffc0000 [ 2121.871163][ T27] audit: type=1326 audit(1794101735.087:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.5.3201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7adb9fb19 code=0x7ffc0000 [ 2121.895507][ T27] audit: type=1326 audit(1794101735.097:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.5.3201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7adb9f7ab code=0x7ffc0000 [ 2121.978899][ T27] audit: type=1326 audit(1794101735.097:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.5.3201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7adb9f7ab code=0x7ffc0000 [ 2122.014197][ T27] audit: type=1326 audit(1794101735.097:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.5.3201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7adb9f7ab code=0x7ffc0000 [ 2122.097977][ T27] audit: type=1326 audit(1794101735.097:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.5.3201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7adb9f7ab code=0x7ffc0000 [ 2122.612138][ T27] audit: type=1326 audit(1794101735.097:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.5.3201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7adb9f7ab code=0x7ffc0000 [ 2122.730489][ T27] audit: type=1326 audit(1794101735.097:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.5.3201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7adb9f7ab code=0x7ffc0000 [ 2122.908730][T16341] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2123.118676][T16341] usb 6-1: Using ep0 maxpacket: 16 [ 2123.132854][T16341] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2123.209680][T16341] usb 6-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 2124.062643][T16341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.124135][T16341] usb 6-1: Product: syz [ 2124.128379][T16341] usb 6-1: Manufacturer: syz [ 2124.171960][T16341] usb 6-1: SerialNumber: syz [ 2124.248732][T16341] usb 6-1: can't set config #1, error -71 [ 2124.286238][T16341] usb 6-1: USB disconnect, device number 53 [ 2126.289691][T19194] ip_tables: iptables: counters copy to user failed while replacing table [ 2126.608777][T16341] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 2126.719307][T19207] tmpfs: Unknown parameter 'grpquota' [ 2127.471623][T16341] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2127.505886][T16341] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 2127.546324][T16341] usb 6-1: Product: syz [ 2127.569522][T16341] usb 6-1: Manufacturer: syz [ 2127.574179][T16341] usb 6-1: SerialNumber: syz [ 2127.650397][T16341] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 2128.008676][ T4376] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2128.489311][T19199] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 2128.744993][T19221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2129.146796][T19221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2129.162761][T16341] vp7045: USB control message 'in' went wrong. [ 2129.178963][T16341] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2129.242690][T16341] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 2129.288675][ T4376] usb 3-1: Using ep0 maxpacket: 32 [ 2129.299517][ T4376] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2129.311318][T16341] usb 6-1: USB disconnect, device number 54 [ 2129.376640][ T4376] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2129.404110][ T4376] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2129.417033][ T4376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.490622][ T4376] usb 3-1: config 0 descriptor?? [ 2129.665958][T19234] tipc: Enabling of bearer rejected, failed to enable media [ 2129.696902][T19234] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 2133.081725][ T4376] usbhid 3-1:0.0: can't add hid device: -71 [ 2133.087754][ T4376] usbhid: probe of 3-1:0.0 failed with error -71 [ 2133.943512][ T4376] usb 3-1: USB disconnect, device number 86 [ 2134.169479][T19256] ip_tables: iptables: counters copy to user failed while replacing table [ 2134.462844][T19262] tmpfs: Unknown parameter 'grpquota' [ 2137.567308][T19275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2137.577499][T19275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2137.599182][T19275] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 2137.619876][T19275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2137.634230][T19275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2137.923469][T19288] device bridge3 entered promiscuous mode [ 2138.120424][ T4376] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 2138.350043][ T4376] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2138.416473][ T4376] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 2140.753799][ T4376] usb 6-1: Product: syz [ 2140.758133][ T4376] usb 6-1: Manufacturer: syz [ 2140.766785][ T4376] usb 6-1: SerialNumber: syz [ 2140.814574][ T4376] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 2141.323201][ T4376] vp7045: USB control message 'out' went wrong. [ 2141.329677][ T4376] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2141.340492][ T4376] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 2141.359499][ T4376] usb 6-1: USB disconnect, device number 55 [ 2141.476703][T19296] device bridge1 entered promiscuous mode [ 2144.308090][T12645] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2144.558628][T12645] usb 3-1: Using ep0 maxpacket: 32 [ 2144.600184][T12645] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2144.628891][T12645] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2144.642299][T12645] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2144.664448][T12645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.680793][T19310] tmpfs: Unknown parameter 'grpquota' [ 2144.691403][T12645] usb 3-1: config 0 descriptor?? [ 2144.900591][T19322] ip_tables: iptables: counters copy to user failed while replacing table [ 2149.225115][T12645] usbhid 3-1:0.0: can't add hid device: -71 [ 2149.248638][T12645] usbhid: probe of 3-1:0.0 failed with error -71 [ 2149.301163][T12645] usb 3-1: USB disconnect, device number 87 [ 2152.259014][T16341] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 2152.331573][T19346] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2152.862998][T16341] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2152.879119][T16341] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 2152.894806][T16341] usb 6-1: Product: syz [ 2152.904615][T16341] usb 6-1: Manufacturer: syz [ 2152.910914][T16341] usb 6-1: SerialNumber: syz [ 2152.928308][T16341] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 2153.048700][T19374] rxe_eth0 speed is unknown, defaulting to 1000 [ 2153.163302][T19374] lo speed is unknown, defaulting to 1000 [ 2153.170253][T19374] hsr0 speed is unknown, defaulting to 1000 [ 2153.260515][T19345] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 2153.640483][T19377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2153.687968][T19377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2154.254662][T16341] vp7045: USB control message 'out' went wrong. [ 2154.262636][T16341] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2154.308453][T16341] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 2154.478327][T19389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2154.489823][T19389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.858055][T16341] usb 6-1: USB disconnect, device number 56 [ 2157.797410][T19403] ip_tables: iptables: counters copy to user failed while replacing table [ 2157.817159][T19406] loop5: detected capacity change from 0 to 1024 [ 2157.827707][T19278] udevd[19278]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 2157.838481][T19406] EXT4-fs: Ignoring removed bh option [ 2157.972644][T19406] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2157.985896][T19406] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2158.487422][T19419] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.3254: lblock 3 mapped to illegal pblock 3 (length 3) [ 2158.510368][T19419] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 2158.522989][T19419] EXT4-fs (loop5): This should not happen!! Data will be lost [ 2158.522989][T19419] [ 2158.551772][T19419] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3254: bg 0: block 112: padding at end of block bitmap is not set [ 2158.609589][T19419] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 2158.622787][T19419] EXT4-fs (loop5): This should not happen!! Data will be lost [ 2158.622787][T19419] [ 2158.632696][T19419] EXT4-fs (loop5): Total free blocks count 0 [ 2158.640285][T19419] EXT4-fs (loop5): Free/Dirty block details [ 2158.646511][T19419] EXT4-fs (loop5): free_blocks=0 [ 2158.651899][T19419] EXT4-fs (loop5): dirty_blocks=64 [ 2158.657157][T19419] EXT4-fs (loop5): Block reservation details [ 2159.010089][ T77] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 2160.012900][T19278] udevd[19278]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 2160.071548][T19278] udevd[19278]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 2160.213435][T19436] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3261'. [ 2160.292153][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.305139][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.966817][T19430] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2161.568698][ T7] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 2161.763203][ T7] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2161.783085][ T7] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 2161.805229][ T7] usb 6-1: Product: syz [ 2161.854591][ T7] usb 6-1: Manufacturer: syz [ 2161.860098][ T7] usb 6-1: SerialNumber: syz [ 2161.881201][ T7] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 2162.157456][T19447] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 2162.172903][T19447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.210708][T19447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2162.265510][ T7] vp7045: USB control message 'out' went wrong. [ 2162.278807][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2162.290636][T19454] tmpfs: Unknown parameter 'grpquota' [ 2162.303167][ T7] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 2162.328336][ T7] usb 6-1: USB disconnect, device number 57 [ 2162.638665][T14788] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 2162.659088][ T4352] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2164.488716][T14788] usb 10-1: Using ep0 maxpacket: 32 [ 2164.496196][ T4352] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2164.512310][T14788] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2164.548725][ T4352] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 2164.574765][T14788] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2164.597757][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2164.614828][T14788] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.624615][ T4352] usb 3-1: Product: syz [ 2164.633954][T14788] usb 10-1: Product: syz [ 2164.638277][T14788] usb 10-1: Manufacturer: syz [ 2165.465239][ T4352] usb 3-1: Manufacturer: syz [ 2165.512991][T14788] usb 10-1: SerialNumber: syz [ 2165.566569][T14788] usb 10-1: config 0 descriptor?? [ 2165.749860][T19474] ip_tables: iptables: counters copy to user failed while replacing table [ 2166.258664][T14788] usb 10-1: can't set config #0, error -71 [ 2166.270946][T14788] usb 10-1: USB disconnect, device number 43 [ 2166.339254][ T4352] usb 3-1: can't set config #1, error -71 [ 2166.351467][ T4352] usb 3-1: USB disconnect, device number 88 [ 2166.492586][T19490] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 2167.314577][T19496] loop9: detected capacity change from 0 to 1024 [ 2167.329207][T19496] EXT4-fs: Ignoring removed bh option [ 2167.359713][T19496] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2167.376890][T19496] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2167.748907][T19505] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: block 3: comm syz.9.3274: lblock 3 mapped to illegal pblock 3 (length 3) [ 2167.773360][T19505] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 2167.788438][T19505] EXT4-fs (loop9): This should not happen!! Data will be lost [ 2167.788438][T19505] [ 2167.810068][T19505] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3274: bg 0: block 112: padding at end of block bitmap is not set [ 2167.831178][T19505] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 2167.843770][T19505] EXT4-fs (loop9): This should not happen!! Data will be lost [ 2167.843770][T19505] [ 2167.853912][T19505] EXT4-fs (loop9): Total free blocks count 0 [ 2167.860077][T19505] EXT4-fs (loop9): Free/Dirty block details [ 2167.866149][T19505] EXT4-fs (loop9): free_blocks=0 [ 2167.875378][T19505] EXT4-fs (loop9): dirty_blocks=64 [ 2167.880757][T19505] EXT4-fs (loop9): Block reservation details [ 2168.012363][T19477] udevd[19477]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 2168.258860][ T77] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 2168.334715][T19477] udevd[19477]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 2168.392050][T19477] udevd[19477]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 2169.116352][T19509] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2172.845891][T19542] device bridge2 entered promiscuous mode [ 2174.794854][T19537] loop9: detected capacity change from 0 to 2048 [ 2174.806825][T19549] udevd[19549]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 2174.871072][T19537] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 2174.897827][T19537] UDF-fs: Scanning with blocksize 512 failed [ 2174.969974][T19544] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3281'. [ 2175.028721][ T2044] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2175.117727][T19543] orangefs_mount: mount request failed with -4 [ 2175.465424][T19537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2175.590798][ T2044] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2175.641326][T19553] ip_tables: iptables: counters copy to user failed while replacing table [ 2175.662850][ T2044] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 2175.738591][ T2044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2175.818663][ T2044] usb 3-1: Product: syz [ 2175.822898][ T2044] usb 3-1: Manufacturer: syz [ 2175.899904][ T2044] usb 3-1: can't set config #1, error -71 [ 2175.942010][ T2044] usb 3-1: USB disconnect, device number 89 [ 2176.000984][T19548] udevd[19548]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 2176.055525][T19550] udevd[19550]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 2179.351466][T19588] tmpfs: Unknown parameter 'grpquota' [ 2180.125614][T19583] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2180.629409][T19601] device bridge2 entered promiscuous mode [ 2184.119131][T19604] ip_tables: iptables: counters copy to user failed while replacing table [ 2184.584354][T19613] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3300'. [ 2185.236715][T19611] orangefs_mount: mount request failed with -4 [ 2185.421324][T19616] loop4: detected capacity change from 0 to 512 [ 2186.532158][T19606] udevd[19606]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 2186.552408][T19616] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2186.646612][T19616] EXT4-fs (loop4): 1 truncate cleaned up [ 2187.699247][T19616] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2188.287052][T14918] EXT4-fs (loop4): unmounting filesystem. [ 2188.391618][T19606] udevd[19606]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 2188.435047][T19633] udevd[19633]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 2189.663419][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 2189.663436][ T27] audit: type=1326 audit(1794101803.777:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.3309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048239fb19 code=0x7ffc0000 [ 2189.800997][T19653] device bridge3 entered promiscuous mode [ 2191.397799][ T27] audit: type=1326 audit(1794101803.777:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.3309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f048239fb19 code=0x7ffc0000 [ 2191.422176][ T27] audit: type=1326 audit(1794101803.777:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.3309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048239fb19 code=0x7ffc0000 [ 2191.447505][ T27] audit: type=1326 audit(1794101803.777:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.3309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f048239f7ab code=0x7ffc0000 [ 2191.471866][ T27] audit: type=1326 audit(1794101803.777:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.3309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f048239f7ab code=0x7ffc0000 [ 2191.496391][ T27] audit: type=1326 audit(1794101803.777:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.3309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f048239f7ab code=0x7ffc0000 [ 2191.520889][ T27] audit: type=1326 audit(1794101803.777:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.3309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f048239f7ab code=0x7ffc0000 [ 2191.548647][ T27] audit: type=1326 audit(1794101803.777:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.3309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f048239f7ab code=0x7ffc0000 [ 2191.575467][ T27] audit: type=1326 audit(1794101803.787:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.3309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f048239f7ab code=0x7ffc0000 [ 2191.614209][T19658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2191.718686][T19649] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2192.016084][ T27] audit: type=1326 audit(1794101803.787:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19645 comm="syz.2.3309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f048239f7ab code=0x7ffc0000 [ 2192.252745][T19658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2192.558779][ T7] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2192.639646][T19668] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3312'. [ 2193.378629][T19667] orangefs_mount: mount request failed with -4 [ 2195.272997][T19674] ip_tables: iptables: counters copy to user failed while replacing table [ 2195.581054][T19680] bridge0: port 3(netdevsim0) entered blocking state [ 2195.588403][T19680] bridge0: port 3(netdevsim0) entered disabled state [ 2195.598376][T19680] device netdevsim0 entered promiscuous mode [ 2195.605566][T19680] bridge0: port 3(netdevsim0) entered blocking state [ 2195.612932][T19680] bridge0: port 3(netdevsim0) entered forwarding state [ 2195.660081][T19684] loop5: detected capacity change from 0 to 512 [ 2195.688829][T19678] udevd[19678]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 2195.700604][T19684] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2195.765858][T19686] loop2: detected capacity change from 0 to 8 [ 2195.829332][T19684] EXT4-fs (loop5): 1 truncate cleaned up [ 2195.842671][T19684] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2195.847165][T19678] udevd[19678]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2195.910574][T19686] SQUASHFS error: lzo decompression failed, data probably corrupt [ 2195.979913][T19686] SQUASHFS error: Failed to read block 0x28d: -5 [ 2196.122380][T19686] SQUASHFS error: Unable to read metadata cache entry [28b] [ 2196.270438][T19686] SQUASHFS error: Unable to read inode 0x11f [ 2196.839615][T19678] udevd[19678]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2196.883350][T19678] udevd[19678]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2197.064115][T19701] loop2: detected capacity change from 0 to 128 [ 2197.081972][T19701] omfs: sysblock size (-58445445) is out of range [ 2197.136605][T19678] udevd[19678]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2197.369110][T19678] udevd[19678]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2197.451424][T19678] udevd[19678]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2197.695955][T15597] EXT4-fs (loop5): unmounting filesystem. [ 2197.760340][T19678] udevd[19678]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 2197.837159][T19678] udevd[19678]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 2199.493693][T19711] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2199.657253][T19721] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3326'. [ 2200.376245][T19720] orangefs_mount: mount request failed with -4 [ 2200.659379][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 2200.659396][ T27] audit: type=1326 audit(1794101814.777:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19722 comm="syz.0.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca039fb19 code=0x7ffc0000 [ 2200.816306][ T27] audit: type=1326 audit(1794101814.837:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19722 comm="syz.0.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ca039fb19 code=0x7ffc0000 [ 2200.845235][ T27] audit: type=1326 audit(1794101814.837:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19722 comm="syz.0.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca039fb19 code=0x7ffc0000 [ 2200.907025][ T27] audit: type=1326 audit(1794101814.837:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19722 comm="syz.0.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca039fb19 code=0x7ffc0000 [ 2200.931759][ T27] audit: type=1326 audit(1794101814.847:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19722 comm="syz.0.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ca039f7ab code=0x7ffc0000 [ 2200.956651][ T27] audit: type=1326 audit(1794101814.847:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19722 comm="syz.0.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ca039f7ab code=0x7ffc0000 [ 2201.471931][T19723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2201.493375][T19723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2201.505700][ T27] audit: type=1326 audit(1794101814.847:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19722 comm="syz.0.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ca039f7ab code=0x7ffc0000 [ 2201.569076][ T27] audit: type=1326 audit(1794101814.847:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19722 comm="syz.0.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ca039f7ab code=0x7ffc0000 [ 2201.620378][T19731] ip_tables: iptables: counters copy to user failed while replacing table [ 2201.689335][ T27] audit: type=1326 audit(1794101814.847:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19722 comm="syz.0.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ca039f7ab code=0x7ffc0000 [ 2201.713839][ T27] audit: type=1326 audit(1794101814.847:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19722 comm="syz.0.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ca039f7ab code=0x7ffc0000 [ 2201.917895][T19736] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 2206.599008][T13192] rpcbind: server 127.0.0.1 not responding, timed out [ 2208.499771][T19774] sctp: failed to load transform for md5: -2 [ 2209.530287][T19789] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3341'. [ 2210.234452][T19788] orangefs_mount: mount request failed with -4 [ 2210.898087][T19790] ip_tables: iptables: counters copy to user failed while replacing table [ 2211.317126][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 2211.317143][ T27] audit: type=1326 audit(1794101825.427:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.0.3342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca039fb19 code=0x7ffc0000 [ 2211.444274][ T27] audit: type=1326 audit(1794101825.467:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.0.3342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca039fb19 code=0x7ffc0000 [ 2211.498632][T14788] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2211.702226][ T27] audit: type=1326 audit(1794101825.467:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.0.3342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ca039fb19 code=0x7ffc0000 [ 2212.271882][ T27] audit: type=1326 audit(1794101825.467:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.0.3342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca039fb19 code=0x7ffc0000 [ 2212.296448][ T27] audit: type=1326 audit(1794101825.467:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.0.3342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca039fb19 code=0x7ffc0000 [ 2212.320903][ T27] audit: type=1326 audit(1794101825.467:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.0.3342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ca039f7ab code=0x7ffc0000 [ 2212.388885][ T27] audit: type=1326 audit(1794101825.467:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.0.3342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ca039f7ab code=0x7ffc0000 [ 2212.419408][T14788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2212.440078][T14788] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 2212.458531][T14788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2212.466609][T14788] usb 3-1: Product: syz [ 2212.496121][T14788] usb 3-1: Manufacturer: syz [ 2212.535725][ T27] audit: type=1326 audit(1794101825.467:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.0.3342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ca039f7ab code=0x7ffc0000 [ 2212.658639][ T27] audit: type=1326 audit(1794101825.467:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.0.3342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ca039f7ab code=0x7ffc0000 [ 2212.788619][ T27] audit: type=1326 audit(1794101825.467:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.0.3342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ca039f7ab code=0x7ffc0000 [ 2212.882873][T19798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2212.919269][T19798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2213.137302][T14788] usbhid 3-1:1.0: can't add hid device: -71 [ 2213.147946][T14788] usbhid: probe of 3-1:1.0 failed with error -71 [ 2213.206593][T14788] usb 3-1: USB disconnect, device number 91 [ 2214.618722][ T4877] rpcbind: server 127.0.0.1 not responding, timed out [ 2215.375283][T19816] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 2216.560861][T19819] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2217.851555][ C0] ================================================================== [ 2217.859690][ C0] BUG: KASAN: use-after-free in __xfrm_state_delete+0x3db/0x940 [ 2217.867475][ C0] Write of size 8 at addr ffff8880643e4428 by task swapper/0/0 [ 2217.875102][ C0] [ 2217.877510][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 2217.884570][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2217.894662][ C0] Call Trace: [ 2217.897973][ C0] [ 2217.900853][ C0] dump_stack_lvl+0x188/0x24e [ 2217.905584][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 2217.910662][ C0] ? show_regs_print_info+0x12/0x12 [ 2217.915910][ C0] ? load_image+0x410/0x410 [ 2217.920461][ C0] ? __virt_addr_valid+0x467/0x540 [ 2217.925712][ C0] ? __xfrm_state_delete+0x3db/0x940 [ 2217.931053][ C0] print_report+0xa8/0x210 [ 2217.935520][ C0] kasan_report+0x10b/0x140 [ 2217.940127][ C0] ? __xfrm_state_delete+0x3db/0x940 [ 2217.945472][ C0] __xfrm_state_delete+0x3db/0x940 [ 2217.950631][ C0] xfrm_timer_handler+0x10b/0x970 [ 2217.955768][ C0] ? xfrm_state_alloc+0x2a0/0x2a0 [ 2217.960840][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 2217.966794][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 2217.972047][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2217.977982][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2217.982879][ C0] __hrtimer_run_queues+0x522/0xc90 [ 2217.988239][ C0] ? xfrm_state_alloc+0x2a0/0x2a0 [ 2217.993427][ C0] ? hrtimer_interrupt+0x980/0x980 [ 2217.998597][ C0] hrtimer_run_softirq+0x173/0x290 [ 2218.003772][ C0] handle_softirqs+0x291/0x910 [ 2218.008662][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 2218.013589][ C0] ? do_softirq+0x210/0x210 [ 2218.018136][ C0] ? hrtimer_interrupt+0x775/0x980 [ 2218.023306][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 2218.028572][ C0] __irq_exit_rcu+0x13b/0x230 [ 2218.033301][ C0] ? irq_exit_rcu+0x20/0x20 [ 2218.037853][ C0] irq_exit_rcu+0x5/0x20 [ 2218.042143][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 2218.047826][ C0] [ 2218.050796][ C0] [ 2218.053763][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2218.059796][ C0] RIP: 0010:default_idle+0xb/0x10 [ 2218.064884][ C0] Code: 48 89 df e8 e7 7f 92 f7 e9 44 ff ff ff e8 0d 0b f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d d7 5b 65 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 2218.084567][ C0] RSP: 0018:ffffffff8d807da8 EFLAGS: 000002c2 [ 2218.090680][ C0] RAX: db67568c6e077e00 RBX: ffffffff8a415177 RCX: db67568c6e077e00 [ 2218.098691][ C0] RDX: 0000000000000001 RSI: ffffffff8aac1cc0 RDI: ffffffff8afe72a0 [ 2218.106732][ C0] RBP: ffffffff8d807ec8 R08: ffff8880b8c357db R09: 1ffff11017186afb [ 2218.114761][ C0] R10: dffffc0000000000 R11: ffffed1017186afc R12: 0000000000000000 [ 2218.122779][ C0] R13: dffffc0000000000 R14: ffffffff8d8bc740 R15: 1ffffffff1b00fc0 [ 2218.130849][ C0] ? default_idle_call+0x77/0xc0 [ 2218.135848][ C0] default_idle_call+0x84/0xc0 [ 2218.140659][ C0] do_idle+0x3a2/0x680 [ 2218.144782][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 2218.150062][ C0] cpu_startup_entry+0x3f/0x60 [ 2218.154886][ C0] rest_init+0x2dc/0x300 [ 2218.159172][ C0] ? time_init+0x33/0x33 [ 2218.163546][ C0] arch_call_rest_init+0xa/0xa [ 2218.168361][ C0] start_kernel+0x480/0x50d [ 2218.172907][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 2218.178884][ C0] [ 2218.181938][ C0] [ 2218.184297][ C0] Allocated by task 19616: [ 2218.188806][ C0] kasan_set_track+0x4b/0x70 [ 2218.193443][ C0] __kasan_slab_alloc+0x6b/0x80 [ 2218.198345][ C0] slab_post_alloc_hook+0x4b/0x490 [ 2218.203583][ C0] kmem_cache_alloc+0x18b/0x2f0 [ 2218.208489][ C0] xfrm_state_alloc+0x1e/0x2a0 [ 2218.213299][ C0] xfrm_state_find+0x1c62/0x28d0 [ 2218.218283][ C0] xfrm_resolve_and_create_bundle+0x7b7/0x2da0 [ 2218.224561][ C0] xfrm_lookup_with_ifid+0x265/0x1fc0 [ 2218.229989][ C0] xfrm_lookup_route+0x38/0x1b0 [ 2218.234900][ C0] rawv6_sendmsg+0xcb2/0x1710 [ 2218.239722][ C0] ____sys_sendmsg+0x5ed/0x9a0 [ 2218.244561][ C0] ___sys_sendmsg+0x2a2/0x360 [ 2218.249283][ C0] __sys_sendmmsg+0x2c3/0x510 [ 2218.254014][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 2218.258910][ C0] do_syscall_64+0x4c/0xa0 [ 2218.263398][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2218.269337][ C0] [ 2218.271700][ C0] Freed by task 7: [ 2218.275452][ C0] kasan_set_track+0x4b/0x70 [ 2218.280091][ C0] kasan_save_free_info+0x27/0x40 [ 2218.285158][ C0] ____kasan_slab_free+0x126/0x1f0 [ 2218.290325][ C0] slab_free_freelist_hook+0x133/0x1b0 [ 2218.295834][ C0] kmem_cache_free+0xf7/0x2a0 [ 2218.300560][ C0] xfrm_state_gc_task+0x7d6/0xa30 [ 2218.305650][ C0] process_one_work+0x8ab/0x1160 [ 2218.310700][ C0] worker_thread+0xaf5/0x12a0 [ 2218.315426][ C0] kthread+0x29d/0x330 [ 2218.319588][ C0] ret_from_fork+0x1f/0x30 [ 2218.324065][ C0] [ 2218.326417][ C0] The buggy address belongs to the object at ffff8880643e4400 [ 2218.326417][ C0] which belongs to the cache xfrm_state of size 848 [ 2218.340427][ C0] The buggy address is located 40 bytes inside of [ 2218.340427][ C0] 848-byte region [ffff8880643e4400, ffff8880643e4750) [ 2218.353674][ C0] [ 2218.356026][ C0] The buggy address belongs to the physical page: [ 2218.362540][ C0] page:ffffea000190f900 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880643e4000 pfn:0x643e4 [ 2218.374032][ C0] head:ffffea000190f900 order:2 compound_mapcount:0 compound_pincount:0 [ 2218.382393][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2218.390432][ C0] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff88801f6dd8c0 [ 2218.399054][ C0] raw: ffff8880643e4000 000000008010000f 00000001ffffffff 0000000000000000 [ 2218.407671][ C0] page dumped because: kasan: bad access detected [ 2218.414143][ C0] page_owner tracks the page as allocated [ 2218.419896][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 18943, tgid 18940 (syz.4.3153), ts 2090647592818, free_ts 2008698154708 [ 2218.440958][ C0] post_alloc_hook+0x173/0x1a0 [ 2218.445850][ C0] get_page_from_freelist+0x206b/0x2180 [ 2218.451472][ C0] __alloc_pages+0x1ec/0x4f0 [ 2218.456113][ C0] alloc_slab_page+0x5d/0x180 [ 2218.460838][ C0] new_slab+0x87/0x2d0 [ 2218.464949][ C0] ___slab_alloc+0xbc5/0x1240 [ 2218.469672][ C0] kmem_cache_alloc+0x111/0x2f0 [ 2218.474587][ C0] xfrm_state_alloc+0x1e/0x2a0 [ 2218.479394][ C0] xfrm_state_find+0x1c62/0x28d0 [ 2218.484369][ C0] xfrm_resolve_and_create_bundle+0x7b7/0x2da0 [ 2218.490571][ C0] xfrm_lookup_with_ifid+0x265/0x1fc0 [ 2218.495992][ C0] xfrm_lookup_route+0x38/0x1b0 [ 2218.500901][ C0] rawv6_sendmsg+0xcb2/0x1710 [ 2218.505664][ C0] ____sys_sendmsg+0x5ed/0x9a0 [ 2218.510492][ C0] ___sys_sendmsg+0x2a2/0x360 [ 2218.515217][ C0] __sys_sendmmsg+0x2c3/0x510 [ 2218.519938][ C0] page last free stack trace: [ 2218.524657][ C0] free_unref_page_prepare+0x8e5/0x9e0 [ 2218.530192][ C0] free_unref_page+0x2e/0x3f0 [ 2218.534926][ C0] __unfreeze_partials+0x188/0x1e0 [ 2218.540078][ C0] put_cpu_partial+0x17c/0x250 [ 2218.544886][ C0] qlist_free_all+0x76/0xe0 [ 2218.549442][ C0] kasan_quarantine_reduce+0x144/0x160 [ 2218.554968][ C0] __kasan_slab_alloc+0x1e/0x80 [ 2218.559863][ C0] slab_post_alloc_hook+0x4b/0x490 [ 2218.565013][ C0] kmem_cache_alloc+0x18b/0x2f0 [ 2218.569900][ C0] ptlock_alloc+0x1c/0x60 [ 2218.574334][ C0] pte_alloc_one+0xc0/0x310 [ 2218.578884][ C0] __pte_alloc+0x21/0x150 [ 2218.583262][ C0] handle_mm_fault+0x34b1/0x3d40 [ 2218.588244][ C0] do_user_addr_fault+0x5a9/0xbb0 [ 2218.593310][ C0] exc_page_fault+0x60/0x100 [ 2218.597969][ C0] asm_exc_page_fault+0x22/0x30 [ 2218.602869][ C0] [ 2218.605231][ C0] Memory state around the buggy address: [ 2218.610892][ C0] ffff8880643e4300: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 2218.618998][ C0] ffff8880643e4380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2218.627093][ C0] >ffff8880643e4400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2218.635385][ C0] ^ [ 2218.640792][ C0] ffff8880643e4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2218.648886][ C0] ffff8880643e4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2218.657012][ C0] ================================================================== [ 2218.665313][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2218.672538][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 2218.679636][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2218.689811][ C0] Call Trace: [ 2218.693157][ C0] [ 2218.696039][ C0] dump_stack_lvl+0x188/0x24e [ 2218.700769][ C0] ? memcpy+0x3c/0x60 [ 2218.704796][ C0] ? show_regs_print_info+0x12/0x12 [ 2218.710051][ C0] ? load_image+0x410/0x410 [ 2218.714604][ C0] panic+0x2d3/0x710 [ 2218.718567][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 2218.723112][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 2218.729059][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2218.735001][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2218.739897][ C0] ? print_memory_metadata+0x314/0x400 [ 2218.745413][ C0] check_panic_on_warn+0x80/0xa0 [ 2218.750480][ C0] ? __xfrm_state_delete+0x3db/0x940 [ 2218.755805][ C0] end_report+0x66/0x110 [ 2218.760103][ C0] kasan_report+0x118/0x140 [ 2218.764662][ C0] ? __xfrm_state_delete+0x3db/0x940 [ 2218.769993][ C0] __xfrm_state_delete+0x3db/0x940 [ 2218.775150][ C0] xfrm_timer_handler+0x10b/0x970 [ 2218.780228][ C0] ? xfrm_state_alloc+0x2a0/0x2a0 [ 2218.785293][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 2218.791239][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 2218.796479][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2218.802425][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2218.807323][ C0] __hrtimer_run_queues+0x522/0xc90 [ 2218.812564][ C0] ? xfrm_state_alloc+0x2a0/0x2a0 [ 2218.817630][ C0] ? hrtimer_interrupt+0x980/0x980 [ 2218.822794][ C0] hrtimer_run_softirq+0x173/0x290 [ 2218.827984][ C0] handle_softirqs+0x291/0x910 [ 2218.832790][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 2218.837685][ C0] ? do_softirq+0x210/0x210 [ 2218.842226][ C0] ? hrtimer_interrupt+0x775/0x980 [ 2218.847412][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 2218.852648][ C0] __irq_exit_rcu+0x13b/0x230 [ 2218.857362][ C0] ? irq_exit_rcu+0x20/0x20 [ 2218.861908][ C0] irq_exit_rcu+0x5/0x20 [ 2218.866196][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 2218.871871][ C0] [ 2218.874834][ C0] [ 2218.877796][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2218.883822][ C0] RIP: 0010:default_idle+0xb/0x10 [ 2218.888896][ C0] Code: 48 89 df e8 e7 7f 92 f7 e9 44 ff ff ff e8 0d 0b f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d d7 5b 65 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 2218.908551][ C0] RSP: 0018:ffffffff8d807da8 EFLAGS: 000002c2 [ 2218.914668][ C0] RAX: db67568c6e077e00 RBX: ffffffff8a415177 RCX: db67568c6e077e00 [ 2218.922682][ C0] RDX: 0000000000000001 RSI: ffffffff8aac1cc0 RDI: ffffffff8afe72a0 [ 2218.930699][ C0] RBP: ffffffff8d807ec8 R08: ffff8880b8c357db R09: 1ffff11017186afb [ 2218.938737][ C0] R10: dffffc0000000000 R11: ffffed1017186afc R12: 0000000000000000 [ 2218.946754][ C0] R13: dffffc0000000000 R14: ffffffff8d8bc740 R15: 1ffffffff1b00fc0 [ 2218.954775][ C0] ? default_idle_call+0x77/0xc0 [ 2218.959770][ C0] default_idle_call+0x84/0xc0 [ 2218.964582][ C0] do_idle+0x3a2/0x680 [ 2218.968701][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 2218.973973][ C0] cpu_startup_entry+0x3f/0x60 [ 2218.978787][ C0] rest_init+0x2dc/0x300 [ 2218.983084][ C0] ? time_init+0x33/0x33 [ 2218.987373][ C0] arch_call_rest_init+0xa/0xa [ 2218.992197][ C0] start_kernel+0x480/0x50d [ 2218.996764][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 2219.002715][ C0] [ 2219.005926][ C0] Kernel Offset: disabled [ 2219.010277][ C0] Rebooting in 86400 seconds..