last executing test programs: 21m20.635584239s ago: executing program 2 (id=8): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x2000000000006) lseek(r4, 0x8, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f000008c000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000060000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff28}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 21m16.735526884s ago: executing program 2 (id=10): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000084) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 21m13.815388375s ago: executing program 3 (id=13): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x2000000000006) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x6, 0x500, 0x6, 0x4, 0x0, @link_local, @dev={0xac, 0x14, 0x14, 0x28}, @link_local, @multicast2}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f000008c000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000060000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff28}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 21m10.343402294s ago: executing program 0 (id=1): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000700000000039500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@echo=0x7) syz_usb_connect$uac2(0x3, 0xb1, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x194f, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x8, 0x40, 0x81, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x87}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x2, 0x18, 0x1}, [@feature_unit={0x7, 0x24, 0x6, 0x4, 0x5, [0x2]}, @source_unit={0x8, 0x24, 0xa, 0x9, 0x3, 0x0, 0x80, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x1, 0x81, "c77e4f", "a2c9"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8, 0x3, '68'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x22e9, 0x341, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x62, 0xc, 0x8, {0x8, 0x25, 0x1, 0x80, 0x3, 0x4, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x4, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0x5, 0x2}}}}}}}}]}}, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000000000)=[{0xee, 0x4a11, 0x0, 0x0}], 0x1}) socket(0x23, 0x6, 0x3) syz_usb_connect$midi(0x3, 0xd7, &(0x7f0000000140)={{0x12, 0x1, 0x351, 0x0, 0x0, 0x0, 0x0, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x1, 0x1, 0x2, 0x90, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x5, 0x2, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x85, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x4, 0x7, [{0x4, 0xff}, {0x9, 0x8}, {0xb}, {0x4, 0xec}, {0x4, 0xf2}, {0x7f, 0x42}, {0x7, 0xfd}], 0xd8}, @midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x4, 0x0, [], 0x81}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x7, 0x1, [{0x5, 0x71}], 0x7}], [{{0x9, 0x5, 0x6, 0xc, 0x200, 0x0, 0x80, 0xaf, {0xe, 0x25, 0x1, 0xa, "b026680fa56b4508ca66"}}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x80, 0x0, {0xd, 0x25, 0x1, 0x9, "0d43a6f58fe89e2c77"}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x4, 0x4, 0x5, {0x10, 0x25, 0x1, 0xc, "0e65aac847a067114235b3a3"}}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xe4, 0x8, 0x5, {0x5, 0x25, 0x1, 0x1, '~'}}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x72, 0x81, 0x6, {0xb, 0x25, 0x1, 0x7, "821d413d3a13cd"}}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x2, 0x0, 0x5c, {0x9, 0x25, 0x1, 0x5, "23ca7eec48"}}}]}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000003a80)={0xa, 0x6, 0x310, 0x38, 0x8, 0x5, 0x20, 0x2}, 0x2f, &(0x7f0000000280)={0x5, 0xf, 0x2f, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x5, 0xff00, 0x3ff, [0xff00c0, 0x30, 0xc000, 0x0, 0x3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x40}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4c6d}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x40440c4) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a0101000000dd7ef200000000000a0000060900020073797a31000097feb75bc501b400000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r7, 0x0) sendmsg$inet(r5, &(0x7f0000003a40)={&(0x7f0000002700)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000002740)="951af2745b7de89b7280af89d10422c74a830e059317113ce2be6aaa813b302611ac1139d3a93bac9288061e0840aca947ba0f5e26e9f421e900833acf619b6657b1a6f221319cbbd76bba15a0c9e6fe3da2194b3133a9ec0cd364243cf84a193ddd87579e784cd4a367b37f18d765c57baa99eaebc3d6ab051fe12c", 0x7c}, {&(0x7f00000027c0)="fcf15bbb4d426530753da66cf401c979f962070740b8419e71a2ba553127be780803784623cb5cadb6236f72c681c9ad32c8319d820a217085fa974d4929ed88e3962d75da70d3ed8026742f6cdcfedb3f59f086da7fd46a6b544c5d7a", 0x5d}, {&(0x7f0000002840)="40a5702438678279a1474112564aa0ca47e6919e0dedccb193633b08683a4ca2c982170b32dfe5232f70d58f3c99a36716cdc59a21655f0e733358e0d3e145f13f9a8218d2b2e1ba282b63117da05645239e51", 0x53}, {0x0}, {&(0x7f0000002980)="9ad1c37122fc9d59b43ec1b972fb4fd13bfa84cb609869ef6434fc29975fc58e21e971d2ddbed5b67c73086ceb230c36019c0ff49366b9e56bc5da62c5b396a0817773660a10", 0x46}, {&(0x7f0000002a00)="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", 0x1000}], 0x6}, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r8, &(0x7f0000000680)={0xa, 0x4e22, 0xfffffffc, @private2, 0xfff}, 0x1c) 21m8.030581698s ago: executing program 3 (id=14): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb60400000000", 0xf8}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a", 0xb}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea184fd7a0a0f4d441763e30d1bc475502a1de1ffbc0e30c", 0x160}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6e", 0xc2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000000040)="7542473782798be019c27ed30b2b", 0xe}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2ba8ac448a37a5347342781c320dd5dcb867490334", 0x6a}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 21m7.820516895s ago: executing program 1 (id=15): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x74}}, 0x20048044) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) pipe(0x0) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r6], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x3}) 21m7.682564494s ago: executing program 2 (id=16): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x100000004) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000019080)=0x30) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r11, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) mmap(&(0x7f0000d61000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d62000/0x3000)=nil, 0x3000, 0x0, 0x1, 0x10000) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',\x00']) getsockname(r0, 0x0, &(0x7f0000000080)) 21m4.855175601s ago: executing program 1 (id=17): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000700000000039500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@echo=0x7) syz_usb_connect$uac2(0x3, 0xb1, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x194f, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x8, 0x40, 0x81, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x87}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x2, 0x18, 0x1}, [@feature_unit={0x7, 0x24, 0x6, 0x4, 0x5, [0x2]}, @source_unit={0x8, 0x24, 0xa, 0x9, 0x3, 0x0, 0x80, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x1, 0x81, "c77e4f", "a2c9"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8, 0x3, '68'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x22e9, 0x341, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x62, 0xc, 0x8, {0x8, 0x25, 0x1, 0x80, 0x3, 0x4, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x4, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0x5, 0x2}}}}}}}}]}}, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000000000)=[{0xee, 0x4a11, 0x0, 0x0}], 0x1}) socket(0x23, 0x6, 0x3) syz_usb_connect$midi(0x3, 0xd7, &(0x7f0000000140)={{0x12, 0x1, 0x351, 0x0, 0x0, 0x0, 0x0, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x1, 0x1, 0x2, 0x90, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x5, 0x2, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x85, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x4, 0x7, [{0x4, 0xff}, {0x9, 0x8}, {0xb}, {0x4, 0xec}, {0x4, 0xf2}, {0x7f, 0x42}, {0x7, 0xfd}], 0xd8}, @midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x4, 0x0, [], 0x81}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x7, 0x1, [{0x5, 0x71}], 0x7}], [{{0x9, 0x5, 0x6, 0xc, 0x200, 0x0, 0x80, 0xaf, {0xe, 0x25, 0x1, 0xa, "b026680fa56b4508ca66"}}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x80, 0x0, {0xd, 0x25, 0x1, 0x9, "0d43a6f58fe89e2c77"}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x4, 0x4, 0x5, {0x10, 0x25, 0x1, 0xc, "0e65aac847a067114235b3a3"}}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xe4, 0x8, 0x5, {0x5, 0x25, 0x1, 0x1, '~'}}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x72, 0x81, 0x6, {0xb, 0x25, 0x1, 0x7, "821d413d3a13cd"}}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x2, 0x0, 0x5c, {0x9, 0x25, 0x1, 0x5, "23ca7eec48"}}}]}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000003a80)={0xa, 0x6, 0x310, 0x38, 0x8, 0x5, 0x20, 0x2}, 0x2f, &(0x7f0000000280)={0x5, 0xf, 0x2f, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x5, 0xff00, 0x3ff, [0xff00c0, 0x30, 0xc000, 0x0, 0x3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x40}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4c6d}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x40440c4) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a0101000000dd7ef200000000000a0000060900020073797a31000097feb75bc501b400000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r7, 0x0) sendmsg$inet(r5, &(0x7f0000003a40)={&(0x7f0000002700)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000002740)="951af2745b7de89b7280af89d10422c74a830e059317113ce2be6aaa813b302611ac1139d3a93bac9288061e0840aca947ba0f5e26e9f421e900833acf619b6657b1a6f221319cbbd76bba15a0c9e6fe3da2194b3133a9ec0cd364243cf84a193ddd87579e784cd4a367b37f18d765c57baa99eaebc3d6ab051fe12c", 0x7c}, {&(0x7f00000027c0)="fcf15bbb4d426530753da66cf401c979f962070740b8419e71a2ba553127be780803784623cb5cadb6236f72c681c9ad32c8319d820a217085fa974d4929ed88e3962d75da70d3ed8026742f6cdcfedb3f59f086da7fd46a6b544c5d7a", 0x5d}, {&(0x7f0000002840)="40a5702438678279a1474112564aa0ca47e6919e0dedccb193633b08683a4ca2c982170b32dfe5232f70d58f3c99a36716cdc59a21655f0e733358e0d3e145f13f9a8218d2b2e1ba282b63117da05645239e51", 0x53}, {0x0}, {&(0x7f0000002980)="9ad1c37122fc9d59b43ec1b972fb4fd13bfa84cb609869ef6434fc29975fc58e21e971d2ddbed5b67c73086ceb230c36019c0ff49366b9e56bc5da62c5b396a0817773660a10", 0x46}, {&(0x7f0000002a00)="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", 0x1000}], 0x6}, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r8, &(0x7f0000000680)={0xa, 0x4e22, 0xfffffffc, @private2, 0xfff}, 0x1c) 21m3.644322771s ago: executing program 0 (id=18): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x2000000000006) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x6, 0x500, 0x6, 0x4, 0x0, @link_local, @dev={0xac, 0x14, 0x14, 0x28}, @link_local, @multicast2}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f000008c000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000060000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff28}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 20m57.629520644s ago: executing program 2 (id=19): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000700000000039500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@echo=0x7) syz_usb_connect$uac2(0x3, 0xb1, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x194f, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x8, 0x40, 0x81, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x87}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x2, 0x18, 0x1}, [@feature_unit={0x7, 0x24, 0x6, 0x4, 0x5, [0x2]}, @source_unit={0x8, 0x24, 0xa, 0x9, 0x3, 0x0, 0x80, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x1, 0x81, "c77e4f", "a2c9"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8, 0x3, '68'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x22e9, 0x341, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x62, 0xc, 0x8, {0x8, 0x25, 0x1, 0x80, 0x3, 0x4, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x4, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0x5, 0x2}}}}}}}}]}}, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000000000)=[{0xee, 0x4a11, 0x0, 0x0}], 0x1}) socket(0x23, 0x6, 0x3) syz_usb_connect$midi(0x3, 0xd7, &(0x7f0000000140)={{0x12, 0x1, 0x351, 0x0, 0x0, 0x0, 0x0, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x1, 0x1, 0x2, 0x90, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x5, 0x2, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x85, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x4, 0x7, [{0x4, 0xff}, {0x9, 0x8}, {0xb}, {0x4, 0xec}, {0x7f, 0x42}, {0x7, 0xfd}, {0x2, 0x5}], 0xd8}, @midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x4, 0x0, [], 0x81}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x7, 0x1, [{0x5, 0x71}], 0x7}], [{{0x9, 0x5, 0x6, 0xc, 0x200, 0x0, 0x80, 0xaf, {0xe, 0x25, 0x1, 0xa, "b026680fa56b4508ca66"}}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x80, 0x0, {0xd, 0x25, 0x1, 0x9, "0d43a6f58fe89e2c77"}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x4, 0x4, 0x5, {0x10, 0x25, 0x1, 0xc, "0e65aac847a067114235b3a3"}}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xe4, 0x8, 0x5, {0x5, 0x25, 0x1, 0x1, '~'}}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x72, 0x81, 0x6, {0xb, 0x25, 0x1, 0x7, "821d413d3a13cd"}}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x2, 0x0, 0x5c, {0x9, 0x25, 0x1, 0x5, "23ca7eec48"}}}]}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000003a80)={0xa, 0x6, 0x310, 0x38, 0x8, 0x5, 0x20, 0x2}, 0x2f, &(0x7f0000000280)={0x5, 0xf, 0x2f, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x5, 0xff00, 0x3ff, [0xff00c0, 0x30, 0xc000, 0x0, 0x3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x40}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4c6d}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x40440c4) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a0101000000dd7ef200000000000a0000060900020073797a31000097feb75bc501b400000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r7, 0x0) sendmsg$inet(r5, &(0x7f0000003a40)={&(0x7f0000002700)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000002740)="951af2745b7de89b7280af89d10422c74a830e059317113ce2be6aaa813b302611ac1139d3a93bac9288061e0840aca947ba0f5e26e9f421e900833acf619b6657b1a6f221319cbbd76bba15a0c9e6fe3da2194b3133a9ec0cd364243cf84a193ddd87579e784cd4a367b37f18d765c57baa99eaebc3d6ab051fe12c", 0x7c}, {&(0x7f00000027c0)="fcf15bbb4d426530753da66cf401c979f962070740b8419e71a2ba553127be780803784623cb5cadb6236f72c681c9ad32c8319d820a217085fa974d4929ed88e3962d75da70d3ed8026742f6cdcfedb3f59f086da7fd46a6b544c5d7a", 0x5d}, {&(0x7f0000002840)="40a5702438678279a1474112564aa0ca47e6919e0dedccb193633b08683a4ca2c982170b32dfe5232f70d58f3c99a36716cdc59a21655f0e733358e0d3e145f13f9a8218d2b2e1ba282b63117da05645239e51", 0x53}, {0x0}, {&(0x7f0000002980)="9ad1c37122fc9d59b43ec1b972fb4fd13bfa84cb609869ef6434fc29975fc58e21e971d2ddbed5b67c73086ceb230c36019c0ff49366b9e56bc5da62c5b396a0817773660a10", 0x46}, {&(0x7f0000002a00)="94448fb7102803783d2d1472a850a0980812a859dcc2d1a78dc3d38927a3ce8f7b95afb4b97c249dca2da03e7f0998d8fd3474029a0ed68b7c7ef9bbf8506e297dc94f710779defacd9a405774d7016c63bf7f608caa09a6de24abe8f87f87ae5253102cf1ca0f3dc50f4550291415fa87f3be7491ebd2e6d431dc4914561c29d8726bd7721ffa0f5df7be8886469bcc88d13650bcbc78823fba330d0d14a17f3ab6f4ba2332bd67bfad3cb9e48983110423c42937582a84e6e5ee89edcbf4644ee30df223280c6a09448af2eca9d022e5db43c3946cd5ccd247cef54d204c8591aad7996a4d46b59519ddafdb9a14106cf9e3ebc08d788b4df989a0c6d6f98adcea13c9472d37e8c389c9b1abdbd3211832527d84c2bb67b346954ebf4b1a23af1345873f00f1427d1d006c2d8fba9b5516b71513c7ef57f6aa0182847149335a150627e3543601ef8dfb9a123d740c7bba10f0effd39d9ccf0452e9ba14b119330e6827a792c333782380e3af2e12ae9aa8fa4b51c148e55328a2d21b78e3b6af676bb0e3aa8e6340eeefd912c26d43f77d0a90ad9658e31ac2ce8e0abef4bedc273ec387a9a1af35851162d64b44e9d4575220f898c12976f0d6acfa16e5c85478106101159f73df301f98bd9c7e07987dce0188f1e50a87af36cc93c87076d4ad52990118caed36d37849adbfe462c0968d9e1946687fd4d34ed388a973093deef9da5a1b90748af28dc8c28ab967403b18e1e8ec709ab34acc54f058f11e2d1a54ecc56feb5eb7fa62db7aeaf4f20d9aba54dce21dab450fabe42e30b2da4c102da214ac98c67eb3d673c69dc0f0ebcdab9bd83d6ad7455970c264dc408510a722018f3767706e163ee7f3c3953233b89c3444b21b9f70a0c60b209825cc0985f4921dabadfbbf6710937ba908b6fdef810c9e4c624652dcae64eff55a49e8ee9d822e8d333287104a0bfe118520b6c2300974221783e9e404996b51206a2ae7267ec1fc75121ddbf377ee59bf64f44bc13f1e2f72d29193d154fa803a052e55f4f00139e7c48660279b3640910d8a49a91e60994cb69067a44993c5a38fc21c48c0c9ffb26343a061876bc9c9c54580827f6cf26a0ed373916a8818dfa7981f5d4b72af8d04d3627986e1f2774ec269539baa222d0fdba74f44d043441f9f77316f39383b7f391ffd65956f3782788adc2689ad51785f18c043d35f3b9f9218522e7f56b9a373d0743e8f96fdc3ba488f7e3d45a29bd9c2f2239995fe86769c2c8c3368e9ed6f77739ef6ca5d77378ad72111032b089bc78f67a80eeeaa17606db6500e6b5b261c7dc24c20cd15eae7ed8d55cc2a0236ea0a0410af3ab82f1ef9d79c37658fb77ad7b3b77dffbb13252278401ad1d84ab0ae1ee0c2005ecc5ffcb4d99c92b3c1716ce41767c4217238e692866a1d029744fe225a2aff6d24c91d30c80238723ba1da8a84d8bf87d7244d31598b1939542a4d6bae51821e3d65e183950c76394ee31c5ef6f61068156620e63d67ba14a41a2f0d5f52795bfc14f254b4651f63d343f0fcf4c4a604a62d155aa591b8104287f3861f18787561726526421a21ec7aecd182de9cc67bcabafa4b1aefe17cfe3025648770b52ade0f2554de18a46a963c9e7d1e8e880c2120e1096e41042efd1b6b91dfb9a4a997553cfbdda9c999cc724b45f568ffca77c30c35f3cad5a0b4a6eed2ae8cb5edcd1cf97cc4bd3c981865c1fdc7a5e16e70cb533e99a7d6d6308d75f84bed4a094117b73013ee06813f5b4419c7e9890e4e4d6c9af14be2e5906fe65ce971a1ad100fbb152fc99c9422e150ec43df5ba63f64d28162ef962266404b45dbb542da6f0d931f3ddead370557923bb55db6865a0e94ffa307ef07dd103816df310b3ebe0a563220252c4074dba5555de0500395a53362fdf12bafdb879d84b2a8547820feeddf4a67f4fbb0b41f6f4fd8ddcdf5e3e1c228ac28f5500c4769abae346e9b17f66cfaa7f4c4ef77b717670ecf878421aadf770b288001d5817eb0529e277352901a31a9c04d4efa810101073c2d24737bb6992f2228a28cc62ea530f891d2c9e17b8cbd7e498138d56e799c5060364c8b36c26759065b1a995b83c63c580aad4786977395465db41c7cb2a95471841848c8434ef6a258cec2ec28a693907eac03cc996ca719020e32327db6879c950d9d10d159cbd37e2ce5619b7e978ac5293c6ec8d86f4d9d3df402b3db7065ff9175d32a0fa6e7e7a36672fdc5bc72e656b37e9c45cba08949f44f7ea3527d77a4acecac3d27c385730e0f805d5d84dca2d60b7536735751a602226d62203b9c6e30476a639159160e1fbdc0d1e71b33d76786ce9ee567d87c6b4e6fbc1659d4cc0e33c4a4bca8df0e851669d05abbac86865f44866f0bd3f2d276436667444498ad45bbe9ba02c542709019797cad9f9999bdc0bb1b9d05840f94cb7bbcc34cdd150c5b7e2a6c79b6ad6cdf2ec73e7f5b91694f76c1ef42f997b7ea1bc25d88fba6b5d7ab928261c945fc366742fbd6b11416721cd8b3249414b85518610b537ae207877f1d5bbfe0e0d0bf239444b98e7a51ce0de1e449301aad178ced08461867c6169fbeafdb13264fe00dd4c18da6d199c13090e6432bcd3e6c86d3fac042f1b4ca8f3b5c106f96edb12040628d32b9cca638d14aa4e65f51eeebf38ce9af3448eb0b58d9979cfbede7b03c8f393f7d6e26079a96a0b839d50b77684119c8d71a8eada6b28800833a7f6afac4642afe2e68f0f531748463d2f6c9e3f050dfe9845060363a837187851e97ee88433267f7ada0e56ab6d4a1c068e7377291815bc269f9a07b995cfdab430fda57eb433a0fa4503309d430ce046b9eb64b601a3b186477f6c3c4c478480a883345b02905d85f97f8e18ce2ca46f37284776f5267ad45a4458b3feac2b9f95dba33d544e67eb4f5c89e94954f6a7d1f93da8134b54cc927144cfed29bae7353e4e7a59daf0f49abe60c53e79fe8e9447f58d9c67f24d8c7d2e9a50617e5d5002742a6d40f9b1161983d6a4292049448ccd5602a438b26721c5f678a57fac07666c8b6261dfd115a58f6179bafafb968263c20bf12a76dccff824a172b379ac7fa4e97cd4773505a5e2ffc8c5001ddd1e8627901179a6b80c47aa48283f420445eb0a336eb5ebac3b787e09593e4f74ec38ae67379c25b4f0a0b78d68262a25ff26b59f9082a614f6178e8049b5d675959af13e9870eb460f90218694737e4c65a52d1e6697f9ec373dac6974abbbe71cc87de5d6ec1c209aabe240d72d3c0701024010900386851314b0f4f8f8e35b6110700ea4141ecef62425531f22e99344e0336229e04b38b066746869a75ba35b17dd34c5376baec3e47c5a9e3d6503c405609fdecf141b17af78db9ce6cfe360b7abd88eb970a2ecd482e5b235138389d7663ea8c11991856559f82377f87bd7ebce11dec249cc00a24193ddb9fad8e29a3e2f258e3d7feb332be074597be7ec2ca91898201f29bb66e9f936a11322e34659522ddcdd33cdb696103d462d023d1485fd77fd66a13ad5f24dc737b9533cdfcba63e1afd9f5e5aab3a2ab9dea1aa10c34311396d80801e9897b3f1ab8522dbdda0217e00fa9927d868c3c4e01c8b6ab32cb6ab9dfd50e074c4e2c69439cfa1fca46451c72a7746192d5cdebbaf7f2b1b56ccb7a2208dcda97fcfad28e000dfc4a4af9f5a22ff9467323365dcd4f8fae1d613af27cba5ecb3bbede94fdfd8b6196e924a30ea3cdbb2a8fe0d748d4a3bfa8619b2295873cbae24073c7cab879e0cfa407909cd2cd51ed7db59060cc131ebb29274538bd6555382b20aac36ca5245a801d25d072dc5e1bb926c4d42cd7036a622731abaae85848c5ed1a97d5b169aea12493739ac920a131a80e5a0f03a48fd8bdf43fef9c42f3b90ea4d936ec876e6dd49120b319b4ead48c2cd3bb6ffebbdd0b5f6cc9783fb1eeda4655d45948d98ba473e12637fe65d97d1ceca0c496bef1ac8370c42446f01a706c82507969e21e2a258d975cfe9cd02313a81717e0934418a05b7cb2ed382548704bad634caabd973cb99381b4df335a523bd7bf11e5d159ae569b2211afca5b2b242792619486d0d9c5f0852562766a9d16ca8569cf05bae6bcb961f1c8ad53a1576908b4b8b8a9f383d6c24c0a71dea97ddbbf8adb10f5e48fff152283df9c4ed4bedf4941492deac03f14abebc2a0ead084da8860adf6d8121eba91f7ff8f76f11482e0f1475368e326a266021732eb50a3507ef28a382ec230e2e77bc482d046e785678f0bfa570c96352bc52b28865257f3dda55a8261612ae722f2c66439aafd5f52f104b0d35e100c3637077698b528aefad25b9d970fa794d781dfeabf3b210659c99cbf7fb04c2d854ad47d40806398c93161e484492ae681cb105bc8477613d24474e3e2a64117669fd3c3228aecb9a77dce546f34bb8d0b301e4e12b4599599240db15947e918b89dec086ce3eac2c52d0f30b0aed407c1638eefbe2a00ea4fa014122d9e311af4c796891ea95a1abe118422dc0c50a16a38f5545cb98bd809d5c506981489359845ca3d698e645cecaa7c4baa952f0a405aca679ee86be671718551057bdfd9e521e8d6c85b94c42b529c79f8e01fd194b685defd93da942022fa2ac4f19f92c0552164f3ac5a063090b651230471fb7d46f5c5ebf3077c4e5dc28062e43d8902dc298b48668200c9b518365c8e367844fc24221e7e66824d9bf6ff0131d8c8360929ee44be4ec596328780ff6f4c9f213e597956877ceb073705f3154752efd156573d3f83b764cfaf5fc440ac1e70d9557a1a2906e4259323223245957cb9e2e4bd2b3ab378f0548ad081222d7c3018d31e489acd5d44b4d34724ce480bc2a4a1969287c541f17d83c8b47d9a412e432a0006d4cc1c96c57bb8b0ec6f9e15809d8357803468adcddb2f735d33369ae552a0e5518110d5f1638b4601ab2a446cc6c5577e696dc5b5772c7c0dbeddc19282859a3e3154598cd3fc9ffddfa26bec16952f5cd953556f3118eeaac416c2269ff16049b27b934779bea11152191de73fe7e0a670dd8fecec449a9271aedf80f26b907c6ce972f2111871297330ac8a6c3f0f72c1dee574c7c415c14214c0340a9c0a253c33a654a22cde9d85a478544c66dfdbbe7b4a9051c97754403e85d297ca80e83cd30a55d460231260b854b7d0dc02df41a5def7feb0c941ed2a444bc2df6c666bb9d2c9e13a40417e5af18aed405ed8fe66267616c7db6de93e8d9db4fd6eea0de91445e267bb5abeb1b7be26ed2291c175b41493c017f5a7eca9459eeb961be9d9f1d1cb9c88cb464bff38c16b0dd93c53e5f2f0a43be4e5a2ebb7ebb683818f43bd75c9994a0a4ec9d299291b9443885c127b10f6c89c4e711c94d16af1d8e8b15d3b3447b0f333f9af07e0cd6afeae1f684dc3b56946406c6978a1a786c902574ef1623d5a06624b83f179d933fc113104c58e8b01514954d563004b2ca34d55ff087ee2991760e4d525557f9fb68f3264371af35fd30f8111bf5a1252d2d32ab9a852d22c6b91d93161fc2302e77a3dacbf6e0abcb158e90d40dbf2fa8135c3e36aeefdc1fb2aa5604d75a1142aa5215015417229af9e0d7c3fd456a6e645e96d6d8c09dd22c0c91fe3e4f23ce29172a8c3a5b6b867793f9b1d2841063985e718e746d605bd7251df8df2ca264984ea2e8ca24cbeb6377654c24709f5cb268108b94a156283f0a8579d5e8e4e58c380b1414e7e06e44b6d1cfc992fe050502f218", 0x1000}], 0x6}, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r8, &(0x7f0000000680)={0xa, 0x4e22, 0xfffffffc, @private2, 0xfff}, 0x1c) 20m57.424620433s ago: executing program 1 (id=21): inotify_init1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) syz_open_dev$dri(0x0, 0x1, 0x48240) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x3a98c2, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x4, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b) 20m57.037322842s ago: executing program 3 (id=22): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)=0x3) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018090000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 20m56.093474495s ago: executing program 0 (id=23): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000000)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(r4, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x100000004) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000019080)=0x30) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r10, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) mmap(&(0x7f0000d61000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d62000/0x3000)=nil, 0x3000, 0x0, 0x1, 0x10000) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfYno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) getsockname(r0, 0x0, &(0x7f0000000080)) 20m53.049067054s ago: executing program 3 (id=25): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x24044010) 20m52.679227098s ago: executing program 1 (id=27): r0 = openat$sndseq(0xffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) dup(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000400000000000000000000aa00000004000000000a"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4051) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 20m52.672024831s ago: executing program 2 (id=28): ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x2, 0x4) bind$can_raw(r0, &(0x7f0000000480), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000040)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="4000d9000000e2132ee5208c0d05eb8ed8269f43ff9fcd35abaadac2687f0cd6f2f66964891a5dd429920fb6213a9c89997f4d153db5ac21c78d1bcd3eb370e26ffcb57593411fd86554d4ddbfc829c78333979078550d78969315f7bb2d878785ad28e597fdd7bb4fd8ff2e49e735d10918752a8b7a398868b4ba229cfca5f94b2353e5673b4ebd0d20979d738e350545dc48490e88e24e507a36943330c8b9e36180ec33ca3a000000000000000069b8153b24b288602ca49820d908db096457ee3b9ab251257d8532c5d34f0f1c4bacc22c7b34c524a69d811e7d63c05c"], 0x0, 0x0, 0x0, 0x0}) 20m52.224069139s ago: executing program 3 (id=30): syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902"], 0x0) 20m52.152825074s ago: executing program 1 (id=31): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 20m49.644067569s ago: executing program 1 (id=32): socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x66a, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x7, 0x3, 0x1ff, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0xf0, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 20m48.648616591s ago: executing program 0 (id=33): socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x66a, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x7, 0x3, 0x1ff, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0xf0, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 20m48.145645809s ago: executing program 3 (id=34): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000700000000039500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@echo=0x7) syz_usb_connect$uac2(0x3, 0xb1, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x194f, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x8, 0x40, 0x81, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x87}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x2, 0x18, 0x1}, [@feature_unit={0x7, 0x24, 0x6, 0x4, 0x5, [0x2]}, @source_unit={0x8, 0x24, 0xa, 0x9, 0x3, 0x0, 0x80, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x1, 0x81, "c77e4f", "a2c9"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8, 0x3, '68'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x22e9, 0x341, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x62, 0xc, 0x8, {0x8, 0x25, 0x1, 0x80, 0x3, 0x4, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x4, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0x5, 0x2}}}}}}}}]}}, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000000000)=[{0xee, 0x4a11, 0x0, 0x0}], 0x1}) socket(0x23, 0x6, 0x3) syz_usb_connect$midi(0x3, 0xcf, &(0x7f0000000140)={{0x12, 0x1, 0x351, 0x0, 0x0, 0x0, 0x0, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x1, 0x1, 0x2, 0x90, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x85, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x4, 0x6, [{0x4, 0xff}, {0xb}, {0x4, 0xec}, {0x7f, 0x42}, {0x7, 0xfd}, {0x2, 0x5}], 0xd8}, @midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x4, 0x0, [], 0x81}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x7, 0x1, [{0x5, 0x71}], 0x7}], [{{0x9, 0x5, 0x6, 0xc, 0x200, 0x0, 0x80, 0xaf, {0xe, 0x25, 0x1, 0xa, "b026680fa56b4508ca66"}}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x80, 0x0, {0xd, 0x25, 0x1, 0x9, "0d43a6f58fe89e2c77"}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x4, 0x4, 0x5, {0x10, 0x25, 0x1, 0xc, "0e65aac847a067114235b3a3"}}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xe4, 0x8, 0x5, {0x5, 0x25, 0x1, 0x1, '~'}}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x72, 0x81, 0x6, {0xb, 0x25, 0x1, 0x7, "821d413d3a13cd"}}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x2, 0x0, 0x5c, {0x9, 0x25, 0x1, 0x5, "23ca7eec48"}}}]}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000003a80)={0xa, 0x6, 0x310, 0x38, 0x8, 0x5, 0x20, 0x2}, 0x2f, &(0x7f0000000280)={0x5, 0xf, 0x2f, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x5, 0xff00, 0x3ff, [0xff00c0, 0x30, 0xc000, 0x0, 0x3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x40}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4c6d}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x40440c4) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a0101000000dd7ef200000000000a0000060900020073797a31000097feb75bc501b400000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r7, 0x0) sendmsg$inet(r5, &(0x7f0000003a40)={&(0x7f0000002700)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000002740)="951af2745b7de89b7280af89d10422c74a830e059317113ce2be6aaa813b302611ac1139d3a93bac9288061e0840aca947ba0f5e26e9f421e900833acf619b6657b1a6f221319cbbd76bba15a0c9e6fe3da2194b3133a9ec0cd364243cf84a193ddd87579e784cd4a367b37f18d765c57baa99eaebc3d6ab051fe12c", 0x7c}, {&(0x7f00000027c0)="fcf15bbb4d426530753da66cf401c979f962070740b8419e71a2ba553127be780803784623cb5cadb6236f72c681c9ad32c8319d820a217085fa974d4929ed88e3962d75da70d3ed8026742f6cdcfedb3f59f086da7fd46a6b544c5d7a", 0x5d}, {&(0x7f0000002840)="40a5702438678279a1474112564aa0ca47e6919e0dedccb193633b08683a4ca2c982170b32dfe5232f70d58f3c99a36716cdc59a21655f0e733358e0d3e145f13f9a8218d2b2e1ba282b63117da05645239e51", 0x53}, {0x0}, {&(0x7f0000002980)="9ad1c37122fc9d59b43ec1b972fb4fd13bfa84cb609869ef6434fc29975fc58e21e971d2ddbed5b67c73086ceb230c36019c0ff49366b9e56bc5da62c5b396a0817773660a10", 0x46}, {&(0x7f0000002a00)="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", 0x1000}], 0x6}, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r8, &(0x7f0000000680)={0xa, 0x4e22, 0xfffffffc, @private2, 0xfff}, 0x1c) 20m45.615358356s ago: executing program 2 (id=35): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x2000000000006) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x6, 0x500, 0x6, 0x4, 0x0, @link_local, @dev={0xac, 0x14, 0x14, 0x28}, @link_local, @multicast2}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f000008c000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000060000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff28}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 20m33.32385645s ago: executing program 32 (id=32): socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x66a, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x7, 0x3, 0x1ff, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0xf0, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 20m31.329101495s ago: executing program 33 (id=33): socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$video(0x0, 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x0, 0xfffe, 0x0, 0x98, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x66a, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7883, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x200000, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xdfffffff, 0x7ff, 0x2, 0x9, 0xc, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x3, 0x3, 0x9, 0xffc, 0x401, 0x623, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x4, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x1, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x2, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0xc, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x105, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0x4, 0x7, 0x1, 0x7fffffff, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0xe, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x4, 0x6, 0x7, 0x3, 0x1ff, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x1, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x2101, 0x100, 0x7ff, 0x1, 0xf0, 0xa, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x100009, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x1, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0x5, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 20m30.530155447s ago: executing program 34 (id=34): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000700000000039500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@echo=0x7) syz_usb_connect$uac2(0x3, 0xb1, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x194f, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x8, 0x40, 0x81, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x87}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x2, 0x18, 0x1}, [@feature_unit={0x7, 0x24, 0x6, 0x4, 0x5, [0x2]}, @source_unit={0x8, 0x24, 0xa, 0x9, 0x3, 0x0, 0x80, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x1, 0x81, "c77e4f", "a2c9"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8, 0x3, '68'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x22e9, 0x341, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x62, 0xc, 0x8, {0x8, 0x25, 0x1, 0x80, 0x3, 0x4, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x4, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0x5, 0x2}}}}}}}}]}}, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000000000)=[{0xee, 0x4a11, 0x0, 0x0}], 0x1}) socket(0x23, 0x6, 0x3) syz_usb_connect$midi(0x3, 0xcf, &(0x7f0000000140)={{0x12, 0x1, 0x351, 0x0, 0x0, 0x0, 0x0, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x1, 0x1, 0x2, 0x90, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x85, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x4, 0x6, [{0x4, 0xff}, {0xb}, {0x4, 0xec}, {0x7f, 0x42}, {0x7, 0xfd}, {0x2, 0x5}], 0xd8}, @midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x4, 0x0, [], 0x81}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x7, 0x1, [{0x5, 0x71}], 0x7}], [{{0x9, 0x5, 0x6, 0xc, 0x200, 0x0, 0x80, 0xaf, {0xe, 0x25, 0x1, 0xa, "b026680fa56b4508ca66"}}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x80, 0x0, {0xd, 0x25, 0x1, 0x9, "0d43a6f58fe89e2c77"}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x4, 0x4, 0x5, {0x10, 0x25, 0x1, 0xc, "0e65aac847a067114235b3a3"}}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xe4, 0x8, 0x5, {0x5, 0x25, 0x1, 0x1, '~'}}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x72, 0x81, 0x6, {0xb, 0x25, 0x1, 0x7, "821d413d3a13cd"}}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x2, 0x0, 0x5c, {0x9, 0x25, 0x1, 0x5, "23ca7eec48"}}}]}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000003a80)={0xa, 0x6, 0x310, 0x38, 0x8, 0x5, 0x20, 0x2}, 0x2f, &(0x7f0000000280)={0x5, 0xf, 0x2f, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x5, 0xff00, 0x3ff, [0xff00c0, 0x30, 0xc000, 0x0, 0x3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x40}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4c6d}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x40440c4) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a0101000000dd7ef200000000000a0000060900020073797a31000097feb75bc501b400000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r7, 0x0) sendmsg$inet(r5, &(0x7f0000003a40)={&(0x7f0000002700)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000002740)="951af2745b7de89b7280af89d10422c74a830e059317113ce2be6aaa813b302611ac1139d3a93bac9288061e0840aca947ba0f5e26e9f421e900833acf619b6657b1a6f221319cbbd76bba15a0c9e6fe3da2194b3133a9ec0cd364243cf84a193ddd87579e784cd4a367b37f18d765c57baa99eaebc3d6ab051fe12c", 0x7c}, {&(0x7f00000027c0)="fcf15bbb4d426530753da66cf401c979f962070740b8419e71a2ba553127be780803784623cb5cadb6236f72c681c9ad32c8319d820a217085fa974d4929ed88e3962d75da70d3ed8026742f6cdcfedb3f59f086da7fd46a6b544c5d7a", 0x5d}, {&(0x7f0000002840)="40a5702438678279a1474112564aa0ca47e6919e0dedccb193633b08683a4ca2c982170b32dfe5232f70d58f3c99a36716cdc59a21655f0e733358e0d3e145f13f9a8218d2b2e1ba282b63117da05645239e51", 0x53}, {0x0}, {&(0x7f0000002980)="9ad1c37122fc9d59b43ec1b972fb4fd13bfa84cb609869ef6434fc29975fc58e21e971d2ddbed5b67c73086ceb230c36019c0ff49366b9e56bc5da62c5b396a0817773660a10", 0x46}, {&(0x7f0000002a00)="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", 0x1000}], 0x6}, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r8, &(0x7f0000000680)={0xa, 0x4e22, 0xfffffffc, @private2, 0xfff}, 0x1c) 20m28.520929498s ago: executing program 35 (id=35): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x2000000000006) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x6, 0x500, 0x6, 0x4, 0x0, @link_local, @dev={0xac, 0x14, 0x14, 0x28}, @link_local, @multicast2}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f000008c000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000060000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff28}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 11m36.657726823s ago: executing program 4 (id=1279): socket$inet6(0xa, 0x1, 0x6) syz_init_net_socket$ax25(0x3, 0x5, 0xc5) r0 = socket(0x1, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000180)) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000000)=""/138, 0x8a, 0x10000, &(0x7f00000000c0)={0x23, 0x1, 0x81, 0x4}, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) socket$inet6_tcp(0xa, 0x1, 0x0) 11m36.554029858s ago: executing program 4 (id=1280): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) userfaultfd(0x801) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xb, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x80008004, 0x5, 0x23, 0x401, 0x1, 0x0, 0x10001, 0x1000008, 0x2, 0x3ff, 0x9, 0x3ff, 0x9, 0xe, 0x6, 0x8001, 0x3, 0x4, 0x0, 0x392, 0x80000088, 0x3, 0xa, 0xfffffff6, 0x200000a, 0x4, 0x0, 0x0, 0x4, 0x181, 0x4]}) mount(0x0, 0x0, &(0x7f00000002c0)='pstore\x00', 0x28c2008, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4028, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000040), 0x5005) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) creat(0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x200000000000026f, 0x1}}, 0x40) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 11m36.095323711s ago: executing program 4 (id=1281): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 11m35.648599896s ago: executing program 4 (id=1282): socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$mouse(0x0, 0x6, 0x6ac000) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000000c0)) 11m35.572615896s ago: executing program 4 (id=1284): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda", 0x4f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f00000009c0)="f1b453d8db1410b23dd0b89c359e63cb11ca65a15b83ad5708ebd6cb182ff0dba4428bf546b8d385a1ff806a0a46bfa89a101d24674764584bdc9c4c0c94f835029e79a57920aa428ecd9769f0949c0dab96e8b829c5ea536245428ba3000461e69a3967acc5", 0x66}], 0x2}}], 0x2, 0x2090) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 11m35.229875485s ago: executing program 4 (id=1286): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800}) 10m10.470561212s ago: executing program 5 (id=1415): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) socket$kcm(0x10, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) mknodat$loop(0xffffffffffffff9c, 0x0, 0x800, 0x1) 10m1.344790743s ago: executing program 5 (id=1424): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000007c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x61, 0x10, 0x61}, [@ldst={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x2, 0x6, 0x0, 0x8, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='net/tcp\x00') r2 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x92a, 0x7, 0x1, 0x0, 0xd7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open(&(0x7f0000000000)='.\x00', 0x2882c2, 0xd) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@o_path={0x0, r3, 0x4000, r3}, 0x18) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/138, 0x8a}], 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000280)={0xc, &(0x7f0000000480)={0x0, 0x22, 0xba, {0xba, 0x2f, "c882edab4d3276f0544472c6d3ee9d1cdca234cc64e66a9548e02fdcfe0c2f48fe4cf2b5dc50bea96b3cf276ffb5d36f4e535491bc5707c765d54b92fc64b362912e43a6487906efee5cdcccaa3b6f03a8f24c61de34ba492a67b6881160d9f446f829f778ef7c384ff8c9f8b6da90b056fc4371b6fc0bf932fd4d94f6107f7e07e414c8c942ae2049695b911e2d2dbde4bf073e45995b830b7e019790bb76bf17233be1560dd9f31bd18b117f970b2ea3bb8c504482124c"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, &(0x7f0000000780)={0x24, &(0x7f0000000540)={0x0, 0x0, 0x33, "40a9ed1930e59c29a788aac3168deb6ead6d8acdf97878a81852f6ce330332d40dcac84f82bb8bbb1a63c5d1818eb18832a41a"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x3a}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, 0x0, &(0x7f0000000640)={0x20, 0x82, 0x1, "ea"}, 0x0, &(0x7f0000000700)={0x20, 0x84, 0x1, "dc"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "dac5e2"}}) syz_usb_control_io$uac2(r0, &(0x7f0000000180)={0xc, &(0x7f0000000000)={0x40, 0x0, 0xf1, {0xf1, 0x11, "3a4b820be02eb05b0339e5b8f1401f83898e3e5910844e35fb73292695fbd0b3c289b9716b9229f6dce142be9f6f7c8b2956e7e5346dd7a6a2022e5acfa578e384db1711b9882df194efa98a1c91753e0aa5ef56f966a1005a4c6ad200c6362d96c1f4cf26622c185466d8c817bb03b4a555078884641b21ddbd7ed830f714500026abd790be05c80f45cf3b225c45f40411839d52c9379a6954e5e3cf635a429e45eeee9c4a4b925d318531ce8a3c3e29c6c969d662b7bf9e5404de69b49eea0acf43c5117a867a5cf6c84bfa418e9f65f5b50a7c5f212ccde1fb68e7923c70ce81584f9fabc8e4d7263834a14d3f"}}, &(0x7f0000000140)={0x0, 0x3, 0x32, @string={0x32, 0x3, "96a681ad183b8a746550421a8dd3ff6c58ebafd058e18792d848d9002c9aa46d4215d826fed38637de10a4ff8d88857d"}}}, &(0x7f0000000440)={0x24, &(0x7f00000001c0)={0x0, 0xf, 0xac, "80d95ac7888ae1d34755c3edf21f707a52697b00a22345a89d50347f462a04a282770978917c3ff791a9cbb0b237c2db16c5afcae4b9a948107aa8429a6d4000231b63bc5fe31332f27fdc6790542c195336c135fb3d56726c8c6d536290a79ecd71f1afb42eccc0734ce1b58af3b5cc0b8a2a9458afcca6019969d7f537b2f03b514337085ad34dad27d195cdd45dd3a0d01d240b8518956b934a6d31fb1e308d2ee83e0569fec2926caa5d"}, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x81, 0x2, "06ec"}, &(0x7f0000000340)={0x20, 0x82, 0x1, 'Q'}, &(0x7f0000000380)={0x20, 0x83, 0x3, "8f3d99"}, &(0x7f00000003c0)={0x20, 0x84, 0x3, "b9d4aa"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "d689a9"}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14001000010600000000000000000000000a28000000000a0101008000005e1affd502000000096de8e6e03f7e00010073797a30000001030000e6ff1b000000020000000900010073797a3000000100"/98], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000009000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011000100"], 0x64}}, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 9m55.754354342s ago: executing program 5 (id=1430): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0x1000bfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 9m54.513718676s ago: executing program 5 (id=1431): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x7, 0x5019c0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xb8}}, 0x40408c0) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9m53.719260129s ago: executing program 5 (id=1433): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0x1000bfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 9m52.469113244s ago: executing program 5 (id=1435): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota') 9m37.027793898s ago: executing program 36 (id=1435): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota') 4m0.511026488s ago: executing program 6 (id=1910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) 3m58.467540434s ago: executing program 6 (id=1916): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4000, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0xf77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x2, 0x3, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x80000001, 0x0, 0x0, 0x8, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4000000]}) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x9, 0x8, 0x0, 0xffc, 0xe, 0xb, 0xf9, 0x49, 0x10, 0x6, 0x9, 0x0, 0x6, 0x10, 0xa, 0x9, 0x7f, 0x9f, '\x00', 0x69, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_GET_VERSION(r7, 0x8004552d, &(0x7f0000000e00)) msgrcv(0x0, 0x0, 0x0, 0x0, 0x5800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x11d}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x88}, 0x1, 0x0, 0x0, 0x8008}, 0x48052) 3m53.379106499s ago: executing program 6 (id=1922): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e0"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$kcm(0x29, 0x2, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}, @typedef={0x7}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x30]}}, 0x0, 0x3c, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x6) sendmmsg$inet(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x20000085) set_mempolicy(0x4005, 0x0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m51.750500668s ago: executing program 6 (id=1923): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) syz_emit_vhci(&(0x7f00000022c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x413}}}, 0x7) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) execve(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080), 0x0) semget(0x1, 0x2, 0x210) setuid(0x0) 3m49.708946807s ago: executing program 6 (id=1924): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/5, 0x5}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 3m49.333817011s ago: executing program 6 (id=1927): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000500)="85", 0x1, 0xc004, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000035ac0), 0x0, 0x20044054) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\x00 \x00', "82020b23ec3a405d"}, 0x38) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x27, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m33.963189193s ago: executing program 37 (id=1927): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000500)="85", 0x1, 0xc004, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000035ac0), 0x0, 0x20044054) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\x00 \x00', "82020b23ec3a405d"}, 0x38) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x27, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.895988761s ago: executing program 8 (id=2160): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) 9.084069372s ago: executing program 7 (id=2162): r0 = fsopen(&(0x7f00000002c0)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pivot_root(0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) setitimer(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') 7.421256016s ago: executing program 7 (id=2163): mknod$loop(0x0, 0x2480, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806d, 0x0, 0xfff, 0x2, 0x8000000006], [0x9da, 0x7, 0x80000000, 0x9, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1, 0x100, 0xb, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0xffffffffffffffff, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x6000000004, 0x4, 0x3, 0x1020000000000000, 0x8000000000000000, 0x7, 0x1, 0x8, 0x400000000008, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x8000000009, 0xfffffffffffffffb, 0x3, 0x0, 0x4, 0x5, 0x8, 0x1, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x8, 0x0, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0xa2, 0x7, 0x20, 0x6, 0x6, 0xd, 0x100000002, 0x4, 0x4, 0x7, 0x8, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68e, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x6, 0x0, 0x10000, 0x401, 0x2, 0x406, 0x3, 0x6, 0x2, 0xfffffffffffffffc, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x49845) r3 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10400, 0x0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000280)={0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r4 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 7.322259953s ago: executing program 8 (id=2164): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x8}, {{}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 7.138814962s ago: executing program 8 (id=2165): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda", 0x4f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="f1b453d8db1410b23dd0b89c359e63cb11ca65a15b83ad5708ebd6cb182ff0dba4428bf546b8d385a1ff806a0a46bfa89a101d24674764584bdc9c4c0c94f835029e79a57920aa428ecd9769f0949c0dab96e8b829c5ea536245428ba3000461e69a3967acc5", 0x66}], 0x1}}], 0x2, 0x2090) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 5.319603386s ago: executing program 7 (id=2166): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000380)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0xac0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) 4.594708386s ago: executing program 8 (id=2167): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) syz_emit_vhci(&(0x7f00000022c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x413}}}, 0x7) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) execve(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080), 0x0) semget(0x1, 0x2, 0x210) r4 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r4, &(0x7f0000000040)) 3.20247325s ago: executing program 8 (id=2168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) 3.084809421s ago: executing program 7 (id=2169): r0 = socket$netlink(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x8d2, &(0x7f0000000400)={0x0, 0x2, 0x400, 0x2, 0x37d}, &(0x7f00000001c0), &(0x7f0000000080), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30aa, &(0x7f00000007c0)={0x0, 0x760, 0x80, 0x1, 0x14c}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r6, &(0x7f0000000180)=0xfe5f, 0x12) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40890) 2.115697443s ago: executing program 8 (id=2170): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) 1.814760818s ago: executing program 7 (id=2171): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 0s ago: executing program 7 (id=2172): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000380)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0xac0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r2, 0x742f, 0x77ae, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r8, &(0x7f0000000300)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) r9 = memfd_secret(0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r12, 0xc0286405, &(0x7f0000003c80)={0x3, 0x7f, {r10}, {r13}, 0x8000, 0x8004}) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000000000140000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r14, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r14, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cc2074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950dc6d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb08000000eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a070094709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab506c000000000000876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2a5f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfdd21d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73fdecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f65665a750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649495e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f0870300000011041df8f518dd33203377b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x4000000000010001, {0x3ffffffffffffffc, 0xfffffff7, 0x0, '\x00', {0x2fff, 0xfffffffd, 0x8000000000010000, 0x906, r15, r16, 0xc000, '\x00', 0x6, 0x27efc00800000, 0xc, 0x9, {0xa, 0x3fe}, {0x6, 0x3}, {0x5, 0x4}, {0xffffffffe, 0xa03}, 0x80008001, 0x800d, 0xfffffffe, 0x5}}}}) fchown(r7, r13, r16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000d00)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) kernel console output (not intermixed with test programs): .617226][ T5812] Bluetooth: hci1: command tx timeout [ 941.751256][ T5812] Bluetooth: hci1: command tx timeout [ 945.190949][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 945.341894][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 945.394141][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 945.408436][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 945.412335][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 947.622210][ T5824] Bluetooth: hci6: command tx timeout [ 947.632989][T12023] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1625'. [ 947.633198][T12023] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1625'. [ 949.776217][ T5824] Bluetooth: hci6: command tx timeout [ 950.910741][ T5468] 8021q: adding VLAN 0 to HW filter on device eth20 [ 951.862980][ T5824] Bluetooth: hci6: command tx timeout [ 953.485763][T11962] chnl_net:caif_netlink_parms(): no params data found [ 953.945709][ T5824] Bluetooth: hci6: command tx timeout [ 954.735136][T12077] syz.8.1636 (12077): drop_caches: 2 [ 958.198224][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.198369][T11962] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.198643][T11962] bridge_slave_0: entered allmulticast mode [ 958.202417][T11962] bridge_slave_0: entered promiscuous mode [ 958.507793][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 958.885326][T11962] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.885464][T11962] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.885712][T11962] bridge_slave_1: entered allmulticast mode [ 958.901675][T11962] bridge_slave_1: entered promiscuous mode [ 958.977195][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 959.020921][ T10] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 959.020958][ T10] usb 9-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 959.020987][ T10] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 959.021016][ T10] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 959.021056][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 959.027643][ T10] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 959.027675][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.027695][ T10] usb 9-1: Product: syz [ 959.027709][ T10] usb 9-1: Manufacturer: syz [ 959.027795][ T10] usb 9-1: SerialNumber: syz [ 959.035176][ T10] usb 9-1: config 0 descriptor?? [ 959.036721][T12102] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 959.326196][T12102] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 959.364732][ T10] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input38 [ 959.432882][T11962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.810236][T11962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.816692][T12015] chnl_net:caif_netlink_parms(): no params data found [ 962.699381][T11962] team0: Port device team_slave_0 added [ 963.678407][T11962] team0: Port device team_slave_1 added [ 964.017979][ T908] usb 9-1: USB disconnect, device number 10 [ 964.018155][ C1] synaptics_usb 9-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 964.533712][T12138] blktrace: Concurrent blktraces are not allowed on loop12 [ 967.922250][T11962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.922271][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.922303][T11962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.945692][T11962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.945713][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.945743][T11962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.663228][T12015] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.663894][T12015] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.665481][T12015] bridge_slave_0: entered allmulticast mode [ 968.672925][T12015] bridge_slave_0: entered promiscuous mode [ 968.769813][T12015] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.770847][T12015] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.771079][T12015] bridge_slave_1: entered allmulticast mode [ 968.778985][T12015] bridge_slave_1: entered promiscuous mode [ 968.979273][T11962] hsr_slave_0: entered promiscuous mode [ 968.986891][T11962] hsr_slave_1: entered promiscuous mode [ 968.993932][T11962] debugfs: 'hsr0' already exists in 'hsr' [ 968.993962][T11962] Cannot create hsr debugfs directory [ 969.134404][T12015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.299550][T12015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.802416][ T8940] bridge_slave_1: left allmulticast mode [ 969.802448][ T8940] bridge_slave_1: left promiscuous mode [ 969.802741][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.963262][ T8940] bridge_slave_0: left allmulticast mode [ 970.963296][ T8940] bridge_slave_0: left promiscuous mode [ 970.963577][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.106301][ T8940] bridge_slave_1: left allmulticast mode [ 974.106337][ T8940] bridge_slave_1: left promiscuous mode [ 974.106599][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.189202][ T8940] bridge_slave_0: left allmulticast mode [ 974.189237][ T8940] bridge_slave_0: left promiscuous mode [ 974.189509][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.638357][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.755972][ T8940] bond0 (unregistering): Released all slaves [ 977.158189][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.261466][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.363355][ T8940] bond0 (unregistering): Released all slaves [ 979.437384][T12015] team0: Port device team_slave_0 added [ 979.444389][T12015] team0: Port device team_slave_1 added [ 979.646284][T12218] binder: BINDER_SET_CONTEXT_MGR already set [ 979.646304][T12218] binder: 12217:12218 ioctl 4018620d 200000004a80 returned -16 [ 980.127222][ T5815] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 980.315298][T12015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.315319][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.315348][T12015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.333763][ T5815] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 980.333800][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.333822][ T5815] usb 7-1: Product: syz [ 980.333847][ T5815] usb 7-1: Manufacturer: syz [ 980.333863][ T5815] usb 7-1: SerialNumber: syz [ 980.392285][T12234] sd 0:0:1:0: device reset [ 980.422890][T12015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.422911][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.422942][T12015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.423617][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.437553][T12235] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1664'. [ 980.441913][ T5815] usb 7-1: config 0 descriptor?? [ 980.499447][ T5815] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 981.419749][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 981.498194][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 982.669139][T12015] hsr_slave_0: entered promiscuous mode [ 982.675276][T12015] hsr_slave_1: entered promiscuous mode [ 982.677034][T12015] debugfs: 'hsr0' already exists in 'hsr' [ 982.867250][ T5815] gspca_sunplus: reg_r err -110 [ 982.868183][ T5815] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 982.952614][T12015] Cannot create hsr debugfs directory [ 985.151305][T12211] usb 7-1: USB disconnect, device number 26 [ 985.856454][T12261] binder: BINDER_SET_CONTEXT_MGR already set [ 985.856474][T12261] binder: 12260:12261 ioctl 4018620d 200000004a80 returned -16 [ 987.587141][T12273] capability: warning: `syz.6.1671' uses deprecated v2 capabilities in a way that may be insecure [ 988.399264][T12291] sd 0:0:1:0: device reset [ 990.320150][T12301] ubi: mtd0 is already attached to ubi16 [ 991.333035][T11962] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 991.569856][T11962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 991.570845][T11962] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 991.692847][T12310] binder: 12308:12310 ioctl c0306201 0 returned -14 [ 992.548989][T11962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 992.813286][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 992.903767][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 992.905412][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 992.910307][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 992.912903][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 993.233421][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.233501][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.059137][ T5824] Bluetooth: hci0: command tx timeout [ 996.790771][T12340] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1685'. [ 997.140635][ T5824] Bluetooth: hci0: command tx timeout [ 999.217320][ T5824] Bluetooth: hci0: command tx timeout [ 999.299892][T12351] binder: 12349:12351 ioctl c0306201 0 returned -14 [ 999.494218][ T5824] Bluetooth: Frame is too long (len 16, expected len 4) [ 1001.297248][ T5824] Bluetooth: hci0: command tx timeout [ 1001.583376][T12362] ubi: mtd0 is already attached to ubi16 [ 1002.116220][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1002.174829][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1002.176817][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1002.262977][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1002.270899][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1004.299366][T12376] sd 0:0:1:0: device reset [ 1004.403077][T12371] syz.7.1693 (12371): drop_caches: 2 [ 1004.417337][ T5812] Bluetooth: hci1: command tx timeout [ 1006.554661][ T5812] Bluetooth: hci1: command tx timeout [ 1007.506561][T12393] binder: 12392:12393 ioctl c0306201 0 returned -14 [ 1008.578484][ T5812] Bluetooth: hci1: command tx timeout [ 1009.549214][T12315] chnl_net:caif_netlink_parms(): no params data found [ 1010.329778][T12409] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1703'. [ 1010.659905][ T5812] Bluetooth: hci1: command tx timeout [ 1011.201237][T12315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.205494][T12315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.206526][T12315] bridge_slave_0: entered allmulticast mode [ 1011.211289][T12315] bridge_slave_0: entered promiscuous mode [ 1011.476843][T12315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.478979][T12315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.479223][T12315] bridge_slave_1: entered allmulticast mode [ 1011.491374][T12315] bridge_slave_1: entered promiscuous mode [ 1011.774654][ T5812] Bluetooth: hci5: unexpected cc 0x0c13 length: 85 > 1 [ 1011.774695][ T5812] Bluetooth: hci5: unexpected event for opcode 0x0c13 [ 1013.211836][T12315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.243393][T12315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.881799][T12426] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1014.642362][T12315] team0: Port device team_slave_0 added [ 1015.051228][T12432] sd 0:0:1:0: device reset [ 1015.079217][T12315] team0: Port device team_slave_1 added [ 1015.266280][T12440] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1713'. [ 1015.380692][ T8940] bridge_slave_1: left allmulticast mode [ 1015.380746][ T8940] bridge_slave_1: left promiscuous mode [ 1015.382098][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.437764][ T5815] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1015.811957][ T8940] bridge_slave_0: left allmulticast mode [ 1015.811981][ T8940] bridge_slave_0: left promiscuous mode [ 1015.812162][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.943353][ T5815] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1015.943400][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.943518][ T5815] usb 9-1: Product: syz [ 1015.943535][ T5815] usb 9-1: Manufacturer: syz [ 1015.943552][ T5815] usb 9-1: SerialNumber: syz [ 1016.009610][ T5815] usb 9-1: config 0 descriptor?? [ 1016.053801][ T5815] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1016.799822][ T5815] gspca_sunplus: reg_w_riv err -110 [ 1016.800810][ T5815] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 1018.318130][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.555712][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.765210][ T8940] bond0 (unregistering): Released all slaves [ 1018.820397][T12315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.820417][T12315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.820448][T12315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.864406][T12447] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1714'. [ 1018.864581][T12447] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1714'. [ 1018.965591][T12315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.965611][T12315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.965638][T12315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.408336][ T5815] usb 9-1: USB disconnect, device number 11 [ 1019.651420][T12315] hsr_slave_0: entered promiscuous mode [ 1019.658243][T12315] hsr_slave_1: entered promiscuous mode [ 1019.661373][T12315] debugfs: 'hsr0' already exists in 'hsr' [ 1019.661399][T12315] Cannot create hsr debugfs directory [ 1019.718173][T12363] chnl_net:caif_netlink_parms(): no params data found [ 1022.366525][T12487] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1723'. [ 1025.321823][ T8940] hsr_slave_0: left promiscuous mode [ 1025.359669][ T8940] hsr_slave_1: left promiscuous mode [ 1025.360807][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.425948][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.960224][ T5876] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1028.063046][T12490] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1028.126648][ T5876] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1028.126686][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.126707][ T5876] usb 8-1: Product: syz [ 1028.126724][ T5876] usb 8-1: Manufacturer: syz [ 1028.126741][ T5876] usb 8-1: SerialNumber: syz [ 1028.234084][ T5876] usb 8-1: config 0 descriptor?? [ 1028.266387][ T5876] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1028.308072][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1028.368173][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1028.739388][T12501] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1725'. [ 1028.739863][T12501] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1725'. [ 1030.875914][ T5876] gspca_sunplus: reg_w_riv err -110 [ 1030.876024][ T5876] sunplus 8-1:0.0: probe with driver sunplus failed with error -110 [ 1030.940463][T12363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.940606][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.940861][T12363] bridge_slave_0: entered allmulticast mode [ 1030.954574][T12363] bridge_slave_0: entered promiscuous mode [ 1031.283214][ T31] usb 8-1: USB disconnect, device number 27 [ 1031.420566][T12363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.420704][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.471395][T12363] bridge_slave_1: entered allmulticast mode [ 1031.472926][T12517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1031.486381][T12363] bridge_slave_1: entered promiscuous mode [ 1031.719086][T12526] sd 0:0:1:0: device reset [ 1033.737310][T12363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.090681][T12545] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1034.589426][T12363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.953386][T12542] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1737'. [ 1035.575570][T12542] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1737'. [ 1037.785941][T12363] team0: Port device team_slave_0 added [ 1037.806738][T12363] team0: Port device team_slave_1 added [ 1038.327692][T12363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.327712][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.327742][T12363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.565834][T12569] 9p: Bad value for 'rfdno' [ 1038.646905][T12569] ======================================================= [ 1038.646905][T12569] WARNING: The mand mount option has been deprecated and [ 1038.646905][T12569] and is ignored by this kernel. Remove the mand [ 1038.646905][T12569] option from the mount to silence this warning. [ 1038.646905][T12569] ======================================================= [ 1039.181772][T12568] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1044.937636][T12363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.937652][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.937671][T12363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.083483][ T5468] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1051.107508][ T42] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1051.350881][ T42] usb 8-1: Using ep0 maxpacket: 16 [ 1051.492976][ T42] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.493129][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1051.493207][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1051.493234][ T42] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1051.493296][ T42] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1051.600195][ T42] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1051.600270][ T42] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1051.600312][ T42] usb 8-1: Manufacturer: syz [ 1051.902523][T12641] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1053.899575][ T42] usb 8-1: config 0 descriptor?? [ 1054.213110][ T42] usb 8-1: can't set config #0, error -71 [ 1054.314388][ T42] usb 8-1: USB disconnect, device number 28 [ 1055.530582][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.530652][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.769982][T12363] hsr_slave_0: entered promiscuous mode [ 1055.775200][T12363] hsr_slave_1: entered promiscuous mode [ 1055.791483][T12363] debugfs: 'hsr0' already exists in 'hsr' [ 1055.791515][T12363] Cannot create hsr debugfs directory [ 1056.116221][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1056.187240][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1056.205924][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1056.207442][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1056.208473][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1058.587184][ T5812] Bluetooth: hci2: command tx timeout [ 1059.297286][ T5876] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1059.363640][ T5812] Bluetooth: Frame is too long (len 16, expected len 4) [ 1059.460838][ T5876] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1059.460867][ T5876] usb 7-1: config 0 has no interface number 0 [ 1059.460907][ T5876] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1059.460933][ T5876] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1059.460959][ T5876] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1059.466043][ T5876] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1059.466065][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1059.466077][ T5876] usb 7-1: Product: syz [ 1059.466086][ T5876] usb 7-1: SerialNumber: syz [ 1059.523111][ T5876] usb 7-1: config 0 descriptor?? [ 1059.554396][ T5876] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1059.566022][ T5876] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input39 [ 1059.811530][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1060.657143][ T5812] Bluetooth: hci2: command tx timeout [ 1062.305334][ T31] usb 7-1: USB disconnect, device number 27 [ 1062.484862][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1062.622828][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1062.636864][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1062.648621][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1062.649606][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1063.020291][ T5812] Bluetooth: hci2: command tx timeout [ 1064.001703][ T31] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1065.537270][ T5824] Bluetooth: hci2: command tx timeout [ 1065.801696][ T5824] Bluetooth: hci6: command tx timeout [ 1068.290621][ T5824] Bluetooth: hci6: command tx timeout [ 1070.747188][ T5824] Bluetooth: hci6: command tx timeout [ 1072.067518][T12656] chnl_net:caif_netlink_parms(): no params data found [ 1072.240227][ T5824] Bluetooth: Frame is too long (len 16, expected len 4) [ 1072.698436][ T8940] bridge_slave_1: left allmulticast mode [ 1072.698471][ T8940] bridge_slave_1: left promiscuous mode [ 1072.698777][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.817291][ T5824] Bluetooth: hci6: command tx timeout [ 1073.061523][ T8940] bridge_slave_0: left allmulticast mode [ 1073.061559][ T8940] bridge_slave_0: left promiscuous mode [ 1073.061877][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.897807][ T5902] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1075.107193][ T5902] usb 7-1: Using ep0 maxpacket: 16 [ 1075.112224][ T5902] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1075.112262][ T5902] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1075.115435][ T5902] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1075.115468][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.115490][ T5902] usb 7-1: Product: syz [ 1075.115506][ T5902] usb 7-1: Manufacturer: syz [ 1075.115520][ T5902] usb 7-1: SerialNumber: syz [ 1075.394575][ T5902] usb 7-1: config 0 descriptor?? [ 1075.448609][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.956114][ T5902] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input40 [ 1076.158303][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.187188][ T5902] rc_core: IR keymap rc-imon-pad not found [ 1076.187214][ T5902] Registered IR keymap rc-empty [ 1076.187418][ T5902] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1076.187505][ T5902] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1076.263212][ T8940] bond0 (unregistering): Released all slaves [ 1076.560604][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1076.560819][ T5902] imon:send_packet: packet tx failed (-71) [ 1076.580762][ T5902] imon 7-1:0.0: remote input dev register failed [ 1076.580957][ T5902] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 1076.805784][T12656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.806324][T12656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.856215][T12656] bridge_slave_0: entered allmulticast mode [ 1077.014967][T12656] bridge_slave_0: entered promiscuous mode [ 1077.694298][ T5902] imon 7-1:0.0: unable to initialize intf0, err 0 [ 1077.694323][ T5902] imon:imon_probe: failed to initialize context! [ 1077.694338][ T5902] imon 7-1:0.0: unable to register, err -19 [ 1077.764831][ T5902] usb 7-1: USB disconnect, device number 28 [ 1078.078143][ T8940] hsr_slave_0: left promiscuous mode [ 1078.122823][ T8940] hsr_slave_1: left promiscuous mode [ 1078.125212][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.184832][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.534728][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1081.698262][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1083.262393][T12656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.262581][T12656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.263775][T12656] bridge_slave_1: entered allmulticast mode [ 1083.302538][T12656] bridge_slave_1: entered promiscuous mode [ 1083.432656][T12656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.454229][T12656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.586069][T12656] team0: Port device team_slave_0 added [ 1083.611446][T12656] team0: Port device team_slave_1 added [ 1083.883982][T12656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.884001][T12656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.884032][T12656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.956145][T12656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.956164][T12656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.956194][T12656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.067259][ T5815] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1084.365007][ T5824] Bluetooth: Frame is too long (len 16, expected len 4) [ 1084.811514][ T5815] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1084.811538][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.811550][ T5815] usb 7-1: Product: syz [ 1084.811560][ T5815] usb 7-1: Manufacturer: syz [ 1084.811568][ T5815] usb 7-1: SerialNumber: syz [ 1084.868141][ T5815] usb 7-1: config 0 descriptor?? [ 1084.875756][ T5815] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1086.066054][ T5815] gspca_sunplus: reg_w_riv err -110 [ 1086.066163][ T5815] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1086.289675][T12684] chnl_net:caif_netlink_parms(): no params data found [ 1086.341771][T12656] hsr_slave_0: entered promiscuous mode [ 1086.342651][T12656] hsr_slave_1: entered promiscuous mode [ 1086.343242][T12656] debugfs: 'hsr0' already exists in 'hsr' [ 1086.343260][T12656] Cannot create hsr debugfs directory [ 1087.459533][T12684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.459665][T12684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.459917][T12684] bridge_slave_0: entered allmulticast mode [ 1087.497176][T12684] bridge_slave_0: entered promiscuous mode [ 1087.596946][T12684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.605245][T12684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.605524][T12684] bridge_slave_1: entered allmulticast mode [ 1087.623642][T12684] bridge_slave_1: entered promiscuous mode [ 1087.742734][ T5883] usb 7-1: USB disconnect, device number 29 [ 1088.221584][T12684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.514602][ T5824] Bluetooth: hci5: unexpected cc 0x0c13 length: 85 > 1 [ 1088.514644][ T5824] Bluetooth: hci5: unexpected event for opcode 0x0c13 [ 1088.521030][T12684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.653446][T12878] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1090.917537][T12684] team0: Port device team_slave_0 added [ 1090.981849][T12684] team0: Port device team_slave_1 added [ 1094.001798][ T8940] bridge_slave_1: left allmulticast mode [ 1094.001833][ T8940] bridge_slave_1: left promiscuous mode [ 1094.002134][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.329817][ T8940] bridge_slave_0: left allmulticast mode [ 1094.329840][ T8940] bridge_slave_0: left promiscuous mode [ 1094.330020][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.968869][ T8940] bridge_slave_1: left allmulticast mode [ 1096.968906][ T8940] bridge_slave_1: left promiscuous mode [ 1096.969199][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.043609][ T8940] bridge_slave_0: left allmulticast mode [ 1097.043641][ T8940] bridge_slave_0: left promiscuous mode [ 1097.043907][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.074054][T12916] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1099.008637][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.047280][ T5876] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1099.148136][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.211350][ T5876] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.211383][ T5876] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1099.220755][ T5876] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1099.220786][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.220806][ T5876] usb 7-1: Product: syz [ 1099.220822][ T5876] usb 7-1: Manufacturer: syz [ 1099.220835][ T5876] usb 7-1: SerialNumber: syz [ 1099.264331][ T5876] usb 7-1: config 0 descriptor?? [ 1099.283232][ T8940] bond0 (unregistering): Released all slaves [ 1099.788798][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.868099][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.952627][ T8940] bond0 (unregistering): Released all slaves [ 1100.039431][ T5468] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1100.042537][T12684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.042554][T12684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.042580][T12684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.102612][T12684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.102631][T12684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.102662][T12684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.766711][T12684] hsr_slave_0: entered promiscuous mode [ 1100.769065][T12684] hsr_slave_1: entered promiscuous mode [ 1101.038289][T12684] debugfs: 'hsr0' already exists in 'hsr' [ 1101.305039][T12684] Cannot create hsr debugfs directory [ 1102.210808][ T908] usb 7-1: USB disconnect, device number 30 [ 1102.654675][ T8940] hsr_slave_0: left promiscuous mode [ 1102.797267][ T8940] hsr_slave_1: left promiscuous mode [ 1102.798490][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.939796][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.168808][ T8940] hsr_slave_0: left promiscuous mode [ 1104.214795][ T8940] hsr_slave_1: left promiscuous mode [ 1104.215975][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.281807][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.031003][ T5815] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1106.183507][ T5815] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1106.183544][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.183566][ T5815] usb 7-1: Product: syz [ 1106.183582][ T5815] usb 7-1: Manufacturer: syz [ 1106.183598][ T5815] usb 7-1: SerialNumber: syz [ 1106.314837][ T5815] usb 7-1: config 0 descriptor?? [ 1106.359634][ T5815] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1106.559874][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1106.691741][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1107.807236][ T31] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1107.964441][ T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.964723][ T31] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1108.026551][ T31] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1108.026587][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.044972][ T31] usb 8-1: Product: syz [ 1108.044996][ T31] usb 8-1: Manufacturer: syz [ 1108.045079][ T31] usb 8-1: SerialNumber: syz [ 1108.118139][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1108.119998][ T31] usb 8-1: config 0 descriptor?? [ 1108.237987][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1108.357443][ T5815] gspca_sunplus: reg_r err -110 [ 1108.357556][ T5815] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1108.639759][ T908] usb 7-1: USB disconnect, device number 31 [ 1109.199751][ T5468] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1111.400420][ T5815] usb 8-1: USB disconnect, device number 29 [ 1111.795656][T12656] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1113.029650][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1113.217433][T12656] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1113.395226][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1113.418599][T12656] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1113.519789][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1113.533326][T12656] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1113.690488][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1115.304635][T13050] overlayfs: failed to resolve './file1': -2 [ 1115.711905][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1115.748183][T12211] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1115.755080][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1115.759041][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1115.780719][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1115.804451][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1115.889043][ T5815] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1115.907599][T12211] usb 8-1: Using ep0 maxpacket: 16 [ 1115.923136][T12211] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.923226][T12211] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1115.923270][T12211] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1115.923296][T12211] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1115.923325][T12211] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1115.927919][T12211] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1115.927950][T12211] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1115.927971][T12211] usb 8-1: Manufacturer: syz [ 1116.045774][T12211] usb 8-1: config 0 descriptor?? [ 1116.059461][ T5815] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.059492][ T5815] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1116.103698][ T5815] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1116.103733][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.103755][ T5815] usb 9-1: Product: syz [ 1116.103771][ T5815] usb 9-1: Manufacturer: syz [ 1116.103787][ T5815] usb 9-1: SerialNumber: syz [ 1116.121119][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.121337][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.678605][ T5815] usb 9-1: config 0 descriptor?? [ 1116.764584][ T5468] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1117.020421][ T5824] Bluetooth: Frame is too long (len 16, expected len 4) [ 1117.211903][T12211] rc_core: IR keymap rc-hauppauge not found [ 1117.211929][T12211] Registered IR keymap rc-empty [ 1117.212105][T12211] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1117.227342][T12211] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1117.253413][T12211] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1117.256152][T12211] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input42 [ 1117.262529][T12211] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1117.277462][T12211] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1117.303780][T12211] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1117.378217][T12211] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1117.406965][T12211] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1117.434195][T12211] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1117.458116][T12211] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1117.477274][T12211] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1117.535730][T12211] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1117.547295][T12211] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1117.599382][T12211] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1117.599413][T12211] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1117.638017][T12211] usb 8-1: USB disconnect, device number 30 [ 1118.746607][ T5824] Bluetooth: hci0: command tx timeout [ 1119.104896][ T42] usb 9-1: USB disconnect, device number 12 [ 1121.279988][ T5824] Bluetooth: hci0: command tx timeout [ 1122.788086][T13108] overlayfs: failed to resolve './file1': -2 [ 1123.806201][ T5824] Bluetooth: hci0: command tx timeout [ 1125.486825][T13129] /dev/nullb0: Can't open blockdev [ 1125.496768][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1125.552848][T13129] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1125.559147][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1125.580850][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1125.590603][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1125.613743][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1125.857698][ T5824] Bluetooth: hci0: command tx timeout [ 1126.457248][T11135] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1126.609850][T11135] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.609881][T11135] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1126.642363][T11135] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1126.642396][T11135] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.642419][T11135] usb 9-1: Product: syz [ 1126.642432][T11135] usb 9-1: Manufacturer: syz [ 1126.642446][T11135] usb 9-1: SerialNumber: syz [ 1126.710608][T11135] usb 9-1: config 0 descriptor?? [ 1127.777238][ T5824] Bluetooth: hci1: command tx timeout [ 1128.958231][T13057] chnl_net:caif_netlink_parms(): no params data found [ 1129.611646][T13180] overlayfs: failed to resolve './file1': -2 [ 1129.858537][ T5824] Bluetooth: hci1: command tx timeout [ 1130.433564][T12211] usb 9-1: USB disconnect, device number 13 [ 1131.138232][T13197] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1131.947150][ T5824] Bluetooth: hci1: command tx timeout [ 1133.374531][T13057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.374775][T13057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.375047][T13057] bridge_slave_0: entered allmulticast mode [ 1133.378823][T13057] bridge_slave_0: entered promiscuous mode [ 1133.398258][T13057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.398381][T13057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.398586][T13057] bridge_slave_1: entered allmulticast mode [ 1133.401202][T13057] bridge_slave_1: entered promiscuous mode [ 1133.446269][T13218] overlayfs: failed to resolve './file1': -2 [ 1134.161540][T13222] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1134.483462][ T5824] Bluetooth: hci1: command tx timeout [ 1135.419786][T13057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.857870][T13057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.268080][T11135] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1136.673223][T11135] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.673256][T11135] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1136.723566][T11135] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1136.723602][T11135] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.723623][T11135] usb 7-1: Product: syz [ 1136.723638][T11135] usb 7-1: Manufacturer: syz [ 1136.723652][T11135] usb 7-1: SerialNumber: syz [ 1136.755447][T13057] team0: Port device team_slave_0 added [ 1136.840877][T13057] team0: Port device team_slave_1 added [ 1136.841649][T11135] usb 7-1: config 0 descriptor?? [ 1137.185340][T13057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.185354][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.185372][T13057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.207203][ T908] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1137.214724][T13057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.214741][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.214769][T13057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.392827][ T908] usb 8-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1137.392862][ T908] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1137.417587][ T908] usb 8-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1137.417622][ T908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.417655][ T908] usb 8-1: Product: syz [ 1137.417671][ T908] usb 8-1: Manufacturer: syz [ 1137.417688][ T908] usb 8-1: SerialNumber: syz [ 1137.465730][ T908] usb 8-1: config 0 descriptor?? [ 1137.600341][T13130] chnl_net:caif_netlink_parms(): no params data found [ 1137.645252][T13057] hsr_slave_0: entered promiscuous mode [ 1137.653722][T13057] hsr_slave_1: entered promiscuous mode [ 1137.655494][T13057] debugfs: 'hsr0' already exists in 'hsr' [ 1137.655523][T13057] Cannot create hsr debugfs directory [ 1137.926710][T13239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.955179][T13239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.174047][ T908] mos7840 8-1:0.0: required endpoints missing [ 1138.197798][ T908] usb 8-1: USB disconnect, device number 31 [ 1138.317450][ T8940] bridge_slave_1: left allmulticast mode [ 1138.317483][ T8940] bridge_slave_1: left promiscuous mode [ 1138.317757][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.379319][ T8940] bridge_slave_0: left allmulticast mode [ 1138.379351][ T8940] bridge_slave_0: left promiscuous mode [ 1138.379605][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.845357][ T31] usb 7-1: USB disconnect, device number 32 [ 1139.933836][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.478348][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1141.575364][ T8940] bond0 (unregistering): Released all slaves [ 1144.438797][ T8940] hsr_slave_0: left promiscuous mode [ 1144.477249][ T8940] hsr_slave_1: left promiscuous mode [ 1144.477983][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.508132][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.677176][ T31] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1144.749717][ T42] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1144.869469][ T31] usb 8-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1144.869504][ T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1144.871873][ T31] usb 8-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1144.871896][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.871909][ T31] usb 8-1: Product: syz [ 1144.871918][ T31] usb 8-1: Manufacturer: syz [ 1144.871926][ T31] usb 8-1: SerialNumber: syz [ 1144.876228][ T31] usb 8-1: config 0 descriptor?? [ 1144.886158][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1144.954641][ T42] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.954660][ T42] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1144.960864][ T42] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1144.960950][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.960970][ T42] usb 9-1: Product: syz [ 1144.960984][ T42] usb 9-1: Manufacturer: syz [ 1144.960998][ T42] usb 9-1: SerialNumber: syz [ 1144.986119][ T42] usb 9-1: config 0 descriptor?? [ 1144.995966][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1145.247399][T13130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.247705][T13130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.247963][T13130] bridge_slave_0: entered allmulticast mode [ 1145.252623][T13130] bridge_slave_0: entered promiscuous mode [ 1145.312483][T13130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.312681][T13130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.312881][T13130] bridge_slave_1: entered allmulticast mode [ 1145.316771][T13130] bridge_slave_1: entered promiscuous mode [ 1145.372457][T13281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.387655][T13281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.514896][T13130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.543808][T13130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.661438][T13130] team0: Port device team_slave_0 added [ 1145.688420][ T31] mos7840 8-1:0.0: required endpoints missing [ 1145.744354][T13130] team0: Port device team_slave_1 added [ 1146.761857][ T31] usb 8-1: USB disconnect, device number 32 [ 1147.363284][T13296] 9p: Bad value for 'rfdno' [ 1147.546837][ T5876] usb 9-1: USB disconnect, device number 14 [ 1149.870263][T13130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.870337][T13130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.870417][T13130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.412135][T13130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.412200][T13130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.412248][T13130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1152.504006][ T5824] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 1154.257173][T12211] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1154.581421][T12211] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.581455][T12211] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1154.596149][T12211] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1154.596184][T12211] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.596206][T12211] usb 9-1: Product: syz [ 1154.596222][T12211] usb 9-1: Manufacturer: syz [ 1154.596238][T12211] usb 9-1: SerialNumber: syz [ 1154.726716][T13350] blktrace: Concurrent blktraces are not allowed on loop12 [ 1155.931463][T13353] ubi: mtd0 is already attached to ubi16 [ 1156.027734][T13353] overlayfs: failed to resolve './file1': -2 [ 1156.553896][T12211] usb 9-1: config 0 descriptor?? [ 1157.234510][ T5824] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 1157.505212][T13130] hsr_slave_0: entered promiscuous mode [ 1157.519362][T13130] hsr_slave_1: entered promiscuous mode [ 1157.522022][T13130] debugfs: 'hsr0' already exists in 'hsr' [ 1157.522051][T13130] Cannot create hsr debugfs directory [ 1157.923645][ T5468] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1158.029775][T12211] usb 9-1: USB disconnect, device number 15 [ 1159.265987][ T5824] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 1164.581794][ T5824] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 1165.579437][T13405] ubi: mtd0 is already attached to ubi16 [ 1165.645331][T13405] overlayfs: failed to resolve './file1': -2 [ 1173.367284][ T8940] bridge_slave_1: left allmulticast mode [ 1173.367308][ T8940] bridge_slave_1: left promiscuous mode [ 1173.367494][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.479017][ T8940] bridge_slave_0: left allmulticast mode [ 1173.479053][ T8940] bridge_slave_0: left promiscuous mode [ 1173.479336][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.546926][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1174.599273][ T42] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1174.619912][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1174.626310][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1174.628056][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1174.631702][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1174.769952][ T42] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1174.769987][ T42] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1174.770004][ T42] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1174.770031][ T42] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1174.770045][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.845993][T13451] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1174.963698][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.159756][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.242816][ T8940] bond0 (unregistering): Released all slaves [ 1175.675035][ T42] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 1175.693016][ T42] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input44 [ 1176.260134][ T42] usb 8-1: USB disconnect, device number 33 [ 1176.260231][ C1] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1176.812294][ T5824] Bluetooth: hci2: command tx timeout [ 1176.943158][T13467] ubi: mtd0 is already attached to ubi16 [ 1176.956845][T13467] overlayfs: failed to resolve './file1': -2 [ 1177.653343][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.653390][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.817547][ T5824] Bluetooth: hci2: command tx timeout [ 1180.070441][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1180.096310][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1180.099359][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1180.105725][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1180.123144][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1180.412939][ T8940] hsr_slave_0: left promiscuous mode [ 1180.450329][ T8940] hsr_slave_1: left promiscuous mode [ 1180.451495][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.519904][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.897173][ T5824] Bluetooth: hci2: command tx timeout [ 1181.520769][T13512] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1948'. [ 1182.337365][ T5824] Bluetooth: hci3: command tx timeout [ 1182.807907][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1182.978176][ T5824] Bluetooth: hci2: command tx timeout [ 1183.149517][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1184.476567][ T5824] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 1184.879036][ T5824] Bluetooth: hci3: command tx timeout [ 1185.721703][ T5812] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 1186.130685][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1186.187322][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1186.190535][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1186.192756][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1186.195273][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1186.474908][T13538] ubi: mtd0 is already attached to ubi16 [ 1186.494279][T13538] overlayfs: failed to resolve './file1': -2 [ 1186.941835][T13543] Bluetooth: hci3: command tx timeout [ 1187.637255][T13543] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 1188.824031][T13543] Bluetooth: hci6: command tx timeout [ 1188.998791][T13543] Bluetooth: hci3: command tx timeout [ 1190.350383][T13543] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 1190.899891][T13543] Bluetooth: hci6: command tx timeout [ 1192.996199][T13543] Bluetooth: hci6: command tx timeout [ 1193.112922][T13580] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1195.202466][T13543] Bluetooth: hci6: command tx timeout [ 1195.881718][T13597] ubi: mtd0 is already attached to ubi16 [ 1196.719410][T13599] ubi: mtd0 is already attached to ubi16 [ 1196.872085][T13452] chnl_net:caif_netlink_parms(): no params data found [ 1202.381836][T13621] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1204.025978][T13543] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 1204.051047][T13470] chnl_net:caif_netlink_parms(): no params data found [ 1204.535094][T13543] Bluetooth: hci4: unexpected cc 0x0c13 length: 85 > 1 [ 1204.535135][T13543] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 1204.742801][T13536] chnl_net:caif_netlink_parms(): no params data found [ 1205.899353][T13452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.899559][T13452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.900208][T13452] bridge_slave_0: entered allmulticast mode [ 1205.922122][T13452] bridge_slave_0: entered promiscuous mode [ 1207.755005][T13452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.755179][T13452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.755427][T13452] bridge_slave_1: entered allmulticast mode [ 1207.793117][T13452] bridge_slave_1: entered promiscuous mode [ 1211.415289][T13452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.960879][T13452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.419076][T13470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.419221][T13470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.419495][T13470] bridge_slave_0: entered allmulticast mode [ 1213.429379][T13470] bridge_slave_0: entered promiscuous mode [ 1213.456794][T13688] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1213.522641][T13536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.522831][T13536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.523101][T13536] bridge_slave_0: entered allmulticast mode [ 1213.557840][T13536] bridge_slave_0: entered promiscuous mode [ 1213.566661][T13470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.566889][T13470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.571865][T13470] bridge_slave_1: entered allmulticast mode [ 1213.603628][T13470] bridge_slave_1: entered promiscuous mode [ 1213.620360][T13452] team0: Port device team_slave_0 added [ 1213.620829][T13536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.620997][T13536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.621228][T13536] bridge_slave_1: entered allmulticast mode [ 1213.664707][T13536] bridge_slave_1: entered promiscuous mode [ 1213.706552][T13452] team0: Port device team_slave_1 added [ 1213.886465][T13470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.895136][T13543] Bluetooth: hci4: unexpected cc 0x0c13 length: 85 > 1 [ 1213.895174][T13543] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 1213.954017][T13536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.965541][T13452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.965562][T13452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.965592][T13452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.046072][T13470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.068773][T13536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.074228][T13452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.074247][T13452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.074279][T13452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.011288][T13699] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1216.091879][T13470] team0: Port device team_slave_0 added [ 1216.112786][T13536] team0: Port device team_slave_0 added [ 1216.119764][T13470] team0: Port device team_slave_1 added [ 1216.375346][T13536] team0: Port device team_slave_1 added [ 1216.743541][T13709] ubi: mtd0 is already attached to ubi16 [ 1217.440471][T13452] hsr_slave_0: entered promiscuous mode [ 1217.459699][T13452] hsr_slave_1: entered promiscuous mode [ 1217.460808][T13452] debugfs: 'hsr0' already exists in 'hsr' [ 1217.460834][T13452] Cannot create hsr debugfs directory [ 1217.461945][T13470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.461960][T13470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.461992][T13470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.561770][T13470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.561790][T13470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.561821][T13470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.588030][T13536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.588051][T13536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.588082][T13536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.674904][T13536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.674924][T13536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.674955][T13536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.798818][T13470] hsr_slave_0: entered promiscuous mode [ 1218.800558][T13470] hsr_slave_1: entered promiscuous mode [ 1218.804504][T13470] debugfs: 'hsr0' already exists in 'hsr' [ 1218.804551][T13470] Cannot create hsr debugfs directory [ 1219.200707][T13718] ubi: mtd0 is already attached to ubi16 [ 1219.960894][T13721] ubi: mtd0 is already attached to ubi16 [ 1223.432688][T13543] Bluetooth: hci5: unexpected cc 0x0c13 length: 85 > 1 [ 1223.432725][T13543] Bluetooth: hci5: unexpected event for opcode 0x0c13 [ 1224.383318][ T8940] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.476352][T13536] hsr_slave_0: entered promiscuous mode [ 1224.478332][T13536] hsr_slave_1: entered promiscuous mode [ 1224.479330][T13536] debugfs: 'hsr0' already exists in 'hsr' [ 1224.479357][T13536] Cannot create hsr debugfs directory [ 1224.877780][T13543] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 1225.780269][T13742] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1995'. [ 1226.874840][ T8940] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.732365][T13543] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 1229.698628][ T8940] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.399662][ T8940] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.364594][T13774] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1233.747622][ T908] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1233.748305][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 1233.917639][ T908] usb 8-1: device descriptor read/64, error -32 [ 1234.197163][ T908] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1234.372278][ T908] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1234.372319][ T908] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1234.372350][ T908] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1234.372406][ T908] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1234.372433][ T908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.435808][T13777] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1234.530836][T13488] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1234.562058][T13488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1234.606864][T13488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1234.681344][T13488] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1234.718962][T13488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1235.350152][ T908] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 1235.390622][ T908] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input45 [ 1235.806549][ T908] usb 8-1: USB disconnect, device number 35 [ 1235.806647][ C0] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1237.418563][T13543] Bluetooth: hci0: command tx timeout [ 1238.142156][ T5468] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1238.864490][T13488] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1238.905309][T13488] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1238.915126][T13488] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1238.965436][T13488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1238.968822][T13488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1238.981897][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.981964][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.467451][T13817] binder: 13808:13817 ioctl c0306201 0 returned -14 [ 1239.793853][T13543] Bluetooth: hci0: command tx timeout [ 1239.997852][ T8940] bridge_slave_1: left allmulticast mode [ 1239.997888][ T8940] bridge_slave_1: left promiscuous mode [ 1239.998211][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.261891][ T8940] bridge_slave_0: left allmulticast mode [ 1240.261927][ T8940] bridge_slave_0: left promiscuous mode [ 1240.278880][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.591786][T13543] Bluetooth: hci1: command tx timeout [ 1243.105483][T13543] Bluetooth: hci0: command tx timeout [ 1243.631188][T13488] Bluetooth: hci1: command tx timeout [ 1244.638996][ T8940] bridge_slave_1: left allmulticast mode [ 1244.639031][ T8940] bridge_slave_1: left promiscuous mode [ 1244.639306][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.763177][ T8940] bridge_slave_0: left allmulticast mode [ 1244.763201][ T8940] bridge_slave_0: left promiscuous mode [ 1244.763363][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.137064][T13488] Bluetooth: hci0: command tx timeout [ 1245.408296][T13543] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1245.482315][T13543] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1245.491064][T13543] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1245.521652][T13543] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1245.522478][T13543] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1245.697459][T13543] Bluetooth: hci1: command tx timeout [ 1246.457746][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.617465][T13488] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 1247.495163][T13855] ubi: mtd0 is already attached to ubi16 [ 1247.782510][T13488] Bluetooth: hci1: command tx timeout [ 1248.025629][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.198678][ T8940] bond0 (unregistering): Released all slaves [ 1248.261138][T13488] Bluetooth: hci7: command tx timeout [ 1249.036853][T13488] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 1249.800962][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.878181][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.921494][ T8940] bond0 (unregistering): Released all slaves [ 1250.361623][T13488] Bluetooth: hci7: command tx timeout [ 1252.417990][T13488] Bluetooth: hci7: command tx timeout [ 1254.210704][T13896] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2030'. [ 1254.325165][T13782] chnl_net:caif_netlink_parms(): no params data found [ 1254.497356][T13488] Bluetooth: hci7: command tx timeout [ 1260.222994][T13919] overlayfs: failed to resolve './file1': -2 [ 1265.304962][T13934] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1269.167259][ T8940] hsr_slave_0: left promiscuous mode [ 1269.207150][ T8940] hsr_slave_1: left promiscuous mode [ 1269.208342][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.248527][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.447289][ T8940] hsr_slave_0: left promiscuous mode [ 1269.501268][ T8940] hsr_slave_1: left promiscuous mode [ 1269.502228][ T8940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.502247][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.554140][ T8940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.554178][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.982217][ T8940] veth1_macvtap: left promiscuous mode [ 1270.015160][ T8940] veth0_macvtap: left promiscuous mode [ 1270.015455][ T8940] veth1_vlan: left promiscuous mode [ 1270.015650][ T8940] veth0_vlan: left promiscuous mode [ 1270.137500][T13488] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 1271.067518][T13986] ubi: mtd0 is already attached to ubi16 [ 1273.171607][T13999] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1274.762060][T14003] ubi: mtd0 is already attached to ubi16 [ 1275.589049][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1275.642309][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1278.025272][T13488] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 1282.244406][T14031] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2060'. [ 1283.632924][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1283.744678][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1284.285739][ T5468] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1284.321285][T13782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.321511][T13782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.321907][T13782] bridge_slave_0: entered allmulticast mode [ 1284.325556][T13782] bridge_slave_0: entered promiscuous mode [ 1284.382290][T13782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.382450][T13782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.382718][T13782] bridge_slave_1: entered allmulticast mode [ 1284.409863][T13782] bridge_slave_1: entered promiscuous mode [ 1285.065800][T13782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.107380][T13782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.348191][T13813] chnl_net:caif_netlink_parms(): no params data found [ 1286.063513][T13782] team0: Port device team_slave_0 added [ 1286.551921][T13782] team0: Port device team_slave_1 added [ 1286.707193][T12211] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1286.897196][T12211] usb 9-1: Using ep0 maxpacket: 16 [ 1286.899631][T12211] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.899692][T12211] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1286.899724][T12211] usb 9-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1286.899747][T12211] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1286.901307][T12211] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1286.901337][T12211] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1286.901360][T12211] usb 9-1: Manufacturer: syz [ 1286.909893][T12211] usb 9-1: config 0 descriptor?? [ 1288.541580][T13782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.541599][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.541631][T13782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.632401][T13844] chnl_net:caif_netlink_parms(): no params data found [ 1288.652614][T13782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.652652][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.652681][T13782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.068053][T11135] usb 9-1: USB disconnect, device number 16 [ 1290.205685][T13813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.205776][T13813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.205938][T13813] bridge_slave_0: entered allmulticast mode [ 1290.207758][T13813] bridge_slave_0: entered promiscuous mode [ 1293.668830][T13813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.668973][T13813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.669226][T13813] bridge_slave_1: entered allmulticast mode [ 1293.675353][T13813] bridge_slave_1: entered promiscuous mode [ 1293.975855][T14106] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1294.856848][T13543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1295.145548][T13543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1295.157970][T13543] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1295.162655][T13543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1295.163643][T13543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1295.413966][T13813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.456455][T13813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.622663][T13844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.622808][T13844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.623048][T13844] bridge_slave_0: entered allmulticast mode [ 1295.654824][T13844] bridge_slave_0: entered promiscuous mode [ 1295.674159][T13813] team0: Port device team_slave_0 added [ 1295.676136][T13844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.676469][T13844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.699714][T13844] bridge_slave_1: entered allmulticast mode [ 1295.703329][T13844] bridge_slave_1: entered promiscuous mode [ 1295.734050][T13813] team0: Port device team_slave_1 added [ 1295.886360][T13844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.615834][T14120] 9p: Bad value for 'rfdno' [ 1297.007195][T13813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.007217][T13813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.007249][T13813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.049217][T13844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.377444][T13543] Bluetooth: hci2: command tx timeout [ 1298.236585][T13813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.236605][T13813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.236635][T13813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.383017][ T5815] hid-generic 0005:9C3F:0006.0001: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1299.379377][T13844] team0: Port device team_slave_0 added [ 1299.433790][T13844] team0: Port device team_slave_1 added [ 1299.457491][T13543] Bluetooth: hci2: command tx timeout [ 1299.577107][ T5815] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 1299.630077][T12211] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1299.631341][T13844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.631356][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.631382][T13844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.746519][T13488] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1299.810541][T13844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.810564][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.810595][T13844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.837162][T12211] usb 9-1: Using ep0 maxpacket: 16 [ 1299.844566][T12211] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.844607][T12211] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1299.847747][T12211] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1299.847775][T12211] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.847795][T12211] usb 9-1: Product: syz [ 1299.847809][T12211] usb 9-1: Manufacturer: syz [ 1299.847824][T12211] usb 9-1: SerialNumber: syz [ 1299.853174][T12211] usb 9-1: config 0 descriptor?? [ 1299.947051][ T5815] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1299.947083][ T5815] usb 8-1: config 0 has no interface number 0 [ 1299.947126][ T5815] usb 8-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1299.951233][ T5815] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1299.951264][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1299.951286][ T5815] usb 8-1: Product: syz [ 1299.951301][ T5815] usb 8-1: SerialNumber: syz [ 1299.956599][T13488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1299.966107][T13488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1299.979701][T13488] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1300.028728][T13488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1300.136472][ T5815] usb 8-1: config 0 descriptor?? [ 1300.228106][ T5815] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 1300.323250][T12211] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1300.323366][T12211] imon 9-1:0.0: unable to initialize intf0, err -19 [ 1300.323385][T12211] imon:imon_probe: failed to initialize context! [ 1300.323399][T12211] imon 9-1:0.0: unable to register, err -19 [ 1300.424962][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.425070][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.006405][T13844] hsr_slave_0: entered promiscuous mode [ 1301.008322][T13844] hsr_slave_1: entered promiscuous mode [ 1301.009403][T13844] debugfs: 'hsr0' already exists in 'hsr' [ 1301.009431][T13844] Cannot create hsr debugfs directory [ 1301.188343][ T8940] bridge_slave_1: left allmulticast mode [ 1301.188377][ T8940] bridge_slave_1: left promiscuous mode [ 1301.188661][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.249107][ T8940] bridge_slave_0: left allmulticast mode [ 1301.249141][ T8940] bridge_slave_0: left promiscuous mode [ 1301.249440][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.397196][ T8940] bridge_slave_1: left allmulticast mode [ 1301.397231][ T8940] bridge_slave_1: left promiscuous mode [ 1301.397612][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.460743][ T8940] bridge_slave_0: left allmulticast mode [ 1301.460780][ T8940] bridge_slave_0: left promiscuous mode [ 1301.461074][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.547134][T13543] Bluetooth: hci2: command tx timeout [ 1301.611061][ T8940] bridge_slave_1: left allmulticast mode [ 1301.611085][ T8940] bridge_slave_1: left promiscuous mode [ 1301.611246][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.669594][ T8940] bridge_slave_0: left allmulticast mode [ 1301.669627][ T8940] bridge_slave_0: left promiscuous mode [ 1301.669899][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.817474][ T8940] bridge_slave_1: left allmulticast mode [ 1301.817511][ T8940] bridge_slave_1: left promiscuous mode [ 1301.817790][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.890097][ T8940] bridge_slave_0: left allmulticast mode [ 1301.890134][ T8940] bridge_slave_0: left promiscuous mode [ 1301.890566][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.027278][ T8940] bridge_slave_1: left allmulticast mode [ 1302.027314][ T8940] bridge_slave_1: left promiscuous mode [ 1302.027704][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.099850][ T8940] bridge_slave_0: left allmulticast mode [ 1302.100099][ T8940] bridge_slave_0: left promiscuous mode [ 1302.100382][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.377474][T11938] usb 8-1: USB disconnect, device number 36 [ 1302.477991][ T5902] usb 9-1: USB disconnect, device number 17 [ 1302.723007][T13543] Bluetooth: hci0: command tx timeout [ 1303.617874][T13543] Bluetooth: hci2: command tx timeout [ 1303.677123][T11938] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1303.679249][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.827090][T11938] usb 9-1: Using ep0 maxpacket: 16 [ 1303.831003][T11938] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.831067][T11938] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1303.831100][T11938] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1303.831125][T11938] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1303.831151][T11938] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1303.834205][T11938] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1303.834238][T11938] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1303.834261][T11938] usb 9-1: Manufacturer: syz [ 1303.960380][T11938] usb 9-1: config 0 descriptor?? [ 1304.954058][T13543] Bluetooth: hci0: command tx timeout [ 1305.067287][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.230241][ T8940] bond0 (unregistering): Released all slaves [ 1305.417957][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.505669][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.559430][ T8940] bond0 (unregistering): Released all slaves [ 1305.807921][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.888111][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.949731][ T8940] bond0 (unregistering): Released all slaves [ 1306.177224][T11938] rc_core: IR keymap rc-hauppauge not found [ 1306.177249][T11938] Registered IR keymap rc-empty [ 1306.177414][T11938] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1306.197159][T11938] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1306.222148][T11938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1306.242575][T11938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input46 [ 1306.251531][T11938] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1306.282435][T11938] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1306.299563][T11938] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1306.317234][T11938] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1306.626864][T11938] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1306.656746][T11938] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1307.434231][ T5824] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 1307.457509][ T5824] Bluetooth: hci0: command tx timeout [ 1307.463120][T11938] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1307.463546][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.465557][T13488] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1307.479599][T11938] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1307.646442][T11938] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1307.792936][T11938] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1307.813268][T11938] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 1307.813297][T11938] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1307.833543][T11938] usb 9-1: USB disconnect, device number 18 [ 1308.026151][T13488] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1308.814807][T13488] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1308.830933][T13488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1308.831987][T13488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1309.217763][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.321400][ T8940] bond0 (unregistering): Released all slaves [ 1310.567955][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.627970][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.669642][ T8940] bond0 (unregistering): Released all slaves [ 1310.999583][T13488] Bluetooth: hci1: command tx timeout [ 1311.410106][T14177] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2090'. [ 1311.410888][T14177] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2090'. [ 1311.425937][T13488] Bluetooth: hci0: command tx timeout [ 1313.012076][ T5815] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1313.059509][T13543] Bluetooth: hci1: command tx timeout [ 1313.187092][ T5815] usb 8-1: Using ep0 maxpacket: 16 [ 1313.189739][ T5815] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.189797][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1313.189828][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1313.189851][ T5815] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1313.189886][ T5815] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1313.191443][ T5815] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1313.191472][ T5815] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1313.191494][ T5815] usb 8-1: Manufacturer: syz [ 1313.317881][ T5815] usb 8-1: config 0 descriptor?? [ 1313.380745][T14197] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2095'. [ 1313.381012][T14197] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2095'. [ 1314.220813][T14109] chnl_net:caif_netlink_parms(): no params data found [ 1314.658664][T14201] ubi: mtd0 is already attached to ubi16 [ 1315.190291][T13543] Bluetooth: hci1: command tx timeout [ 1315.581215][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.608044][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1315.630835][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.669487][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1315.837025][ T5815] rc_core: IR keymap rc-hauppauge not found [ 1315.837050][ T5815] Registered IR keymap rc-empty [ 1315.837230][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1315.870256][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1315.886082][ T8940] hsr_slave_0: left promiscuous mode [ 1315.894523][ T5815] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1315.910204][ T5815] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input47 [ 1315.945517][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1315.959716][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1315.959957][ T8940] hsr_slave_1: left promiscuous mode [ 1315.962704][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.987794][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1316.007219][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1316.027140][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1316.028273][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1316.047167][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1316.067313][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1316.087288][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1316.107127][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1316.127833][ T5815] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1316.414464][ T5815] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 1316.414492][ T5815] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1316.469026][ T5815] usb 8-1: USB disconnect, device number 37 [ 1317.369368][T13543] Bluetooth: hci1: command tx timeout [ 1317.418647][ T8940] hsr_slave_0: left promiscuous mode [ 1317.480937][ T8940] hsr_slave_1: left promiscuous mode [ 1317.486002][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.538133][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.697185][ T908] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1317.847048][ T908] usb 9-1: Using ep0 maxpacket: 32 [ 1317.866770][ T908] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 1317.866803][ T908] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.866834][ T908] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1317.879292][ T8940] hsr_slave_0: left promiscuous mode [ 1317.902075][ T908] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1317.902110][ T908] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1317.902135][ T908] usb 9-1: Product: syz [ 1317.902151][ T908] usb 9-1: Manufacturer: syz [ 1317.902167][ T908] usb 9-1: SerialNumber: syz [ 1317.916689][ T908] usb 9-1: config 0 descriptor?? [ 1317.951483][ T8940] hsr_slave_1: left promiscuous mode [ 1317.953904][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.998172][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.154762][T14147] usb 9-1: USB disconnect, device number 19 [ 1318.248933][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1318.297929][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1318.569052][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1318.621240][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1321.451844][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1321.507957][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1321.870063][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1321.917962][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1322.320613][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1322.350305][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1322.739703][T14109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.739858][T14109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.740118][T14109] bridge_slave_0: entered allmulticast mode [ 1322.775426][T14109] bridge_slave_0: entered promiscuous mode [ 1322.835788][T14109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.835953][T14109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.836209][T14109] bridge_slave_1: entered allmulticast mode [ 1322.868175][T14109] bridge_slave_1: entered promiscuous mode [ 1324.341692][T14109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.489945][T14109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.748705][T14109] team0: Port device team_slave_0 added [ 1324.767100][ T908] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1324.817390][T14109] team0: Port device team_slave_1 added [ 1324.959658][ T908] usb 9-1: Using ep0 maxpacket: 16 [ 1324.964599][ T908] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.964664][ T908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1324.964696][ T908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1324.964719][ T908] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1324.964745][ T908] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1325.007646][ T908] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1325.007678][ T908] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1325.007698][ T908] usb 9-1: Manufacturer: syz [ 1325.043654][ T908] usb 9-1: config 0 descriptor?? [ 1325.182714][T14109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.182734][T14109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.182834][T14109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.205883][T14109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.205900][T14109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.205928][T14109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.271896][T14140] chnl_net:caif_netlink_parms(): no params data found [ 1325.407897][T14168] chnl_net:caif_netlink_parms(): no params data found [ 1326.214463][T14109] hsr_slave_0: entered promiscuous mode [ 1326.215810][T14109] hsr_slave_1: entered promiscuous mode [ 1326.216717][T14109] debugfs: 'hsr0' already exists in 'hsr' [ 1326.216735][T14109] Cannot create hsr debugfs directory [ 1326.354077][T13543] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 1328.062485][ T908] rc_core: IR keymap rc-hauppauge not found [ 1328.062509][ T908] Registered IR keymap rc-empty [ 1328.062695][ T908] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1328.077197][ T908] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1328.099389][ T908] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1328.105077][ T908] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input48 [ 1328.177694][ T908] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1328.197140][ T908] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1328.223696][ T908] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1328.281853][T14140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.282004][T14140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.282199][T14140] bridge_slave_0: entered allmulticast mode [ 1328.285616][T14140] bridge_slave_0: entered promiscuous mode [ 1328.293528][ T908] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1328.307146][ T908] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1328.327119][ T908] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1328.347098][ T908] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1328.355727][T14168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.355885][T14168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.356157][T14168] bridge_slave_0: entered allmulticast mode [ 1328.367104][ T908] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1328.378167][T14168] bridge_slave_0: entered promiscuous mode [ 1328.387148][ T908] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1328.420727][ T908] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1328.435026][T14140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.435162][T14140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.435403][T14140] bridge_slave_1: entered allmulticast mode [ 1328.528517][ T908] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 1328.528558][ T908] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1328.542366][T14140] bridge_slave_1: entered promiscuous mode [ 1328.547904][ T908] usb 9-1: USB disconnect, device number 20 [ 1328.573498][T14168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.573642][T14168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.573911][T14168] bridge_slave_1: entered allmulticast mode [ 1328.802386][T14168] bridge_slave_1: entered promiscuous mode [ 1329.380730][T14140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.401229][T14168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.472418][T14140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.476486][T14168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.503974][T14140] team0: Port device team_slave_0 added [ 1334.508305][T14168] team0: Port device team_slave_0 added [ 1334.650876][T14168] team0: Port device team_slave_1 added [ 1334.653911][T14140] team0: Port device team_slave_1 added [ 1334.857387][T14330] ubi: mtd0 is already attached to ubi16 [ 1335.601722][T14168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.601737][T14168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.601756][T14168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.603421][T14140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.603432][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.603459][T14140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.826947][T14168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.826968][T14168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.826997][T14168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.849349][T14140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.849367][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.849395][T14140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.046874][T14168] hsr_slave_0: entered promiscuous mode [ 1337.068189][T14168] hsr_slave_1: entered promiscuous mode [ 1337.075768][T14168] debugfs: 'hsr0' already exists in 'hsr' [ 1337.075811][T14168] Cannot create hsr debugfs directory [ 1337.150795][T14140] hsr_slave_0: entered promiscuous mode [ 1337.153134][T14140] hsr_slave_1: entered promiscuous mode [ 1337.193359][T14140] debugfs: 'hsr0' already exists in 'hsr' [ 1337.193395][T14140] Cannot create hsr debugfs directory [ 1340.283829][T14109] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1340.394119][T14109] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1340.483857][T14109] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1340.770249][T14369] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1341.994012][T14109] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1342.197428][T14372] ubi: mtd0 is already attached to ubi16 [ 1343.294212][T14109] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1343.414092][T14109] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1343.582109][T14109] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1343.621282][T14109] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1343.675853][ T5902] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1344.067357][ T5902] usb 9-1: Using ep0 maxpacket: 16 [ 1344.070888][ T5902] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.070950][ T5902] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1344.070984][ T5902] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1344.071008][ T5902] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1344.071034][ T5902] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1344.072290][ T5902] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1344.072319][ T5902] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1344.072341][ T5902] usb 9-1: Manufacturer: syz [ 1344.101058][ T5902] usb 9-1: config 0 descriptor?? [ 1344.408599][ T5902] rc_core: IR keymap rc-hauppauge not found [ 1344.408623][ T5902] Registered IR keymap rc-empty [ 1344.408805][ T5902] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1344.443282][ T5902] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1344.485151][ T5902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1344.515595][ T5902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input50 [ 1344.536737][ T5902] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1344.567123][ T5902] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1344.589026][ T5902] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1344.607130][ T5902] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1344.627162][ T5902] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1344.647169][ T5902] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1344.667240][ T5902] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1344.687104][ T5902] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1344.707189][ T5902] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1344.727321][ T5902] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1344.761735][ T5902] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1344.761763][ T5902] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1344.804655][ T5902] usb 9-1: USB disconnect, device number 21 [ 1345.227411][T14109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.457569][T14407] syzkaller1: entered promiscuous mode [ 1346.458457][T14407] syzkaller1: entered allmulticast mode [ 1348.221178][T14109] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.299025][T14168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1348.329496][ T908] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1348.491487][ T908] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1348.491530][ T908] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1348.491559][ T908] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1348.491607][ T908] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1348.491635][ T908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.569610][T14168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1348.578836][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.579076][ T8938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.592353][T14168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1348.659257][T14425] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1348.720656][T14168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1349.769850][ T8940] bridge_slave_1: left allmulticast mode [ 1349.769888][ T8940] bridge_slave_1: left promiscuous mode [ 1349.770175][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.869014][ T8940] bridge_slave_0: left allmulticast mode [ 1349.869046][ T8940] bridge_slave_0: left promiscuous mode [ 1349.869310][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.127360][ T8940] bridge_slave_1: left allmulticast mode [ 1350.127393][ T8940] bridge_slave_1: left promiscuous mode [ 1350.127680][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.132007][ T908] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 1350.135790][ T908] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input51 [ 1350.237059][T11135] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 1350.305937][ T8940] bridge_slave_0: left allmulticast mode [ 1350.305973][ T8940] bridge_slave_0: left promiscuous mode [ 1350.306638][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.363822][ T908] usb 9-1: USB disconnect, device number 22 [ 1350.363927][ C0] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1350.415114][T11135] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1350.415150][T11135] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.415173][T11135] usb 8-1: Product: syz [ 1350.415189][T11135] usb 8-1: Manufacturer: syz [ 1350.415205][T11135] usb 8-1: SerialNumber: syz [ 1350.495989][T11135] usb 8-1: config 0 descriptor?? [ 1350.803046][T11135] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1351.718120][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1351.899467][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1352.060132][ T8940] bond0 (unregistering): Released all slaves [ 1353.719349][ T8940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.837927][ T8940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.936548][ T8940] bond0 (unregistering): Released all slaves [ 1354.223991][T11135] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1354.692715][T14168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1354.867162][T14168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1354.914284][T14168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1354.952460][T14168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1354.966112][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.966455][ T908] usb 8-1: USB disconnect, device number 38 [ 1354.983365][ T8938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.709886][T13543] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 1357.161991][T13488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1357.229323][T13488] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1357.281091][T13488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1357.370326][T13488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1357.371287][T13488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1359.066227][ T8940] hsr_slave_0: left promiscuous mode [ 1359.187218][ T8940] hsr_slave_1: left promiscuous mode [ 1359.188328][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.235626][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.537148][T13543] Bluetooth: hci3: command tx timeout [ 1360.738458][ T8940] hsr_slave_0: left promiscuous mode [ 1360.819734][ T8940] hsr_slave_1: left promiscuous mode [ 1360.820492][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.864311][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.617661][T13543] Bluetooth: hci3: command tx timeout [ 1362.530011][T14516] ubi: mtd0 is already attached to ubi16 [ 1362.639284][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.661526][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1362.694307][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.059723][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1363.718175][ T8940] team0 (unregistering): Port device team_slave_1 removed [ 1363.763526][ T5824] Bluetooth: hci3: command tx timeout [ 1363.794981][T13488] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1363.859694][T13488] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1363.863600][T13488] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1363.864941][T13488] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1363.876376][T13488] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1363.974725][ T8940] team0 (unregistering): Port device team_slave_0 removed [ 1365.777054][T13488] Bluetooth: hci3: command tx timeout [ 1366.017150][T13488] Bluetooth: hci2: command tx timeout [ 1368.300698][T13488] Bluetooth: hci2: command tx timeout [ 1369.326259][T13543] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1369.485252][T13543] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1369.509236][T13543] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1369.525154][T13543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1369.534735][T13543] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1370.269914][T13488] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 1370.337154][T13488] Bluetooth: hci2: command tx timeout [ 1371.767497][T13488] Bluetooth: hci0: command tx timeout [ 1372.055019][ T5468] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1372.357386][T14147] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1372.414095][T14581] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1372.422926][T13488] Bluetooth: hci2: command tx timeout [ 1372.610408][T14147] usb 9-1: Using ep0 maxpacket: 16 [ 1372.675988][T14147] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1372.676042][T14147] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1372.766298][T14147] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1372.766463][T14147] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.766545][T14147] usb 9-1: Product: syz [ 1372.766563][T14147] usb 9-1: Manufacturer: syz [ 1372.766579][T14147] usb 9-1: SerialNumber: syz [ 1373.186821][T14147] usb 9-1: config 0 descriptor?? [ 1373.988595][T13488] Bluetooth: hci0: command tx timeout [ 1375.136202][T14147] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input52 [ 1375.146869][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1375.150026][T14147] imon:send_packet: packet tx failed (-71) [ 1375.168948][T14147] imon 9-1:0.0: panel buttons/knobs setup failed [ 1375.321329][T14147] rc_core: IR keymap rc-imon-pad not found [ 1375.321352][T14147] Registered IR keymap rc-empty [ 1375.321443][T14147] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1375.321463][T14147] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1375.321802][T14147] imon:send_packet: packet tx failed (-71) [ 1375.367488][T14147] imon 9-1:0.0: remote input dev register failed [ 1375.367677][T14147] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 1376.240123][T13488] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 1376.240214][T13488] Bluetooth: hci0: command tx timeout [ 1376.945138][T14147] imon 9-1:0.0: unable to initialize intf0, err 0 [ 1376.945165][T14147] imon:imon_probe: failed to initialize context! [ 1376.945180][T14147] imon 9-1:0.0: unable to register, err -19 [ 1376.989412][T14147] usb 9-1: USB disconnect, device number 23 [ 1377.130518][T14489] chnl_net:caif_netlink_parms(): no params data found [ 1377.347209][T14147] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1377.504211][T14147] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1377.504258][T14147] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.504280][T14147] usb 9-1: Product: syz [ 1377.504296][T14147] usb 9-1: Manufacturer: syz [ 1377.504312][T14147] usb 9-1: SerialNumber: syz [ 1377.564868][T14147] usb 9-1: config 0 descriptor?? [ 1377.805877][T14520] chnl_net:caif_netlink_parms(): no params data found [ 1377.823004][T14147] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1378.257059][T13543] Bluetooth: hci0: command tx timeout [ 1379.986669][T14489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.987384][T14489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.987612][T14489] bridge_slave_0: entered allmulticast mode [ 1379.992963][T14489] bridge_slave_0: entered promiscuous mode [ 1380.031640][T14489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.031821][T14489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.032035][T14489] bridge_slave_1: entered allmulticast mode [ 1380.035479][T14489] bridge_slave_1: entered promiscuous mode [ 1380.180483][T14147] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1380.225623][T14147] usb 9-1: USB disconnect, device number 24 [ 1381.630963][T14657] ubi: mtd0 is already attached to ubi16 [ 1383.625776][T13543] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 1384.351274][T14489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1384.876622][T14690] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1386.011918][T11135] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1386.189251][T11135] usb 9-1: config 17 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1386.189305][T11135] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1386.189331][T11135] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.239265][T14489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.284034][T11135] aiptek 9-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1386.304883][T14520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.305031][T14520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.305320][T14520] bridge_slave_0: entered allmulticast mode [ 1386.328962][T14520] bridge_slave_0: entered promiscuous mode [ 1386.453799][T14520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.453944][T14520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.454157][T14520] bridge_slave_1: entered allmulticast mode [ 1386.459031][T14520] bridge_slave_1: entered promiscuous mode [ 1386.831841][T14489] team0: Port device team_slave_0 added [ 1386.833526][T14550] chnl_net:caif_netlink_parms(): no params data found [ 1386.873895][T14489] team0: Port device team_slave_1 added [ 1386.910274][T14520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.973692][T14520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.051268][T14489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.051288][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.051319][T14489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.129219][T14489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.129237][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.129268][T14489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.170006][T14520] team0: Port device team_slave_0 added [ 1387.290941][T14520] team0: Port device team_slave_1 added [ 1387.478059][T14550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.478459][T14550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.479086][T14550] bridge_slave_0: entered allmulticast mode [ 1387.488656][T14550] bridge_slave_0: entered promiscuous mode [ 1387.718936][T14520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.718950][T14520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.718968][T14520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.719634][T14550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.720003][T14550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.720211][T14550] bridge_slave_1: entered allmulticast mode [ 1387.722088][T14550] bridge_slave_1: entered promiscuous mode [ 1387.850151][T14489] hsr_slave_0: entered promiscuous mode [ 1387.851226][T14489] hsr_slave_1: entered promiscuous mode [ 1387.851817][T14489] debugfs: 'hsr0' already exists in 'hsr' [ 1387.851843][T14489] Cannot create hsr debugfs directory [ 1387.868843][T14520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.868860][T14520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.868886][T14520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.936825][ T36] audit: type=1326 audit(1776638560.270:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6ac3c819 code=0x7ffc0000 [ 1387.937172][ T36] audit: type=1326 audit(1776638560.270:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6ac3c819 code=0x7ffc0000 [ 1387.937218][ T36] audit: type=1326 audit(1776638560.270:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f6abfd04e code=0x7ffc0000 [ 1387.937259][ T36] audit: type=1326 audit(1776638560.270:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f6abfd04e code=0x7ffc0000 [ 1387.937305][ T36] audit: type=1326 audit(1776638560.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f6abfd04e code=0x7ffc0000 [ 1387.938488][ T36] audit: type=1326 audit(1776638560.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f6abfd04e code=0x7ffc0000 [ 1387.939741][ T36] audit: type=1326 audit(1776638560.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f6abfd04e code=0x7ffc0000 [ 1387.942450][ T36] audit: type=1326 audit(1776638560.280:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f6abfd04e code=0x7ffc0000 [ 1387.983516][ T36] audit: type=1326 audit(1776638560.280:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f6abfd04e code=0x7ffc0000 [ 1387.983571][ T36] audit: type=1326 audit(1776638560.310:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14706 comm="syz.7.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f6abfd04e code=0x7ffc0000 [ 1388.195045][T14550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.254183][T14550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.420246][T14520] hsr_slave_0: entered promiscuous mode [ 1388.422644][T14520] hsr_slave_1: entered promiscuous mode [ 1388.424305][T14520] debugfs: 'hsr0' already exists in 'hsr' [ 1388.424435][T14520] Cannot create hsr debugfs directory [ 1388.555328][T14706] ================================================================== [ 1388.555348][T14706] BUG: KASAN: slab-use-after-free in rt_spi[ 1388.555348][T14706] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 1388.555535][T14706] Read of size 1 at addr ffff88804c92a200 by task syz.7.2172/14706 [ 1388.555556][T14706] [ 1388.555572][T14706] CPU: 0 UID: 0 PID: 14706 Comm: syz.7.2172 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1388.555603][T14706] Tainted: [L]=SOFTLOCKUP [ 1388.555612][T14706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1388.555625][T14706] Call Trace: [ 1388.555634][T14706] [ 1388.555645][T14706] dump_stack_lvl+0xe8/0x150 [ 1388.555736][T14706] print_address_description+0x55/0x1e0 [ 1388.555777][T14706] ? rt_spin_lock+0x83/0x400 [ 1388.555796][T14706] print_report+0x58/0x70 [ 1388.555826][T14706] kasan_report+0x117/0x150 [ 1388.555944][T14706] ? rt_spin_lock+0x83/0x400 [ 1388.555969][T14706] ? __wake_up_common_lock+0x2f/0x1e0 [ 1388.556041][T14706] __kasan_check_byte+0x2a/0x40 [ 1388.556074][T14706] lock_acquire+0x84/0x350 [ 1388.556144][T14706] rt_spin_lock+0x83/0x400 [ 1388.556163][T14706] ? __wake_up_common_lock+0x2f/0x1e0 [ 1388.556186][T14706] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1388.556209][T14706] ? __pfx_rt_spin_lock+0x10/0x10 [ 1388.556230][T14706] ? rt_spin_unlock+0x14f/0x200 [ 1388.556253][T14706] ? rt_spin_unlock+0x160/0x200 [ 1388.556273][T14706] __wake_up_common_lock+0x2f/0x1e0 [ 1388.556301][T14706] snd_pcm_stop+0x428/0x550 [ 1388.556412][T14706] loopback_trigger+0x11ff/0x1cf0 [ 1388.556505][T14706] snd_pcm_start+0x43d/0x5d0 [ 1388.556534][T14706] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 1388.556594][T14706] ? __pfx_interleaved_copy+0x10/0x10 [ 1388.556627][T14706] ? __pfx_default_write_copy+0x10/0x10 [ 1388.556662][T14706] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1388.556692][T14706] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1388.556724][T14706] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1388.556752][T14706] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1388.556776][T14706] ? snd_pcm_oss_write3+0x191/0x300 [ 1388.556847][T14706] snd_pcm_oss_write3+0x1ab/0x300 [ 1388.556878][T14706] snd_pcm_oss_write2+0x2c2/0x440 [ 1388.556908][T14706] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1388.556936][T14706] ? rt_spin_unlock+0x14f/0x200 [ 1388.556958][T14706] ? rt_spin_unlock+0x160/0x200 [ 1388.556979][T14706] snd_pcm_oss_sync1+0x180/0x520 [ 1388.557003][T14706] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1388.557024][T14706] ? __pfx_default_wake_function+0x10/0x10 [ 1388.557104][T14706] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1388.557132][T14706] ? __asan_memset+0x22/0x50 [ 1388.557158][T14706] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1388.557184][T14706] snd_pcm_oss_sync+0xab2/0xfc0 [ 1388.557219][T14706] snd_pcm_oss_release+0x102/0x250 [ 1388.557250][T14706] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1388.557282][T14706] __fput+0x461/0xa70 [ 1388.557349][T14706] task_work_run+0x1d9/0x270 [ 1388.557410][T14706] ? __pfx_task_work_run+0x10/0x10 [ 1388.557448][T14706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.557497][T14706] exit_to_user_mode_loop+0xed/0x480 [ 1388.557547][T14706] ? rcu_is_watching+0x15/0xb0 [ 1388.557600][T14706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.557623][T14706] do_syscall_64+0x33e/0xf80 [ 1388.557701][T14706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.557722][T14706] ? clear_bhb_loop+0x40/0x90 [ 1388.557747][T14706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.557769][T14706] RIP: 0033:0x7f6f6ac3c819 [ 1388.557790][T14706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.557811][T14706] RSP: 002b:00007ffd89139318 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1388.557836][T14706] RAX: 0000000000000000 RBX: 00007f6f6aeb7da0 RCX: 00007f6f6ac3c819 [ 1388.557853][T14706] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1388.557868][T14706] RBP: 00007f6f6aeb7da0 R08: 0000000000000006 R09: 0000000000000000 [ 1388.557882][T14706] R10: 00007f6f6aeb7cb0 R11: 0000000000000246 R12: 0000000000152df3 [ 1388.557897][T14706] R13: 00007f6f6aeb627c R14: 0000000000152c38 R15: 00007f6f6aeb6270 [ 1388.557922][T14706] [ 1388.557930][T14706] [ 1388.557936][T14706] Allocated by task 14707: [ 1388.557947][T14706] kasan_save_track+0x3e/0x80 [ 1388.557976][T14706] __kasan_kmalloc+0x93/0xb0 [ 1388.558004][T14706] __kmalloc_cache_noprof+0x3a6/0x690 [ 1388.558079][T14706] snd_pcm_attach_substream+0x5b7/0xb20 [ 1388.558100][T14706] snd_pcm_open_substream+0xbd/0x2420 [ 1388.558126][T14706] snd_pcm_oss_open+0xf90/0x1c20 [ 1388.558154][T14706] chrdev_open+0x4d0/0x5f0 [ 1388.558193][T14706] do_dentry_open+0x83d/0x13e0 [ 1388.558236][T14706] vfs_open+0x3b/0x350 [ 1388.558257][T14706] path_openat+0x2e43/0x38a0 [ 1388.558305][T14706] do_file_open+0x23e/0x4a0 [ 1388.558332][T14706] do_sys_openat2+0x113/0x200 [ 1388.558356][T14706] __x64_sys_openat+0x138/0x170 [ 1388.558379][T14706] do_syscall_64+0x15f/0xf80 [ 1388.558401][T14706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.558421][T14706] [ 1388.558426][T14706] Freed by task 14707: [ 1388.558444][T14706] kasan_save_track+0x3e/0x80 [ 1388.558471][T14706] kasan_save_free_info+0x46/0x50 [ 1388.558494][T14706] __kasan_slab_free+0x5c/0x80 [ 1388.558522][T14706] kfree+0x1c5/0x6c0 [ 1388.558548][T14706] snd_pcm_detach_substream+0x1c8/0x270 [ 1388.558568][T14706] snd_pcm_oss_release+0x184/0x250 [ 1388.558597][T14706] __fput+0x461/0xa70 [ 1388.558620][T14706] task_work_run+0x1d9/0x270 [ 1388.558644][T14706] exit_to_user_mode_loop+0xed/0x480 [ 1388.558664][T14706] do_syscall_64+0x33e/0xf80 [ 1388.558688][T14706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.558708][T14706] [ 1388.558713][T14706] The buggy address belongs to the object at ffff88804c92a000 [ 1388.558713][T14706] which belongs to the cache kmalloc-2k of size 2048 [ 1388.558731][T14706] The buggy address is located 512 bytes inside of [ 1388.558731][T14706] freed 2048-byte region [ffff88804c92a000, ffff88804c92a800) [ 1388.558754][T14706] [ 1388.558759][T14706] The buggy address belongs to the physical page: [ 1388.558770][T14706] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c928 [ 1388.558791][T14706] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1388.558809][T14706] flags: 0x80000000000040(head|node=0|zone=1) [ 1388.558827][T14706] page_type: f5(slab) [ 1388.558847][T14706] raw: 0080000000000040 ffff88801a024000 dead000000000100 dead000000000122 [ 1388.558867][T14706] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1388.558888][T14706] head: 0080000000000040 ffff88801a024000 dead000000000100 dead000000000122 [ 1388.558907][T14706] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1388.558926][T14706] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1388.558945][T14706] head: 00000007f50758ec 0000000000000000 00000000ffffffff 0000000000000008 [ 1388.558956][T14706] page dumped because: kasan: bad access detected [ 1388.558966][T14706] page_owner tracks the page as allocated [ 1388.558974][T14706] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 817, tgid 817 (kworker/1:2), ts 101718637457, free_ts 90554616860 [ 1388.559012][T14706] post_alloc_hook+0x231/0x280 [ 1388.559083][T14706] get_page_from_freelist+0x27c8/0x2840 [ 1388.559105][T14706] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1388.559126][T14706] allocate_slab+0x77/0x660 [ 1388.559169][T14706] refill_objects+0x33c/0x3d0 [ 1388.559190][T14706] __pcs_replace_empty_main+0x373/0x720 [ 1388.559215][T14706] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 1388.559247][T14706] __alloc_skb+0x2c1/0x7d0 [ 1388.559316][T14706] mld_newpack+0x14c/0xc90 [ 1388.559382][T14706] add_grhead+0x5a/0x2a0 [ 1388.559400][T14706] add_grec+0x1452/0x1740 [ 1388.559418][T14706] mld_ifc_work+0x6e6/0xe70 [ 1388.559470][T14706] process_scheduled_works+0xb5d/0x1860 [ 1388.559520][T14706] worker_thread+0xa53/0xfc0 [ 1388.559537][T14706] kthread+0x388/0x470 [ 1388.559575][T14706] ret_from_fork+0x514/0xb70 [ 1388.559668][T14706] page last free pid 5793 tgid 5793 stack trace: [ 1388.559680][T14706] free_unref_folios+0xc50/0x1970 [ 1388.559711][T14706] folios_put_refs+0x56f/0x680 [ 1388.559768][T14706] free_pages_and_swap_cache+0x2b9/0x490 [ 1388.559793][T14706] tlb_flush_mmu+0x6d3/0xa30 [ 1388.559832][T14706] tlb_finish_mmu+0xf9/0x230 [ 1388.559852][T14706] unmap_region+0x2a5/0x330 [ 1388.559872][T14706] vms_complete_munmap_vmas+0x493/0xc60 [ 1388.559893][T14706] do_vmi_align_munmap+0x3bd/0x4d0 [ 1388.559915][T14706] do_vmi_munmap+0x252/0x2d0 [ 1388.559937][T14706] __vm_munmap+0x22c/0x3d0 [ 1388.559958][T14706] __x64_sys_munmap+0x60/0x70 [ 1388.560006][T14706] do_syscall_64+0x15f/0xf80 [ 1388.560029][T14706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.560050][T14706] [ 1388.560055][T14706] Memory state around the buggy address: [ 1388.560068][T14706] ffff88804c92a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1388.560083][T14706] ffff88804c92a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1388.560098][T14706] >ffff88804c92a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1388.560109][T14706] ^ [ 1388.560119][T14706] ffff88804c92a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1388.560134][T14706] ffff88804c92a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1388.560145][T14706] ================================================================== [ 1388.572000][T14706] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1388.572024][T14706] CPU: 0 UID: 0 PID: 14706 Comm: syz.7.2172 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1388.572053][T14706] Tainted: [L]=SOFTLOCKUP [ 1388.572061][T14706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1388.572073][T14706] Call Trace: [ 1388.572081][T14706] [ 1388.572088][T14706] vpanic+0x56c/0xa60 [ 1388.572116][T14706] ? __pfx_vpanic+0x10/0x10 [ 1388.572136][T14706] ? __pfx___schedule+0x10/0x10 [ 1388.572220][T14706] panic+0xc5/0xd0 [ 1388.572239][T14706] ? __pfx_panic+0x10/0x10 [ 1388.572259][T14706] ? preempt_schedule_common+0x82/0xd0 [ 1388.572285][T14706] ? rt_spin_lock+0x83/0x400 [ 1388.572305][T14706] check_panic_on_warn+0x89/0xb0 [ 1388.572389][T14706] ? rt_spin_lock+0x83/0x400 [ 1388.572407][T14706] end_report+0x73/0x170 [ 1388.572445][T14706] ? rt_spin_lock+0x83/0x400 [ 1388.572462][T14706] kasan_report+0x128/0x150 [ 1388.572490][T14706] ? rt_spin_lock+0x83/0x400 [ 1388.572512][T14706] ? __wake_up_common_lock+0x2f/0x1e0 [ 1388.572532][T14706] __kasan_check_byte+0x2a/0x40 [ 1388.572559][T14706] lock_acquire+0x84/0x350 [ 1388.572586][T14706] rt_spin_lock+0x83/0x400 [ 1388.572604][T14706] ? __wake_up_common_lock+0x2f/0x1e0 [ 1388.572624][T14706] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1388.572644][T14706] ? __pfx_rt_spin_lock+0x10/0x10 [ 1388.572661][T14706] ? rt_spin_unlock+0x14f/0x200 [ 1388.572681][T14706] ? rt_spin_unlock+0x160/0x200 [ 1388.572701][T14706] __wake_up_common_lock+0x2f/0x1e0 [ 1388.572725][T14706] snd_pcm_stop+0x428/0x550 [ 1388.572750][T14706] loopback_trigger+0x11ff/0x1cf0 [ 1388.572783][T14706] snd_pcm_start+0x43d/0x5d0 [ 1388.572807][T14706] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 1388.572840][T14706] ? __pfx_interleaved_copy+0x10/0x10 [ 1388.572868][T14706] ? __pfx_default_write_copy+0x10/0x10 [ 1388.572897][T14706] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1388.572922][T14706] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1388.572948][T14706] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1388.572967][T14706] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1388.572988][T14706] ? snd_pcm_oss_write3+0x191/0x300 [ 1388.573014][T14706] snd_pcm_oss_write3+0x1ab/0x300 [ 1388.573043][T14706] snd_pcm_oss_write2+0x2c2/0x440 [ 1388.573071][T14706] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1388.573097][T14706] ? rt_spin_unlock+0x14f/0x200 [ 1388.573117][T14706] ? rt_spin_unlock+0x160/0x200 [ 1388.573137][T14706] snd_pcm_oss_sync1+0x180/0x520 [ 1388.573159][T14706] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1388.573177][T14706] ? __pfx_default_wake_function+0x10/0x10 [ 1388.573203][T14706] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1388.573228][T14706] ? __asan_memset+0x22/0x50 [ 1388.573252][T14706] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1388.573273][T14706] snd_pcm_oss_sync+0xab2/0xfc0 [ 1388.573304][T14706] snd_pcm_oss_release+0x102/0x250 [ 1388.573331][T14706] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1388.573358][T14706] __fput+0x461/0xa70 [ 1388.573385][T14706] task_work_run+0x1d9/0x270 [ 1388.573410][T14706] ? __pfx_task_work_run+0x10/0x10 [ 1388.573445][T14706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.573468][T14706] exit_to_user_mode_loop+0xed/0x480 [ 1388.573491][T14706] ? rcu_is_watching+0x15/0xb0 [ 1388.573519][T14706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.573539][T14706] do_syscall_64+0x33e/0xf80 [ 1388.573562][T14706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.573581][T14706] ? clear_bhb_loop+0x40/0x90 [ 1388.573603][T14706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.573622][T14706] RIP: 0033:0x7f6f6ac3c819 [ 1388.573641][T14706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.573659][T14706] RSP: 002b:00007ffd89139318 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1388.573681][T14706] RAX: 0000000000000000 RBX: 00007f6f6aeb7da0 RCX: 00007f6f6ac3c819 [ 1388.573695][T14706] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1388.573707][T14706] RBP: 00007f6f6aeb7da0 R08: 0000000000000006 R09: 0000000000000000 [ 1388.573719][T14706] R10: 00007f6f6aeb7cb0 R11: 0000000000000246 R12: 0000000000152df3 [ 1388.573732][T14706] R13: 00007f6f6aeb627c R14: 0000000000152c38 R15: 00007f6f6aeb6270 [ 1388.573753][T14706] [ 1388.573912][T14706] Kernel Offset: disabled