last executing test programs: 22m52.265788732s ago: executing program 32 (id=230): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r5 = socket(0x25, 0xa, 0x4) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000400)="2400000011a1e78f974a047dd11a005d023e49e15c6d1df7571fcac18a9983a32cb5f827c35d6a1d695fb2dc292bf5df84a6b717d34e9d46ac3f54b1f51cbb0c89751c94ca854678bea3d681d8ac82c803000000a5b67a53f38f", 0x5a) getsockopt$packet_buf(r5, 0x107, 0x16, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x101000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf421922de974a27"}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) r9 = socket(0x1e, 0x4, 0x0) connect$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r9, r8, 0x0, 0x8010002b) setsockopt$TIPC_CONN_TIMEOUT(r9, 0x10f, 0x82, &(0x7f00000005c0)=0x5, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r8, 0x7a4, &(0x7f00000001c0)={{@hyper, 0xbb}, 0x7fff, 0xd3, 0xfa40, 0x100}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x45}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 22m35.948126219s ago: executing program 33 (id=259): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000800)={0x38, 0x5, 0x9, 0x6, 0x1ffffffc, 0xb49, 0xa, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000009c0)="d800000018007b29e002e4bb0d8105040a601800fe0f041c067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c0ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d93096027d8d67ebd44545db9cdfe1d9d322fe04fb03cae8c9010000730d7a5025ccca262fbb9ad8ffd5e1cace81ccd40dd601edef3d9393f975307ff0ff0e97031e9f05e9f16e9c95115568624f7ab5000000000000000000000000000000000000000000007a630a509201bd289ab7a21ef206ba7655cc520e8c8cc74b9d512527586e77c5e439a4f7c00801f6ab0b93532bc2965e5f4e2bbbd6cfc20aec809bc56f3ac410ca71e721ad5503a2074ff8d67fd8c57ea04a379881675be399bd3f769e8d0854d4f3468ef5b7392bc538dc7999a820649433a1813db2243a57dd71f011a91849b6515a8ed81cdf998ef69636f169bfa2dcfd9dd51272f690afff15d40ef18259838581a1bcb729ed", 0x186}], 0x1, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 22m24.196339792s ago: executing program 34 (id=276): mkdirat(0xffffffffffffff9c, 0x0, 0x180) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000180)='./file1\x00', 0xa500014c) inotify_add_watch(r0, 0x0, 0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000ada000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socket$inet_udplite(0x2, 0x2, 0x88) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 21m13.5336478s ago: executing program 35 (id=396): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21m1.803801788s ago: executing program 36 (id=417): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) dup(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000001080)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 21m0.532478465s ago: executing program 37 (id=420): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2f, 0x9}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa6a2ddcf6177a8864450000280022000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5405530854000090"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x3, &(0x7f0000000200)={0x1, 0x0, 0x100000000000081, 0xcf}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x4040000) 19m32.58766266s ago: executing program 38 (id=601): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2f, 0x9}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa6a2ddcf6177a8864450000280022000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5405530854000090"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x3, &(0x7f0000000200)={0x1, 0x0, 0x100000000000081, 0xcf}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x4040000) 19m0.125917079s ago: executing program 39 (id=655): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001980)=""/158, 0x9e}], 0x6}, 0x7}], 0x1, 0x100, 0x0) timer_create(0x7, &(0x7f00000012c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 18m55.50297133s ago: executing program 40 (id=669): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2f, 0x9}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa6a2ddcf6177a8864450000280022000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5405530854000090"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x3, &(0x7f0000000200)={0x1, 0x0, 0x100000000000081, 0xcf}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x4040000) 18m41.653101248s ago: executing program 41 (id=697): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2f, 0x9}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa6a2ddcf6177a8864450000280022000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5405530854000090"], 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x3, &(0x7f0000000200)={0x1, 0x0, 0x100000000000081, 0xcf}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) 16m30.666707639s ago: executing program 42 (id=1020): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x5, "b486571327"}, 0x0, 0x0, 0x0, 0x0}) 16m25.919269145s ago: executing program 43 (id=1032): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0xfffffcc6, &(0x7f0000000400)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331") 16m21.895242791s ago: executing program 44 (id=1041): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2f, 0x9}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa6a2ddcf6177a8864450000280022000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5405530854000090"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) fcntl$lock(0xffffffffffffffff, 0x3, &(0x7f0000000200)={0x1, 0x0, 0x100000000000081, 0xcf}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x4040000) 14m43.399001442s ago: executing program 45 (id=1301): syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a440000102030109027600020104200409"], 0x0) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x40, 0x8, 0x2, "a109"}, 0x0, 0x0, 0x0, 0x0}) 14m17.630506453s ago: executing program 46 (id=1388): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x6, 0xe, 0x8, 0xfeb3, 0xb}}}, 0x0) 14m8.788675865s ago: executing program 47 (id=1413): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x1020, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) 13m38.376592312s ago: executing program 48 (id=1503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0x0, &(0x7f0000000100)={0x67, 0x100}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) 13m29.688470945s ago: executing program 49 (id=1533): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000020101010000000000000600000000000000188008000140000004b8080002400000000410000e"], 0x38}}, 0x24000881) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 13m1.486520131s ago: executing program 50 (id=1617): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$poke(0x5, 0x0, 0x0, 0xf5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(r0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 12m38.580006088s ago: executing program 51 (id=1704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) 11m47.747497009s ago: executing program 52 (id=1816): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000680)={0x40, 0x7, 0x4, "292cc4ed"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 11m1.82438018s ago: executing program 53 (id=1919): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b000301000000090400ffe3010100000a2401000000020102092408000000004c5806240400005207240b24050000133b9bda531c092405010596efc3590904010000010200000904010101010200000905010900000000000725010000000009040200000102004609040201"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) 10m50.76063133s ago: executing program 54 (id=1934): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x26e8}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x3, 0x0, [{0x37d, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x100000000], 0xeeee8000, 0x150642}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m33.893837223s ago: executing program 55 (id=1984): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="2003"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000140)={0x20, 0x14, 0x2, "d817"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x3, 0x3, "5bc8cf"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 10m29.136393004s ago: executing program 56 (id=1999): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 10m24.812781655s ago: executing program 57 (id=2007): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) 10m10.276094062s ago: executing program 58 (id=2025): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="00036c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000680)={0x40, 0x7, 0x4, "292cc4ed"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000940)={0x40, 0x16, 0x4, "d8abf98b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m3.285368158s ago: executing program 59 (id=2036): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 9m57.151600083s ago: executing program 60 (id=2047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x600, 0x0, 0x18}}}}}, 0x36) 9m49.187952827s ago: executing program 61 (id=2058): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x8a00) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x1, "fd"}, 0x0}) read$char_usb(r3, 0x0, 0x0) 9m37.866702513s ago: executing program 62 (id=2068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 8m44.494322346s ago: executing program 63 (id=2174): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000280)=@string={0x2}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) 8m40.796953487s ago: executing program 64 (id=2184): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000280)={0x5, 0x0, [{0xc0000000, 0x0, 0x1, 0xffffff89, 0x200006, 0x4, 0x2}, {0x1, 0x4, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0x80000019, 0xe5f, 0x0, 0xa, 0xdf3, 0x6, 0x80000001}, {0x7, 0x2bb, 0x0, 0xd, 0xa, 0x7fd, 0x400}, {0x80000001, 0x8, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) 8m35.632798393s ago: executing program 65 (id=2196): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x1, 0x1, 0x0, "e5"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821c"}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 8m29.129130191s ago: executing program 66 (id=2206): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x48, 0x30, 0x9, 0x70bd24, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 7m51.923731345s ago: executing program 67 (id=2257): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r3 = semget(0x0, 0x1, 0x39c) semop(r3, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1) semop(r3, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) shutdown(0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 7m42.604673727s ago: executing program 68 (id=2272): socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xc0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2a020400) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x88) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 7m34.645999323s ago: executing program 69 (id=2286): shmat(0x0, &(0x7f0000776000/0x4000)=nil, 0x5000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) unshare(0x6e000000) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 7m31.012384957s ago: executing program 70 (id=2292): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) r1 = gettid() sched_setscheduler(r1, 0x1, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) chdir(&(0x7f0000000440)='./bus\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10004c62, 0x203, 0x7ff, 0x80, 0xd611, 0x10000006, 0x9, 0x0, 0x8000, 0x0, 0xee00, 0xee00, 0x3ff, 0x1}}, {0x0, 0x4}}}, 0xa0) 7m26.770554186s ago: executing program 71 (id=2300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x341102, 0x0) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) close(0xffffffffffffffff) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000d11000/0x2000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x4a}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) 7m9.174610977s ago: executing program 72 (id=2310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x341102, 0x0) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) close(0xffffffffffffffff) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000d11000/0x2000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x4a}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) 5m47.300209803s ago: executing program 73 (id=2438): socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcc9c4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2a020400) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x88) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x7ffff000) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) 5m24.34679584s ago: executing program 74 (id=2474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000380)={0x1, 0x0, [{0x4, 0x89, &(0x7f0000001500)=""/137}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000000)=@raw=[@generic={0x10, 0xe, 0x4, 0x7, 0x3ff}], 0x0, 0x1, 0xe3, &(0x7f0000000440)=""/227, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000180)=[{0x1, 0x3, 0x5, 0x3}], 0x10, 0x18d}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x6) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x1f) 5m12.90059041s ago: executing program 4 (id=2491): syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$midi(0x4, 0x2b, &(0x7f00000000c0)={{0x12, 0x1, 0x600, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x1, 0x70, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x29, [@midi_out_jack={0x7, 0x24, 0x3, 0x3, 0xff, 0x0, [], 0x8}]}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205"], 0x0) 5m11.160264409s ago: executing program 4 (id=2495): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001a00)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000002080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m7.329963302s ago: executing program 4 (id=2500): socket$netlink(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r5, 0x0, 0x4ffe6, 0x0) syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) 5m4.592920203s ago: executing program 4 (id=2502): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4880) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100001070000000000002200"/28], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010027bd7000ffdbdf650200000014000100fc020000000000400000000000000000b8f1ecd985e4d5190fe1e37db0407d0d681223a9186050b453f4e4a328847f8aa8ab"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) chdir(&(0x7f0000000140)='./file0\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x4, r6, 0x0, 0xfffffffffffffffe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) 5m4.57608928s ago: executing program 8 (id=2503): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x84, 0x70, 0x0, 0x0, @time={0xe, 0x425}, {0x81}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x5c, 0x5, 0x83, @tick=0xa8, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x7, 0x9, 0x3, @tick=0x7, {0x10, 0x5}, {0x1, 0x2}, @connect={{0xf, 0x3}, {0x6, 0xb}}}], 0x54) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open(0x0, 0x167842, 0x19) pwritev2(r4, &(0x7f0000000880), 0x0, 0x1400, 0x9, 0x1) getuid() msgctl$IPC_RMID(0x0, 0x0) msgget$private(0x0, 0x58d) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000440)={0xc, 0x4, 0x4, {0x2, @sliced={0x101, [0x6e, 0x6, 0x7, 0x5, 0x1, 0x0, 0xff, 0x4, 0x5, 0x4, 0x60f5, 0x7, 0x2, 0x3ff, 0x2, 0x2, 0x862, 0x5, 0x7, 0x9, 0x3, 0x9, 0x9, 0x81, 0x3044, 0x7, 0x7ffc, 0x9, 0x7, 0x6, 0x401, 0x6, 0xc, 0x8, 0x0, 0x4, 0x6, 0xa390, 0x9, 0x74, 0x1, 0x8, 0x5, 0x8, 0xff, 0x5, 0x6b, 0xfffb], 0x7}}, 0x7}) 5m2.851001031s ago: executing program 4 (id=2505): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000940)={0x1, &(0x7f0000000780)=[{@fixed}]}) 5m2.581269925s ago: executing program 8 (id=2506): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) r2 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r2, 0x0, 0x0) listen(r2, 0xffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000040)={{0x0, 0xb}, 'port1\x00', 0x0, 0x20000, 0x1, 0x5dea653b, 0x2, 0x0, 0x8, 0x0, 0x0, 0x2}) sendmsg$nl_generic(r3, 0x0, 0x400c4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xf}}, 0x14}}, 0x0) io_setup(0x4, &(0x7f0000000600)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r6, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000000)="ff07000000000000", 0x400000}]) socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 5m2.246573035s ago: executing program 4 (id=2507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0) r4 = dup(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) fallocate(r4, 0x10, 0x0, 0x1062200) 5m0.958615287s ago: executing program 75 (id=2507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0) r4 = dup(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) fallocate(r4, 0x10, 0x0, 0x1062200) 4m58.378057211s ago: executing program 8 (id=2510): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x4048010) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x0, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 4m56.145971737s ago: executing program 8 (id=2513): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4880) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100001070000000000002200"/28], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010027bd7000ffdbdf650200000014000100fc020000000000400000000000000000b8f1ecd985e4d5190fe1e37db0407d0d681223a9186050b453f4e4a328847f8aa8ab"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) chdir(&(0x7f0000000140)='./file0\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x4, r6, 0x0, 0xfffffffffffffffe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) 4m54.810974709s ago: executing program 8 (id=2515): socket$netlink(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r4, 0x0, 0x4ffe6, 0x0) syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) 4m53.920498154s ago: executing program 8 (id=2516): syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$midi(0x4, 0x2b, &(0x7f00000000c0)={{0x12, 0x1, 0x600, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x1, 0x70, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x29, [@midi_out_jack={0x7, 0x24, 0x3, 0x3, 0xff, 0x0, [], 0x8}]}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24010900010201020524040105"], 0x0) 4m52.682433086s ago: executing program 76 (id=2516): syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$midi(0x4, 0x2b, &(0x7f00000000c0)={{0x12, 0x1, 0x600, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x1, 0x70, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x29, [@midi_out_jack={0x7, 0x24, 0x3, 0x3, 0xff, 0x0, [], 0x8}]}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24010900010201020524040105"], 0x0) 2m25.849590756s ago: executing program 2 (id=2769): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2m22.024953951s ago: executing program 2 (id=2775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200a00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) fsopen(&(0x7f0000000000)='jfs\x00', 0x0) socket$nl_rdma(0x10, 0x3, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001500)=""/123, 0x7b}, 0x2106) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = dup3(r4, r3, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x20) r6 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) sendmmsg$inet6(r5, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0}}], 0x1, 0x810) bind$netrom(r5, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@default, @null, @default, @null, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0xfffffffd, @mcast1, 0xe4}, @in6={0xa, 0x4e24, 0x0, @private0, 0xa}, @in={0x2, 0x4e24, @broadcast}]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000040)={r8, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) 2m16.050285429s ago: executing program 2 (id=2787): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = gettid() sched_setscheduler(r1, 0x1, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) chdir(&(0x7f0000000440)='./bus\x00') sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10004c62, 0x203, 0x7ff, 0x80, 0xd611, 0x10000006, 0x9, 0x0, 0x8000, 0x0, 0xee00, 0xee00, 0x3ff, 0x1}}, {0x0, 0x4}}}, 0xa0) 2m13.839409449s ago: executing program 2 (id=2791): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4880) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100001070000000000002200"/28], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000ffdbdf650200000014000100fc020000000000400000000000000000b8f1ecd985e4d5190fe1e37db0407d0d681223a9186050b453f4e4a328847f8aa8ab"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) chdir(&(0x7f0000000140)='./file0\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x4, r6, 0x0, 0xfffffffffffffffe) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) 2m12.703849953s ago: executing program 2 (id=2792): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40087447, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0x9b0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m12.253279529s ago: executing program 2 (id=2794): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvfrom$l2tp6(r0, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) write$sndseq(r1, &(0x7f00000000c0)=[{0x84, 0x70, 0x0, 0x0, @time={0xe, 0x425}, {0x81}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x6, 0x7, 0x9, 0x3, @tick=0x7, {0x10, 0x5}, {0x1, 0x2}, @connect={{0xf, 0x3}, {0x6, 0xb}}}], 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open(0x0, 0x167842, 0x19) pwritev2(r4, &(0x7f0000000880), 0x0, 0x1400, 0x9, 0x1) getuid() msgctl$IPC_RMID(0x0, 0x0) msgget$private(0x0, 0x58d) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000440)={0xc, 0x4, 0x4, {0x2, @sliced={0x101, [0x6e, 0x6, 0x7, 0x5, 0x1, 0x0, 0xff, 0x4, 0x5, 0x4, 0x60f5, 0x7, 0x2, 0x3ff, 0x2, 0x2, 0x862, 0x5, 0x7, 0x9, 0x3, 0x9, 0x9, 0x81, 0x3044, 0x7, 0x7ffc, 0x9, 0x7, 0x6, 0x401, 0x6, 0xc, 0x8, 0x0, 0x4, 0x6, 0xa390, 0x9, 0x74, 0x1, 0x8, 0x5, 0x8, 0xff, 0x5, 0x6b, 0xfffb], 0x7}}, 0x7}) 2m12.150981658s ago: executing program 6 (id=2795): socket$netlink(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r4, 0x0, 0x4ffe6, 0x0) 2m11.398464461s ago: executing program 77 (id=2794): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvfrom$l2tp6(r0, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) write$sndseq(r1, &(0x7f00000000c0)=[{0x84, 0x70, 0x0, 0x0, @time={0xe, 0x425}, {0x81}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x6, 0x7, 0x9, 0x3, @tick=0x7, {0x10, 0x5}, {0x1, 0x2}, @connect={{0xf, 0x3}, {0x6, 0xb}}}], 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open(0x0, 0x167842, 0x19) pwritev2(r4, &(0x7f0000000880), 0x0, 0x1400, 0x9, 0x1) getuid() msgctl$IPC_RMID(0x0, 0x0) msgget$private(0x0, 0x58d) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000440)={0xc, 0x4, 0x4, {0x2, @sliced={0x101, [0x6e, 0x6, 0x7, 0x5, 0x1, 0x0, 0xff, 0x4, 0x5, 0x4, 0x60f5, 0x7, 0x2, 0x3ff, 0x2, 0x2, 0x862, 0x5, 0x7, 0x9, 0x3, 0x9, 0x9, 0x81, 0x3044, 0x7, 0x7ffc, 0x9, 0x7, 0x6, 0x401, 0x6, 0xc, 0x8, 0x0, 0x4, 0x6, 0xa390, 0x9, 0x74, 0x1, 0x8, 0x5, 0x8, 0xff, 0x5, 0x6b, 0xfffb], 0x7}}, 0x7}) 2m10.749716797s ago: executing program 6 (id=2798): getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae000000540022"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(r4, &(0x7f00000013c0), 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x0, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x100, 0x8, 0x48f3, 0x5, 0x80000089, 0xa, 0x1400000, 0x8001, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485f]}) 2m9.348954985s ago: executing program 6 (id=2800): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x2}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) 2m9.216098198s ago: executing program 0 (id=2801): close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000000)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x109540) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) 2m8.317364531s ago: executing program 6 (id=2802): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4880) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100001070000000000002200"/28], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000ffdbdf650200000014000100fc020000000000400000000000000000b8f1ecd985e4d5190fe1e37db0407d0d681223a9186050b453f4e4a328847f8aa8ab"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) chdir(&(0x7f0000000140)='./file0\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x4, r6, 0x0, 0xfffffffffffffffe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) 2m7.069748441s ago: executing program 6 (id=2803): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) 2m6.405546874s ago: executing program 6 (id=2806): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x191c) 2m6.402594343s ago: executing program 0 (id=2807): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40087447, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0x9b0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m5.838231625s ago: executing program 78 (id=2806): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x191c) 2m5.548834175s ago: executing program 0 (id=2809): shmat(0x0, &(0x7f0000776000/0x4000)=nil, 0x5000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) unshare(0x6e000000) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYRES32=r3], 0x28}}, 0x0) 2m3.525190454s ago: executing program 0 (id=2812): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4880) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100001070000000000002200"/28], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000ffdbdf650200000014000100fc020000000000400000000000000000b8f1ecd985e4d5190fe1e37db0407d0d681223a9186050b453f4e4a328847f8aa8ab"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) chdir(&(0x7f0000000140)='./file0\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x4, r6, 0x0, 0xfffffffffffffffe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) 2m2.449865261s ago: executing program 0 (id=2813): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000600000000", @ANYRES32=0x0, @ANYRES32], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 2m0.341504142s ago: executing program 0 (id=2816): close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000000)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x109540) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) 1m59.936590338s ago: executing program 79 (id=2816): close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000000)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x109540) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) 26.83158705s ago: executing program 7 (id=2968): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x1, 0x2003, 0x16, 0x90, 0x0}) 25.24830025s ago: executing program 7 (id=2971): shmat(0x0, &(0x7f0000776000/0x4000)=nil, 0x5000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) unshare(0x6e000000) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 19.479056401s ago: executing program 9 (id=2980): socket$netlink(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 18.083028681s ago: executing program 9 (id=2982): socket$netlink(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 17.591991408s ago: executing program 7 (id=2983): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getpid() open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="150000"], 0x70003) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4048010) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x0, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 16.730417009s ago: executing program 9 (id=2986): gettid() sched_setscheduler(0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x50424752, 0x2, @stepwise={0x5, 0xbc, 0x4, 0x766, 0x6, 0x2}}) syz_emit_vhci(&(0x7f000001b140)=ANY=[@ANYBLOB], 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0x7, 0x4, &(0x7f0000000080)={0x1d, "146f060000000000000000000000000000000000000000000000000000000400"}}) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x0, 0x0, 0x1, 0x80000000}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x6, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000001c0)={0x0, r3}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080)=@arm64) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="5004cdd8a7830000"], 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f000001b0c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f000001b080)={&(0x7f000001b040)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7ff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20080000}, 0x4000004) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 13.021067718s ago: executing program 9 (id=2991): fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) fsopen(&(0x7f0000000000)='ntfs\x00', 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 12.753767072s ago: executing program 1 (id=2992): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setresuid(0x0, 0xee00, 0x0) setuid(0xee00) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) 11.621363046s ago: executing program 3 (id=2995): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', '', [{0x20, 'M\xef\xfdQ[\xb0F\f\x96-(;t\xa6\xda\x99\xcb\x95\x9a\xfd\xc1V\xe3x\xaa_v\xb1\x9c{\'u\r\x1aj \xe3(\x95\xedK\x9e\xd7\xcf \x8c\fV\\N1\x8c-h;i|\x03\x00\x00\x00\r\xd1h\x0fKn\b\xbeFt9\xa2\x81\x18\xfc\xf7\xf4\xce\xf1\x11\xf6d%uC\xddl2\x87'}]}, 0x5f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) 11.577714168s ago: executing program 1 (id=2996): socket$netlink(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 10.841810995s ago: executing program 7 (id=2997): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', '', [{0x20, 'M\xef\xfdQ[\xb0F\f\x96-(;t\xa6\xda\x99\xcb\x95\x9a\xfd\xc1V\xe3x\xaa_v\xb1\x9c{\'u\r\x1aj \xe3(\x95\xedK\x9e\xd7\xcf \x8c\fV\\N1\x8c-h;i|\x03\x00\x00\x00\r\xd1h\x0fKn\b\xbeFt9\xa2\x81\x18\xfc\xf7\xf4\xce\xf1\x11\xf6d%uC\xddl2\x87'}]}, 0x5f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) 10.837401594s ago: executing program 5 (id=2998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000000)=0x8, 0x4) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) 9.593487175s ago: executing program 5 (id=2999): socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f00000000c0)=0x40, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.575258901s ago: executing program 1 (id=3000): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20004000) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r7, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x1, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) ioctl$SNDCTL_DSP_RESET(r9, 0x5000, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x18, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) 8.178462421s ago: executing program 5 (id=3001): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_emit_vhci(0x0, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r3, 0x7, 0x4) r4 = socket(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, r4) readv(r1, &(0x7f00000013c0), 0x0) 8.082652371s ago: executing program 3 (id=3002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.631278477s ago: executing program 1 (id=3003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0) r3 = dup(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) fallocate(r3, 0x10, 0x0, 0x1062200) 6.135586396s ago: executing program 7 (id=3004): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4866, 0xea86, 0xb, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x707a3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) setsockopt$ax25_int(r6, 0x101, 0x1, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x288a, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 5.835444734s ago: executing program 3 (id=3005): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvfrom$l2tp6(r0, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) write$sndseq(r1, &(0x7f00000000c0)=[{0x84, 0x70, 0x0, 0x0, @time={0xe, 0x425}, {0x81}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x5c, 0x5, 0x83, @tick=0xa8, {0xfd}, {0x3}, @note={0x81}}], 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open(0x0, 0x167842, 0x19) pwritev2(r4, &(0x7f0000000880), 0x0, 0x1400, 0x9, 0x1) getuid() msgctl$IPC_RMID(0x0, 0x0) msgget$private(0x0, 0x58d) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000440)={0xc, 0x4, 0x4, {0x2, @sliced={0x101, [0x6e, 0x6, 0x7, 0x5, 0x1, 0x0, 0xff, 0x4, 0x5, 0x4, 0x60f5, 0x7, 0x2, 0x3ff, 0x2, 0x2, 0x862, 0x5, 0x7, 0x9, 0x3, 0x9, 0x9, 0x81, 0x3044, 0x7, 0x7ffc, 0x9, 0x7, 0x6, 0x401, 0x6, 0xc, 0x8, 0x0, 0x4, 0x6, 0xa390, 0x9, 0x74, 0x1, 0x8, 0x5, 0x8, 0xff, 0x5, 0x6b, 0xfffb], 0x7}}, 0x7}) 5.752136287s ago: executing program 5 (id=3006): getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae000000540022"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, &(0x7f00000013c0), 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x0, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x100, 0x8, 0x48f3, 0x5, 0x80000089, 0xa, 0x1400000, 0x8001, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485f]}) 4.892537307s ago: executing program 1 (id=3007): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40824) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x100000000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_pgetevents(0x0, 0xa5, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 4.430976552s ago: executing program 7 (id=3008): socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000940)={0x1, &(0x7f0000000780)=[{@fixed}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180), 0x1) setuid(0xee00) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304}, "a7303b01238bfc41", "9308f103a287b514ee0d62d98c831fbf520c37d566570176969be15d828957d4", "f5349ee6", "d1706fa248a7eb0f"}, 0x38) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) 4.22888543s ago: executing program 3 (id=3009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000000)=0x8, 0x4) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) 2.697696981s ago: executing program 3 (id=3010): socket$netlink(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 1.427750488s ago: executing program 5 (id=3011): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) mincore(&(0x7f000081d000/0x1000)=nil, 0x1000, &(0x7f0000afaf0a)=""/245) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d0", 0x6e}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) 1.427144458s ago: executing program 9 (id=3012): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r0, 0x40087447, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0x9b0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.351390932s ago: executing program 1 (id=3013): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) 257.798884ms ago: executing program 9 (id=3014): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4866, 0xea86, 0xb, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x707a3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) setsockopt$ax25_int(r6, 0x101, 0x1, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x288a, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x5, "12b013e9"}, @global=@item_012={0x1, 0x1, 0x3, "e7"}]}}, 0x0}, 0x0) 188.78799ms ago: executing program 3 (id=3015): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a8"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x66) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r3}, 0x38) 0s ago: executing program 5 (id=3016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 1 [ 1289.621338][ T41] device bridge_slave_1 left promiscuous mode [ 1289.627645][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.772434][ T41] device bridge_slave_0 left promiscuous mode [ 1290.948712][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.098147][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 1291.169357][ T41] device veth1_macvtap left promiscuous mode [ 1291.175449][ T41] device veth0_macvtap left promiscuous mode [ 1292.009763][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1292.048079][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1292.068254][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1292.077507][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1292.087009][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1292.101290][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1293.199593][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1293.260668][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1293.321429][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1293.369981][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1294.189101][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 1295.024038][ T41] bond0 (unregistering): Released all slaves [ 1295.229432][T18991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.132211][T19287] chnl_net:caif_netlink_parms(): no params data found [ 1296.258526][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 1297.975299][ T41] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.173387][ T41] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.258953][T19287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.266064][T19287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.321799][T19287] device bridge_slave_0 entered promiscuous mode [ 1298.338281][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 1299.055055][ T41] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.160090][T19287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.187548][T19287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.212727][T19287] device bridge_slave_1 entered promiscuous mode [ 1299.237939][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1299.259747][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1299.309247][ T41] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.425823][T19181] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1299.447185][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1299.460230][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1299.472958][T19181] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1299.504209][T19287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.525031][T19348] zonefs (nullb0) ERROR: Not a zoned block device [ 1299.604732][T19349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1300.100739][T18991] device veth0_vlan entered promiscuous mode [ 1300.120334][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1300.134423][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1300.148398][T19181] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1300.163955][T19287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.186871][T19181] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1300.206813][T18991] device veth1_vlan entered promiscuous mode [ 1300.262033][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1300.274736][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1300.335133][T19287] team0: Port device team_slave_0 added [ 1300.362160][T19287] team0: Port device team_slave_1 added [ 1300.388001][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1300.408546][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1300.418357][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 1300.445078][T18991] device veth0_macvtap entered promiscuous mode [ 1300.511275][T18991] device veth1_macvtap entered promiscuous mode [ 1300.558777][T19287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.571087][T19287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.726108][T19287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.740209][T19287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.747309][T19287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.783749][T19287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.974354][T19287] device hsr_slave_0 entered promiscuous mode [ 1300.981692][T19287] device hsr_slave_1 entered promiscuous mode [ 1300.988942][T19287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1300.996538][T19287] Cannot create hsr debugfs directory [ 1301.080453][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1301.091263][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.101512][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1301.112318][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.836715][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1301.849965][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.063556][T18991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1302.331325][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1302.525781][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1302.600377][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1302.658771][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1302.683946][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.720788][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.743625][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.757570][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.774832][T18991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.785680][T18991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.015285][T18991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1303.299245][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1303.350332][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1303.643978][T19181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.223269][T18991] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.237894][T18991] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.265469][T18991] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.300254][T18991] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.325337][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1304.367126][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1304.455581][T19181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1304.573994][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1304.594692][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1304.604907][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.612103][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.676930][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1304.687100][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1304.701034][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1304.711341][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.718560][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.727713][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1304.736747][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1304.816977][T19181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1304.837748][T19181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1304.871562][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1304.877854][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.887956][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1304.899910][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1304.919893][T19396] zonefs (nullb0) ERROR: Not a zoned block device [ 1304.920243][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1304.951199][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1304.984234][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1305.003549][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1305.025739][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1305.051370][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1305.077026][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1305.205108][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1305.219869][ T5097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.227747][ T5097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.234669][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1305.239889][T19396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1305.302016][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.308415][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.417571][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1306.536892][ T41] device hsr_slave_0 left promiscuous mode [ 1306.555278][ T41] device hsr_slave_1 left promiscuous mode [ 1306.635653][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1306.658213][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.708862][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1306.716476][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1306.932723][ T41] device veth1_macvtap left promiscuous mode [ 1306.957856][ T41] device veth0_macvtap left promiscuous mode [ 1312.597323][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1313.662099][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1313.756769][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.849958][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1314.282792][ T41] bond0 (unregistering): Released all slaves [ 1314.415395][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1314.465948][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1314.566341][T19181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.699684][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1314.724587][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1314.978110][T18060] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1315.396022][T19181] device veth0_vlan entered promiscuous mode [ 1315.430357][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1315.440488][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1315.457231][T19181] device veth1_vlan entered promiscuous mode [ 1315.476629][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1315.495656][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1315.527875][T18060] usb 1-1: Using ep0 maxpacket: 32 [ 1315.535201][T18060] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1315.573987][T19287] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1315.585747][T18060] usb 1-1: config 0 has no interface number 0 [ 1315.655895][T19181] device veth0_macvtap entered promiscuous mode [ 1315.669455][T19181] device veth1_macvtap entered promiscuous mode [ 1315.685454][T19287] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1315.692795][T18060] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 219, changing to 7 [ 1315.724835][T18060] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 17515, setting to 1024 [ 1315.750350][T18060] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1315.762407][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1315.771160][T18060] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1315.785620][T18060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.814333][T18060] usb 1-1: Product: syz [ 1315.820090][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1315.828611][T18060] usb 1-1: Manufacturer: syz [ 1315.835818][T18060] usb 1-1: SerialNumber: syz [ 1315.841951][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1315.852506][T18060] usb 1-1: config 0 descriptor?? [ 1315.859427][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1315.874527][T18060] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1315.899125][T19181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.923241][T18060] em28xx 1-1:0.89: Video interface 89 found: isoc [ 1315.931754][T19181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.971625][T19181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.000232][T19181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.031331][T19181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.085831][T19181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.141598][T19181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.148186][T18060] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1316.174981][T19287] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1316.207521][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1316.235713][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1316.277490][T19181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.277740][T18060] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1316.297702][T19181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.318192][T19181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.336296][T19181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.361438][T18060] em28xx 1-1:0.89: board has no eeprom [ 1316.364741][T19181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.402411][T19181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.436943][T19181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.460668][T19287] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1316.463363][T18060] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1316.495170][T18060] em28xx 1-1:0.89: analog set to isoc mode. [ 1316.497941][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1316.524759][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1316.536240][T18060] usb 1-1: USB disconnect, device number 49 [ 1316.565069][T18060] em28xx 1-1:0.89: Disconnecting em28xx [ 1316.583903][ T127] em28xx 1-1:0.89: Registering V4L2 extension [ 1316.586159][T19181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.641079][T19181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.670862][T19181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.700326][T19181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.898419][ T127] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1316.913330][ T127] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1316.941628][ T127] em28xx 1-1:0.89: No AC97 audio processor [ 1317.008348][T11673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.016230][T11673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.018955][ T127] usb 1-1: Decoder not found [ 1317.062067][T19287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.079248][ T127] em28xx 1-1:0.89: failed to create media graph [ 1317.107857][ T127] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1317.132203][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1317.146040][ T127] em28xx 1-1:0.89: Registering snapshot button... [ 1317.175489][T11668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.183809][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1317.198963][T11668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.205233][ T127] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input88 [ 1317.206795][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1317.304936][ T127] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1317.319045][T19287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.343538][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1317.353730][T18060] em28xx 1-1:0.89: Closing input extension [ 1317.394124][T18060] em28xx 1-1:0.89: Deregistering snapshot button [ 1317.460694][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1317.583364][T18060] em28xx 1-1:0.89: Freeing device [ 1317.671026][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1317.728588][ T4624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.735966][ T4624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.932774][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1319.007990][T18060] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1319.231141][T18060] usb 1-1: Using ep0 maxpacket: 8 [ 1319.306943][T18060] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1319.316478][T18060] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.507632][T18060] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1319.517995][T18060] pvrusb2: ********** [ 1319.522117][T18060] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1319.532672][T18060] pvrusb2: Important functionality might not be entirely working. [ 1319.540778][T18060] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1319.583212][T18060] pvrusb2: ********** [ 1319.595285][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1319.612101][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1319.651322][ T4624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.658572][ T4624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.676523][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1319.726436][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1320.177308][ T2310] pvrusb2: Invalid write control endpoint [ 1320.180064][T18060] usb 1-1: USB disconnect, device number 50 [ 1320.288501][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1320.307093][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1320.317481][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1320.364495][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1320.393147][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1320.431134][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1320.468288][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1320.512413][T19287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1320.643758][T19287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1320.652322][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1320.698921][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1320.720769][ T2310] pvrusb2: Invalid write control endpoint [ 1320.726643][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1320.768832][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1320.776442][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1320.817565][ T2310] pvrusb2: Device being rendered inoperable [ 1320.838304][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1320.861201][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1320.896039][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1320.906438][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1320.934035][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1322.378570][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1322.386169][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1322.870278][T19287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.930386][T19571] zonefs (nullb0) ERROR: Not a zoned block device [ 1323.964361][T19571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1326.461299][T19604] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 1326.667909][ T4318] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 1326.686804][T11668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1326.704004][T11668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1326.749602][T11668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1326.759403][T11668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1326.774118][T19287] device veth0_vlan entered promiscuous mode [ 1326.784395][T11668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1326.801487][T11668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1326.821135][T19287] device veth1_vlan entered promiscuous mode [ 1326.871339][ T4318] usb 8-1: Using ep0 maxpacket: 8 [ 1326.880413][ T4318] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1326.911980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1326.923631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1326.935355][ T4318] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.946322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1326.980235][ T4318] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1326.991297][ T4318] pvrusb2: ********** [ 1326.996586][ T4318] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1327.013939][ T4318] pvrusb2: Important functionality might not be entirely working. [ 1327.024640][ T4318] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1327.029729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1327.051370][ T4318] pvrusb2: ********** [ 1327.120026][T19287] device veth0_macvtap entered promiscuous mode [ 1327.166604][T19287] device veth1_macvtap entered promiscuous mode [ 1327.177606][ T2310] pvrusb2: Invalid write control endpoint [ 1327.190433][ T4318] usb 8-1: USB disconnect, device number 73 [ 1327.365271][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1327.396561][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.427023][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1327.457869][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.477896][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1327.492177][ T2310] pvrusb2: Invalid write control endpoint [ 1327.507871][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.508828][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1327.532114][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1327.547826][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1327.554840][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1327.577900][ T2310] pvrusb2: Device being rendered inoperable [ 1327.584734][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.584830][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1327.621400][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1327.638371][ T127] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1327.670977][T19287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.686794][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1327.707023][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1327.721645][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1327.732662][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1327.742660][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.800838][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1327.837882][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.877988][ T127] usb 7-1: Using ep0 maxpacket: 32 [ 1327.885194][ T127] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1327.900978][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1327.921751][ T127] usb 7-1: config 0 has no interface number 0 [ 1327.937999][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.967304][ T127] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 219, changing to 7 [ 1327.990463][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1328.014452][ T127] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 17515, setting to 1024 [ 1328.034718][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.048439][ T127] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1328.056856][T19287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1328.069378][ T127] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1328.083177][ T127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.091997][ T127] usb 7-1: Product: syz [ 1328.096241][ T127] usb 7-1: Manufacturer: syz [ 1328.119843][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1328.219955][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1328.227613][ T127] usb 7-1: SerialNumber: syz [ 1328.250064][ T127] usb 7-1: config 0 descriptor?? [ 1328.274439][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1328.294123][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1328.314478][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1328.329519][ T127] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1328.347516][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1328.370687][T19287] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.397075][T19287] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.406184][ T127] em28xx 7-1:0.89: Video interface 89 found: isoc [ 1328.424934][T19287] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.118234][ T127] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1329.224118][T19287] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.256539][ T127] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1329.342585][ T127] em28xx 7-1:0.89: board has no eeprom [ 1329.437876][ T127] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1329.451099][ T127] em28xx 7-1:0.89: analog set to isoc mode. [ 1329.491453][T18060] em28xx 7-1:0.89: Registering V4L2 extension [ 1329.523854][ T127] usb 7-1: USB disconnect, device number 68 [ 1329.530061][ T4318] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1329.578545][ T127] em28xx 7-1:0.89: Disconnecting em28xx [ 1329.667539][T18823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.686152][T18823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.720358][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1329.733974][T18060] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1329.747323][ T4318] usb 8-1: Using ep0 maxpacket: 8 [ 1329.762579][ T4318] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1329.777568][T18060] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1329.802079][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.806255][ T4318] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.815680][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.819168][T18060] em28xx 7-1:0.89: No AC97 audio processor [ 1329.859623][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1329.876074][ T4318] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1329.900476][T18060] usb 7-1: Decoder not found [ 1329.926918][T18060] em28xx 7-1:0.89: failed to create media graph [ 1329.941351][ T4318] pvrusb2: ********** [ 1329.972659][ T4318] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1329.986812][T18060] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1330.304593][ T4318] pvrusb2: Important functionality might not be entirely working. [ 1330.457512][T18060] em28xx 7-1:0.89: Registering snapshot button... [ 1330.465754][T18060] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input89 [ 1330.476617][ T4318] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1330.870932][ T4318] pvrusb2: ********** [ 1330.877032][T18060] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1330.885820][ T2310] pvrusb2: Invalid write control endpoint [ 1330.894522][ T4318] usb 8-1: USB disconnect, device number 74 [ 1330.901583][ T127] em28xx 7-1:0.89: Closing input extension [ 1330.907483][ T127] em28xx 7-1:0.89: Deregistering snapshot button [ 1331.151373][ T2310] pvrusb2: Invalid write control endpoint [ 1331.247922][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1331.273809][ T127] em28xx 7-1:0.89: Freeing device [ 1332.248684][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1332.257104][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1332.286622][ T2310] pvrusb2: Device being rendered inoperable [ 1332.382043][T19648] netlink: 2088 bytes leftover after parsing attributes in process `syz.9.2591'. [ 1332.820453][ T2310] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1332.869188][ T2310] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1332.986307][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1333.025441][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1334.054985][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1341.968031][ T127] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1343.497892][ T127] usb 10-1: Using ep0 maxpacket: 8 [ 1343.504984][ T127] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1343.635404][ T127] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.786131][ T127] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1343.793455][ T127] pvrusb2: ********** [ 1343.797475][ T127] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1343.853774][ T127] pvrusb2: Important functionality might not be entirely working. [ 1345.532174][ T127] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1345.616399][ T127] pvrusb2: ********** [ 1345.644514][ T2310] pvrusb2: Invalid write control endpoint [ 1345.655014][ T127] usb 10-1: USB disconnect, device number 35 [ 1345.893376][ T2310] pvrusb2: Invalid write control endpoint [ 1345.900362][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1345.934394][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1346.469095][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1346.532398][T18253] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1346.704666][ T2310] pvrusb2: Device being rendered inoperable [ 1347.048047][T18253] usb 3-1: Using ep0 maxpacket: 32 [ 1347.060834][T18253] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1347.067974][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1347.082101][T18253] usb 3-1: config 0 has no interface number 0 [ 1347.092539][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1347.096841][T18253] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1347.153256][T18253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.181867][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1347.210230][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1347.212230][T18253] usb 3-1: Product: syz [ 1347.767090][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1347.788730][T18253] usb 3-1: Manufacturer: syz [ 1347.822612][T18253] usb 3-1: SerialNumber: syz [ 1347.849822][T18253] usb 3-1: config 0 descriptor?? [ 1347.871729][T18253] smsc95xx v2.0.0 [ 1349.015690][T18253] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1349.123599][T18253] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1349.769420][T18253] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1349.782622][T18253] smsc95xx: probe of 3-1:0.67 failed with error -61 [ 1351.240547][ T4318] usb 3-1: USB disconnect, device number 37 [ 1358.078644][ T7] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1359.600491][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 1359.623895][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1359.635406][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.653837][ T7] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1359.667849][ T7] pvrusb2: ********** [ 1359.674214][ T7] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1359.693585][ T7] pvrusb2: Important functionality might not be entirely working. [ 1359.716756][ T7] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1359.758696][ T7] pvrusb2: ********** [ 1359.937422][ T2310] pvrusb2: Invalid write control endpoint [ 1359.987960][ T7] usb 3-1: USB disconnect, device number 38 [ 1360.407976][T18253] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1360.917882][T18253] usb 10-1: Using ep0 maxpacket: 32 [ 1360.924768][T18253] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1360.979581][ T2310] pvrusb2: Invalid write control endpoint [ 1360.986028][T18253] usb 10-1: config 0 has no interface number 0 [ 1360.994424][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1361.053730][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1361.078040][T18253] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1361.116247][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1361.146376][T18253] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.222389][ T2310] pvrusb2: Device being rendered inoperable [ 1361.261307][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1361.300511][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1361.356914][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1361.374369][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1361.431805][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1361.585883][T18253] usb 10-1: Product: syz [ 1361.631009][T18253] usb 10-1: Manufacturer: syz [ 1361.644391][T18253] usb 10-1: SerialNumber: syz [ 1361.675426][T18253] usb 10-1: config 0 descriptor?? [ 1361.742579][T18253] smsc95xx v2.0.0 [ 1362.146844][T18253] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1362.226349][T18253] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1362.498222][T18253] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1362.528738][T18253] smsc95xx: probe of 10-1:0.67 failed with error -61 [ 1364.224854][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 1365.117989][ T4364] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1366.474344][ T6790] usb 10-1: USB disconnect, device number 36 [ 1366.742118][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.750143][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1375.284490][T19951] zonefs (nullb0) ERROR: Not a zoned block device [ 1375.300323][T19951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1384.177836][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 1386.785436][T20054] overlayfs: missing 'workdir' [ 1391.307963][T19767] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1391.527848][T19767] usb 10-1: Using ep0 maxpacket: 32 [ 1391.553740][T19767] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1391.562079][T19767] usb 10-1: config 0 has no interface number 0 [ 1391.649082][T19767] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1391.677960][T19767] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.727888][T19767] usb 10-1: Product: syz [ 1391.737977][T19767] usb 10-1: Manufacturer: syz [ 1391.743932][T19767] usb 10-1: SerialNumber: syz [ 1391.793336][T19767] usb 10-1: config 0 descriptor?? [ 1391.850771][T19767] smsc95xx v2.0.0 [ 1392.352742][T19767] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1392.363783][T19767] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1392.574598][T19767] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1392.609230][T19767] smsc95xx: probe of 10-1:0.67 failed with error -61 [ 1394.223873][ T6784] usb 10-1: USB disconnect, device number 37 [ 1396.488087][T17622] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1396.728006][T17622] usb 10-1: Using ep0 maxpacket: 8 [ 1396.833651][T17622] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1396.870519][T17622] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.889430][T17622] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1396.896564][T17622] pvrusb2: ********** [ 1396.901161][T17622] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1396.912468][T17622] pvrusb2: Important functionality might not be entirely working. [ 1396.922989][T17622] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1396.942953][T17622] pvrusb2: ********** [ 1397.128007][ T2310] pvrusb2: Invalid write control endpoint [ 1397.132071][T17622] usb 10-1: USB disconnect, device number 38 [ 1397.237821][T19767] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 1398.134239][ T2310] pvrusb2: Invalid write control endpoint [ 1398.143694][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1398.159699][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1398.167526][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1398.254415][T19767] usb 8-1: Using ep0 maxpacket: 8 [ 1398.262815][T19767] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1398.275772][ T2310] pvrusb2: Device being rendered inoperable [ 1398.292457][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1398.302443][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1398.310132][T19767] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.342976][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1398.348672][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1398.384851][T19767] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1398.393628][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1398.434713][T19767] pvrusb2: ********** [ 1398.439237][T19767] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1398.449950][T19767] pvrusb2: Important functionality might not be entirely working. [ 1398.502634][T19767] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1398.533843][T19767] pvrusb2: ********** [ 1398.590499][ T2310] pvrusb2: Invalid write control endpoint [ 1398.610099][T19767] usb 8-1: USB disconnect, device number 75 [ 1399.384575][ T2310] pvrusb2: Invalid write control endpoint [ 1399.391405][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1399.402367][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1399.506756][T20173] netlink: 2088 bytes leftover after parsing attributes in process `syz.9.2700'. [ 1399.974309][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1400.237233][ T2310] pvrusb2: Device being rendered inoperable [ 1400.421279][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1400.438649][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1401.285903][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1401.374886][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1401.416833][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1402.137910][T17622] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1402.607937][T17622] usb 10-1: Using ep0 maxpacket: 32 [ 1402.615114][T17622] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1402.633934][T17622] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.721015][T17622] usb 10-1: config 0 descriptor?? [ 1402.935012][T17622] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1402.964650][T17622] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1403.023751][T17622] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1403.084503][T17622] usb 10-1: media controller created [ 1403.790664][T17622] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1404.138988][T17622] DVB: Unable to find symbol dib7000p_attach() [ 1404.147852][T17622] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1404.387914][ T6790] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1404.418015][T17622] rc_core: IR keymap rc-dib0700-rc5 not found [ 1404.428932][T17622] Registered IR keymap rc-empty [ 1404.450036][T17622] dvb-usb: could not initialize remote control. [ 1404.471753][T17622] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1404.587999][ T6790] usb 3-1: Using ep0 maxpacket: 32 [ 1404.596170][ T6790] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1404.626015][ T6790] usb 3-1: config 0 has no interface number 0 [ 1404.646515][ T6790] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 219, changing to 7 [ 1404.664289][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 1404.673559][ T6790] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 17515, setting to 1024 [ 1404.685974][ T6790] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1404.704581][ T6790] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1404.714138][ T6790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.722567][ T6790] usb 3-1: Product: syz [ 1404.726950][ T6790] usb 3-1: Manufacturer: syz [ 1404.732051][ T6790] usb 3-1: SerialNumber: syz [ 1404.739126][ T6790] usb 3-1: config 0 descriptor?? [ 1404.754792][ T6790] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1404.767932][ T6790] em28xx 3-1:0.89: Video interface 89 found: isoc [ 1405.018138][ T6790] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1405.102762][ T6790] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1405.327300][ T6790] em28xx 3-1:0.89: board has no eeprom [ 1405.479971][ T6790] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1405.743909][ T6790] em28xx 3-1:0.89: analog set to isoc mode. [ 1405.755429][ T6790] usb 3-1: USB disconnect, device number 39 [ 1405.762331][ T4317] em28xx 3-1:0.89: Registering V4L2 extension [ 1405.838769][ T6790] em28xx 3-1:0.89: Disconnecting em28xx [ 1405.909337][T17622] usb 10-1: USB disconnect, device number 39 [ 1405.936157][T17622] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1406.986212][T19767] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1407.233126][ T4317] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1407.237923][T19767] usb 7-1: Using ep0 maxpacket: 8 [ 1407.257977][ T4317] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1407.265114][T19767] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1407.296383][ T4317] em28xx 3-1:0.89: No AC97 audio processor [ 1407.313289][T19767] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.372369][T19767] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1407.505687][T19767] pvrusb2: ********** [ 1407.515072][T19767] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1407.546792][T19767] pvrusb2: Important functionality might not be entirely working. [ 1407.557129][T19767] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1407.630347][T19767] pvrusb2: ********** [ 1407.654903][ T2310] pvrusb2: Invalid write control endpoint [ 1407.695232][T19767] usb 7-1: USB disconnect, device number 70 [ 1407.802675][ T4317] usb 3-1: Decoder not found [ 1407.807328][ T4317] em28xx 3-1:0.89: failed to create media graph [ 1407.849249][ T4317] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1408.141645][ T4317] em28xx 3-1:0.89: Registering snapshot button... [ 1408.207564][ T4317] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input91 [ 1408.455133][ T2310] pvrusb2: Invalid write control endpoint [ 1408.482169][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1408.569036][ T4317] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1408.694556][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1408.722966][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1408.723051][ T6790] em28xx 3-1:0.89: Closing input extension [ 1408.763213][ T6790] em28xx 3-1:0.89: Deregistering snapshot button [ 1408.770574][ T2310] pvrusb2: Device being rendered inoperable [ 1408.850679][ T6790] em28xx 3-1:0.89: Freeing device [ 1408.851738][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1408.894763][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1409.118047][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1409.123719][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1409.597230][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1410.292729][T20293] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 1410.947818][ T6790] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1411.138220][ T6790] usb 7-1: Using ep0 maxpacket: 32 [ 1411.148069][ T6790] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1411.192041][ T6790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.251961][ T6790] usb 7-1: config 0 descriptor?? [ 1411.588186][ T6790] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1411.620493][ T6790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1411.719980][ T6790] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1411.727400][ T6790] usb 7-1: media controller created [ 1411.861153][ T6790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1412.822576][ T6790] DVB: Unable to find symbol dib7000p_attach() [ 1412.857233][ T6790] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1414.332522][T20324] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.2739'. [ 1414.908424][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 1415.237901][ T6790] rc_core: IR keymap rc-dib0700-rc5 not found [ 1415.267825][ T6790] Registered IR keymap rc-empty [ 1415.379587][ T6790] dvb-usb: could not initialize remote control. [ 1415.386013][ T6790] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1415.539278][ T6790] usb 7-1: USB disconnect, device number 71 [ 1415.591858][ T6790] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1416.138205][ T2216] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1416.347966][ T2216] usb 1-1: Using ep0 maxpacket: 8 [ 1416.354864][ T2216] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1416.403950][ T2216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.436709][ T2216] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1416.454356][ T2216] pvrusb2: ********** [ 1416.464498][ T2216] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1416.514553][ T2216] pvrusb2: Important functionality might not be entirely working. [ 1416.549064][ T2216] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1416.588065][ T2216] pvrusb2: ********** [ 1416.636933][ T2310] pvrusb2: Invalid write control endpoint [ 1416.640872][ T2216] usb 1-1: USB disconnect, device number 51 [ 1418.317375][ T2310] pvrusb2: Invalid write control endpoint [ 1418.328624][ T4318] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1418.338194][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1418.437939][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1418.463558][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1418.515265][ T2310] pvrusb2: Device being rendered inoperable [ 1418.527870][ T4318] usb 3-1: Using ep0 maxpacket: 8 [ 1418.535354][ T4318] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1418.565522][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1418.573301][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.582482][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1418.615750][ T4318] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1418.636936][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1418.659036][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1418.672215][ T4318] pvrusb2: ********** [ 1418.679150][ T4318] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1418.715306][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1418.735101][ T4318] pvrusb2: Important functionality might not be entirely working. [ 1418.777195][ T4318] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1418.827813][ T4318] pvrusb2: ********** [ 1418.844125][ T2310] pvrusb2: Invalid write control endpoint [ 1418.879274][ T4318] usb 3-1: USB disconnect, device number 40 [ 1419.238277][ T2310] pvrusb2: Invalid write control endpoint [ 1419.245394][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1419.275415][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1419.312943][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1419.418501][ T2310] pvrusb2: Device being rendered inoperable [ 1419.441560][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1419.490901][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1419.552397][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1419.577827][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1419.625651][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1419.908377][T20366] zonefs (nullb0) ERROR: Not a zoned block device [ 1420.230314][T20369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.990036][T20383] zonefs (nullb0) ERROR: Not a zoned block device [ 1424.134382][T20386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.447875][ T6790] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 1424.647914][ T6790] usb 8-1: Using ep0 maxpacket: 8 [ 1424.667122][ T6790] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1424.714866][ T6790] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.791940][ T6790] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1424.819741][ T6790] pvrusb2: ********** [ 1424.829646][ T6790] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1424.873801][ T6790] pvrusb2: Important functionality might not be entirely working. [ 1424.905750][ T6790] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1424.943826][ T6790] pvrusb2: ********** [ 1424.983303][ T2310] pvrusb2: Invalid write control endpoint [ 1424.998411][ T6790] usb 8-1: USB disconnect, device number 76 [ 1425.435219][ T2310] pvrusb2: Invalid write control endpoint [ 1425.441805][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1425.495226][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1425.511383][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1425.562914][ T2310] pvrusb2: Device being rendered inoperable [ 1425.588095][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1425.636400][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1425.711702][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1425.768841][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1425.863203][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1426.267819][ T6790] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1426.535690][ T6790] usb 8-1: Using ep0 maxpacket: 32 [ 1426.632092][ T6790] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1426.647889][ T6790] usb 8-1: config 0 has no interface number 0 [ 1426.657818][ T6790] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 219, changing to 7 [ 1426.670123][ T6790] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 17515, setting to 1024 [ 1426.693018][ T6790] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1426.720447][ T6790] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1426.758052][ T6790] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.766244][ T6790] usb 8-1: Product: syz [ 1426.771272][ T6790] usb 8-1: Manufacturer: syz [ 1426.776394][ T6790] usb 8-1: SerialNumber: syz [ 1426.782754][ T6790] usb 8-1: config 0 descriptor?? [ 1426.795972][ T6790] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1426.838026][ T6790] em28xx 8-1:0.89: Video interface 89 found: isoc [ 1427.062484][ T6790] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1427.167890][ T2216] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1427.300535][ T6790] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1427.315015][ T6790] em28xx 8-1:0.89: board has no eeprom [ 1427.907826][ T6790] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1427.915975][ T6790] em28xx 8-1:0.89: analog set to isoc mode. [ 1428.107828][ T2216] usb 10-1: Using ep0 maxpacket: 32 [ 1428.129460][ T2216] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1428.161126][ T6790] usb 8-1: USB disconnect, device number 77 [ 1428.176610][ T2216] usb 10-1: config 0 has no interface number 0 [ 1428.196484][ T4317] em28xx 8-1:0.89: Registering V4L2 extension [ 1428.228334][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.234782][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.266893][ T6790] em28xx 8-1:0.89: Disconnecting em28xx [ 1428.310877][ T2216] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1428.572888][ T2216] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.584268][ T2216] usb 10-1: Product: syz [ 1428.662767][ T2216] usb 10-1: Manufacturer: syz [ 1428.765159][ T2216] usb 10-1: SerialNumber: syz [ 1429.011324][ T2216] usb 10-1: config 0 descriptor?? [ 1429.033352][ T2216] smsc95xx v2.0.0 [ 1429.044343][ T4317] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1429.051502][ T4317] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1429.058818][ T4317] em28xx 8-1:0.89: No AC97 audio processor [ 1429.066222][ T4317] usb 8-1: Decoder not found [ 1429.072144][ T4317] em28xx 8-1:0.89: failed to create media graph [ 1429.079004][ T4317] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1429.087173][ T4317] em28xx 8-1:0.89: Registering snapshot button... [ 1429.095465][ T4317] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input93 [ 1429.108067][ T4317] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1429.116815][ T6790] em28xx 8-1:0.89: Closing input extension [ 1429.123496][ T6790] em28xx 8-1:0.89: Deregistering snapshot button [ 1429.139149][ T6790] em28xx 8-1:0.89: Freeing device [ 1430.044757][ T2216] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1430.118034][ T2216] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1430.839828][ T2216] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1430.898557][ T2216] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 1431.058108][ T2216] usb 10-1: USB disconnect, device number 40 [ 1431.748944][T20459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1431.759458][T20459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.769359][T20459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1431.779841][T20459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.789680][T20459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1431.800120][T20459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.810000][T20459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1431.820489][T20459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.830577][T20459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1431.841719][T20459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.852113][T20459] device batadv_slave_1 entered promiscuous mode [ 1431.858559][T20459] device macsec1 entered promiscuous mode [ 1435.727443][ T2216] usb 8-1: new full-speed USB device number 78 using dummy_hcd [ 1436.245233][T20506] netlink: 620 bytes leftover after parsing attributes in process `syz.6.2768'. [ 1436.301132][ T2216] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1436.322728][ T2216] usb 8-1: config 0 has no interface number 0 [ 1436.337587][ T2216] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1436.382558][ T2216] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.496686][ T2216] usb 8-1: config 0 descriptor?? [ 1436.514719][ T2216] usb 8-1: selecting invalid altsetting 1 [ 1436.527078][ T2216] dvb_ttusb_budget: ttusb_init_controller: error [ 1436.538062][ T2216] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1436.678037][T18060] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1436.878110][T18060] usb 3-1: Using ep0 maxpacket: 32 [ 1436.896191][T18060] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1436.904934][T18060] usb 3-1: config 0 has no interface number 0 [ 1436.923537][T18060] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1436.937891][T18060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.946428][T18060] usb 3-1: Product: syz [ 1436.984484][T18060] usb 3-1: Manufacturer: syz [ 1436.998478][T18060] usb 3-1: SerialNumber: syz [ 1437.022645][T18060] usb 3-1: config 0 descriptor?? [ 1437.040823][T18060] smsc95xx v2.0.0 [ 1437.349282][ T2216] DVB: Unable to find symbol cx22700_attach() [ 1437.449689][T18060] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1437.487318][T18060] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1437.498006][ T4317] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1437.699838][ T4317] usb 7-1: config 0 has no interfaces? [ 1437.710322][ T4317] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1437.758120][ T2216] DVB: Unable to find symbol tda10046_attach() [ 1437.764444][ T2216] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1437.777292][ T4317] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.809361][ T2216] usb 8-1: USB disconnect, device number 78 [ 1437.992241][ T4317] usb 7-1: Product: syz [ 1439.816553][ T4317] usb 7-1: Manufacturer: syz [ 1439.835219][ T4317] usb 7-1: SerialNumber: syz [ 1439.918289][ T4317] usb 7-1: config 0 descriptor?? [ 1439.956709][T18060] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1440.157876][T18060] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 1440.214824][T18060] usb 3-1: USB disconnect, device number 41 [ 1440.363536][T19767] usb 7-1: USB disconnect, device number 72 [ 1442.577842][ T22] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1442.777930][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 1443.134028][ T22] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1443.150211][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.174038][ T22] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1443.929813][ T22] pvrusb2: ********** [ 1443.952612][ T22] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1444.097460][ T22] pvrusb2: Important functionality might not be entirely working. [ 1444.147615][ T22] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1444.236477][ T22] pvrusb2: ********** [ 1444.250935][ T2310] pvrusb2: Invalid write control endpoint [ 1444.271866][ T22] usb 7-1: USB disconnect, device number 73 [ 1444.666278][ T2310] pvrusb2: Invalid write control endpoint [ 1444.683651][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1444.731363][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1444.774451][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1445.379104][ T2310] pvrusb2: Device being rendered inoperable [ 1445.405858][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1445.447911][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1445.524939][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1445.566172][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1445.616183][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1446.247866][ T22] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1446.297868][ T6790] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1446.437818][ T22] usb 7-1: Using ep0 maxpacket: 32 [ 1446.445061][ T22] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1446.475915][ T22] usb 7-1: config 0 has no interface number 0 [ 1446.488254][ T6790] usb 8-1: Using ep0 maxpacket: 32 [ 1446.497041][ T6790] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1446.511884][ T22] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1446.541480][ T6790] usb 8-1: config 0 has no interface number 0 [ 1446.551985][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.579848][ T6790] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 219, changing to 7 [ 1446.581861][ T22] usb 7-1: Product: syz [ 1446.622194][ T6790] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 17515, setting to 1024 [ 1446.643383][ T22] usb 7-1: Manufacturer: syz [ 1446.666170][ T22] usb 7-1: SerialNumber: syz [ 1446.673783][ T6790] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1446.697903][ T6790] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1446.703444][ T22] usb 7-1: config 0 descriptor?? [ 1446.729148][ T6790] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.753908][ T6790] usb 8-1: Product: syz [ 1446.762748][ T22] smsc95xx v2.0.0 [ 1446.778189][ T6790] usb 8-1: Manufacturer: syz [ 1446.805590][ T6790] usb 8-1: SerialNumber: syz [ 1446.837689][ T6790] usb 8-1: config 0 descriptor?? [ 1446.874508][ T6790] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1446.921337][ T6790] em28xx 8-1:0.89: Video interface 89 found: isoc [ 1447.138343][ T6790] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1447.165151][ T22] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1447.193520][ T22] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1447.225765][ T6790] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1447.263664][ T6790] em28xx 8-1:0.89: board has no eeprom [ 1447.357893][ T6790] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1447.375709][ T6790] em28xx 8-1:0.89: analog set to isoc mode. [ 1447.427886][ T6790] usb 8-1: USB disconnect, device number 79 [ 1447.450712][ T6790] em28xx 8-1:0.89: Disconnecting em28xx [ 1447.491484][T18253] em28xx 8-1:0.89: Registering V4L2 extension [ 1447.775747][T18253] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1447.841146][ T22] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1447.865561][T18253] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1447.874904][ T22] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 1447.916190][T18253] em28xx 8-1:0.89: No AC97 audio processor [ 1447.957186][ T22] usb 7-1: USB disconnect, device number 74 [ 1448.066211][T18253] usb 8-1: Decoder not found [ 1448.124222][T18253] em28xx 8-1:0.89: failed to create media graph [ 1448.139447][T18253] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1448.174722][T18253] em28xx 8-1:0.89: Registering snapshot button... [ 1448.205869][T18253] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input94 [ 1448.268568][T18253] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1448.292203][ T6790] em28xx 8-1:0.89: Closing input extension [ 1448.298513][ T6790] em28xx 8-1:0.89: Deregistering snapshot button [ 1448.376922][ T6790] em28xx 8-1:0.89: Freeing device [ 1450.255285][ T5097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.643488][ T5097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.409708][ T5097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.571552][ T5097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.193025][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1455.217683][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1455.228817][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1455.247594][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1455.255428][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1455.263056][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1456.987861][ T22] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1457.031332][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1457.046948][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1457.073703][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1457.085526][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1457.095799][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1457.105380][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1457.189634][ T22] usb 1-1: config 0 has no interfaces? [ 1457.216634][T20665] chnl_net:caif_netlink_parms(): no params data found [ 1457.261856][ T5097] IPVS: stopping master sync thread 19604 ... [ 1457.268855][ T22] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1457.287608][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.297861][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 1457.316871][ T22] usb 1-1: Product: syz [ 1457.335950][ T22] usb 1-1: Manufacturer: syz [ 1457.359106][ T22] usb 1-1: SerialNumber: syz [ 1457.418644][ T22] usb 1-1: config 0 descriptor?? [ 1457.764780][T20691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2809'. [ 1457.979060][ T4317] usb 1-1: USB disconnect, device number 52 [ 1458.018042][ T6790] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1458.219806][ T6790] usb 8-1: config 0 has no interfaces? [ 1458.252790][ T6790] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1458.267003][ T6790] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.287565][T20665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.296750][T20665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.305984][ T6790] usb 8-1: Product: syz [ 1458.312009][T20665] device bridge_slave_0 entered promiscuous mode [ 1458.318727][ T6790] usb 8-1: Manufacturer: syz [ 1458.323617][ T6790] usb 8-1: SerialNumber: syz [ 1458.353879][ T6790] usb 8-1: config 0 descriptor?? [ 1458.382513][ T5097] device hsr_slave_0 left promiscuous mode [ 1458.393613][ T5097] device hsr_slave_1 left promiscuous mode [ 1458.403919][ T5097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1458.415557][ T5097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1458.424153][ T5097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1458.433566][ T5097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1458.442186][ T5097] device bridge_slave_1 left promiscuous mode [ 1458.452428][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.466241][ T5097] device bridge_slave_0 left promiscuous mode [ 1458.473312][T20691] syz.0.2809 (20691) used greatest stack depth: 20592 bytes left [ 1458.485718][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.535993][ T5097] device veth1_macvtap left promiscuous mode [ 1458.563253][ T5097] device veth0_macvtap left promiscuous mode [ 1458.576865][ T5097] device veth1_vlan left promiscuous mode [ 1458.597963][ T5097] device veth0_vlan left promiscuous mode [ 1459.160105][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 1459.379076][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 1460.723774][ T5097] team0 (unregistering): Port device team_slave_1 removed [ 1460.812423][ T5097] team0 (unregistering): Port device team_slave_0 removed [ 1460.865724][ T5097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1460.920595][ T5097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.228662][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 1461.288663][ T5097] bond0 (unregistering): Released all slaves [ 1461.384941][T20665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.392156][T20665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.400547][T20665] device bridge_slave_1 entered promiscuous mode [ 1461.414375][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2810'. [ 1461.468066][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 1461.606426][T20665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.660729][T20665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.801211][T20665] team0: Port device team_slave_0 added [ 1461.831752][T20665] team0: Port device team_slave_1 added [ 1461.924853][T20693] chnl_net:caif_netlink_parms(): no params data found [ 1461.942452][T20665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1461.955530][T20665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.026450][T20665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.083990][T20665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.107799][T20665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.168048][T20665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1462.401159][T20665] device hsr_slave_0 entered promiscuous mode [ 1462.409654][T20665] device hsr_slave_1 entered promiscuous mode [ 1462.420800][T20665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1462.434590][T20665] Cannot create hsr debugfs directory [ 1462.666024][T20693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.726934][T20693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.804182][T20693] device bridge_slave_0 entered promiscuous mode [ 1462.889441][T20693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.897037][T20693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.920048][T20693] device bridge_slave_1 entered promiscuous mode [ 1463.002034][T20693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1463.048264][ T4317] usb 8-1: USB disconnect, device number 80 [ 1463.112659][T20693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1463.202386][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1463.213322][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1463.221829][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1463.309226][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 1463.315990][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1463.324150][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1463.332815][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1463.414756][ T5097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.547951][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 1464.491587][T20693] team0: Port device team_slave_0 added [ 1464.517635][T20693] team0: Port device team_slave_1 added [ 1464.569123][ T5097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.597828][ T6790] usb 10-1: new full-speed USB device number 41 using dummy_hcd [ 1464.732656][ T5097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.802529][T20693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.811091][ T6790] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1464.829800][ T6790] usb 10-1: config 0 has no interface number 0 [ 1464.836036][T20693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1464.836057][ T6790] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1464.878783][T20693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.889318][ T6790] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.897927][T10889] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1464.901373][ T6790] usb 10-1: config 0 descriptor?? [ 1464.908307][T20693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.919126][T20693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1464.930695][ T6790] usb 10-1: selecting invalid altsetting 1 [ 1464.947822][T20693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.995078][ T6790] dvb_ttusb_budget: ttusb_init_controller: error [ 1465.004291][ T6790] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1465.107995][T10889] usb 8-1: Using ep0 maxpacket: 8 [ 1465.116902][T10889] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1465.138195][T10889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.142148][ T5097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.161818][T10889] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1465.169767][T10889] pvrusb2: ********** [ 1465.169789][ T6790] DVB: Unable to find symbol cx22700_attach() [ 1465.173763][T10889] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1465.198182][T10889] pvrusb2: Important functionality might not be entirely working. [ 1465.206220][T10889] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1465.229618][T10889] pvrusb2: ********** [ 1465.342666][T20693] device hsr_slave_0 entered promiscuous mode [ 1465.367587][ T2310] pvrusb2: Invalid write control endpoint [ 1465.378070][T10889] usb 8-1: USB disconnect, device number 81 [ 1465.387871][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 1465.418572][T20693] device hsr_slave_1 entered promiscuous mode [ 1465.447420][T20693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1465.458692][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 1465.464704][ T6790] DVB: Unable to find symbol tda10046_attach() [ 1465.471850][ T6790] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1465.487255][T20693] Cannot create hsr debugfs directory [ 1465.494886][ T2310] pvrusb2: Invalid write control endpoint [ 1465.510049][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1465.526952][ T6790] usb 10-1: USB disconnect, device number 41 [ 1465.549809][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1465.603359][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1465.625758][ T2310] pvrusb2: Device being rendered inoperable [ 1465.632702][ T2310] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1465.641165][ T2310] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1465.649679][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1465.655413][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1465.666085][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1465.799015][T20781] chnl_net:caif_netlink_parms(): no params data found [ 1465.859623][ T5097] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.903855][T20665] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1466.021397][T20665] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1466.107146][ T5097] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.169796][T20665] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1466.209634][T20665] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1466.243744][ T5097] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.302160][T20781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.325001][T20781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.367189][T20781] device bridge_slave_0 entered promiscuous mode [ 1466.427169][ T5097] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.672137][T20781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.685342][T20781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.756940][T20781] device bridge_slave_1 entered promiscuous mode [ 1466.834004][T20781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.539327][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 1467.954252][T20781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.761962][T20781] team0: Port device team_slave_0 added [ 1468.851736][T20781] team0: Port device team_slave_1 added [ 1468.962382][T20665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.012015][T20781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1469.048589][T20781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1469.075704][T20781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1469.089196][T20781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1469.096183][T20781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1469.145211][T20781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1469.289174][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1469.318590][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1469.417285][T20665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.618091][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 1469.629495][T20693] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1469.649026][T20781] device hsr_slave_0 entered promiscuous mode [ 1469.661190][T20781] device hsr_slave_1 entered promiscuous mode [ 1469.680974][T20781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1469.693951][T20781] Cannot create hsr debugfs directory [ 1469.708953][T18823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1469.721165][T18823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1469.746067][T18823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.753226][T18823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.803092][T18823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1469.915894][T18823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1469.991196][T18823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.998582][T18823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.018195][T18823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1470.033451][T18823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1470.105612][T20693] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1470.124422][T20693] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1470.203535][T20693] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1470.221987][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1470.350451][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1470.374010][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1471.304176][T20665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1471.355245][T20665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1471.407795][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1471.438230][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1471.461367][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1471.485461][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1471.507664][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1471.538601][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1471.547359][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1471.556438][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1471.698075][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 1472.299987][T20693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1472.459415][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1472.486881][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1472.676078][T20693] 8021q: adding VLAN 0 to HW filter on device team0 [ 1472.722197][ T5097] IPVS: stopping master sync thread 19240 ... [ 1473.051983][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1473.063595][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1473.100334][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1473.110087][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1473.119441][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.126521][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1473.135697][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1473.150437][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1473.161149][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.168382][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.180101][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1473.191058][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1473.210814][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1473.227122][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1473.242307][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1473.261562][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1473.587569][T20665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1474.475469][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1474.499119][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1474.535286][T20693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1474.574947][T20693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1474.776558][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1474.809638][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1474.839668][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1474.858441][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1475.287928][T11671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1476.150297][ T5097] device hsr_slave_0 left promiscuous mode [ 1476.171602][ T5097] device hsr_slave_1 left promiscuous mode [ 1476.191912][ T5097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1476.216287][ T5097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1476.255242][ T5097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1476.277120][ T5097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1476.294397][ T5097] device bridge_slave_1 left promiscuous mode [ 1476.328105][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.369941][ T5097] device bridge_slave_0 left promiscuous mode [ 1476.383825][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.451529][ T5097] device hsr_slave_0 left promiscuous mode [ 1476.828014][ T5097] device hsr_slave_1 left promiscuous mode [ 1477.004918][ T5097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1477.025291][ T5097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.089233][ T5097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1477.097593][ T5097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.105842][ T5097] device bridge_slave_1 left promiscuous mode [ 1477.118020][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.139513][ T5097] device bridge_slave_0 left promiscuous mode [ 1477.147990][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.238609][ T5097] device veth1_macvtap left promiscuous mode [ 1477.244716][ T5097] device veth0_macvtap left promiscuous mode [ 1477.251061][ T5097] device veth1_vlan left promiscuous mode [ 1477.259569][ T5097] device veth1_macvtap left promiscuous mode [ 1477.275546][ T5097] device veth0_macvtap left promiscuous mode [ 1477.282011][ T5097] device veth1_vlan left promiscuous mode [ 1477.290673][ T5097] device veth0_vlan left promiscuous mode [ 1478.152379][ T5097] team0 (unregistering): Port device team_slave_1 removed [ 1478.201038][ T5097] team0 (unregistering): Port device team_slave_0 removed [ 1478.252750][ T5097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.301588][ T5097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.646936][ T5097] bond0 (unregistering): Released all slaves [ 1479.263438][ T5097] team0 (unregistering): Port device team_slave_1 removed [ 1479.314940][ T5097] team0 (unregistering): Port device team_slave_0 removed [ 1479.361877][ T5097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.414923][ T5097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.770142][ T5097] bond0 (unregistering): Released all slaves [ 1479.927569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1479.945728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1480.097662][T20693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1480.136293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1480.154389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1480.305028][T20781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1480.333522][T20781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1480.393991][T20781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1480.407100][T20781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1480.581528][T18823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1480.625735][T18823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1480.756340][T20665] device veth0_vlan entered promiscuous mode [ 1480.838211][T18823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1480.916211][T18823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1481.207779][ T4981] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1481.246685][T20693] device veth0_vlan entered promiscuous mode [ 1481.279483][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1481.288430][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1481.312860][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1481.328591][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1481.337860][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1481.345945][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1481.501277][ T4981] usb 8-1: Using ep0 maxpacket: 32 [ 1481.511381][ T4981] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1481.525727][T20665] device veth1_vlan entered promiscuous mode [ 1481.538121][ T4981] usb 8-1: config 0 has no interface number 0 [ 1481.544331][T20693] device veth1_vlan entered promiscuous mode [ 1481.552809][ T4981] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 219, changing to 7 [ 1481.564502][ T4981] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 17515, setting to 1024 [ 1481.576288][ T4981] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1481.602374][ T4981] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1481.644503][ T4981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.664841][ T4981] usb 8-1: Product: syz [ 1481.670807][ T4981] usb 8-1: Manufacturer: syz [ 1481.675898][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1481.678183][ T4981] usb 8-1: SerialNumber: syz [ 1481.693223][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1481.706413][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1481.715696][ T4981] usb 8-1: config 0 descriptor?? [ 1481.716740][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1481.735755][ T4981] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1481.745549][ T4981] em28xx 8-1:0.89: Video interface 89 found: isoc [ 1481.750537][T20665] device veth0_macvtap entered promiscuous mode [ 1481.781055][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1481.850044][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1481.893629][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1481.924867][T20665] device veth1_macvtap entered promiscuous mode [ 1481.966309][T20693] device veth0_macvtap entered promiscuous mode [ 1481.999171][ T4981] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1482.021139][T20781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.037548][T20693] device veth1_macvtap entered promiscuous mode [ 1482.048132][T20665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.063533][T20665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.077592][T20665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.097236][T20665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.121852][ T4981] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1482.145225][T20665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1482.163588][ T4981] em28xx 8-1:0.89: board has no eeprom [ 1482.187540][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1482.196180][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1482.205341][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1482.232723][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1482.237883][ T4981] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1482.241783][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1482.264427][ T4981] em28xx 8-1:0.89: analog set to isoc mode. [ 1482.279333][T20665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.315517][T20665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.360163][T20665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.371061][ T4981] usb 8-1: USB disconnect, device number 82 [ 1482.382557][T20665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.382959][ T4981] em28xx 8-1:0.89: Disconnecting em28xx [ 1482.423206][T20665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1482.446337][ T4318] em28xx 8-1:0.89: Registering V4L2 extension [ 1482.454492][T20781] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.530044][T20693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.567896][T20693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.648270][T20693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.738659][ T4318] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1482.745675][ T4318] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1482.746686][T20693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.767872][T20693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.803856][ T4318] em28xx 8-1:0.89: No AC97 audio processor [ 1482.841502][T20693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.871712][ T4318] usb 8-1: Decoder not found [ 1482.888177][ T4318] em28xx 8-1:0.89: failed to create media graph [ 1482.917191][ T4318] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1482.917332][T20693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1482.983663][ T4318] em28xx 8-1:0.89: Registering snapshot button... [ 1483.006402][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1483.015236][ T4318] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input95 [ 1483.027322][ T4318] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1483.036421][ T4981] em28xx 8-1:0.89: Closing input extension [ 1483.042567][ T4981] em28xx 8-1:0.89: Deregistering snapshot button [ 1483.042762][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1483.085536][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1483.097505][ T4981] em28xx 8-1:0.89: Freeing device [ 1483.115620][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1483.168201][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1483.189290][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1483.221671][T20665] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.231087][T20665] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.241347][T20665] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.264237][T20665] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.304713][T20693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.360385][T20693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.397806][T20693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.428081][T20693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.476202][T20693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.497884][T20693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.528158][T20693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1483.548972][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1483.608317][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1483.619560][T11677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.626655][T11677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1483.658473][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1483.677014][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1483.712680][T11677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.719944][T11677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1483.746913][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1483.768802][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1483.817843][T20693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.826770][T20693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.843577][T20693] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.855382][T20693] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.164568][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1484.182495][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1484.292869][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1484.389471][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1484.439745][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1484.503422][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1484.576058][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1484.644902][T20781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1484.695961][T20781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1484.749920][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1484.773674][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1484.787669][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1484.800208][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1484.811466][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1484.870764][T11677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.888808][T11677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.901297][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1484.939314][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1484.985594][T11677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.022026][T11677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.076709][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1485.108386][T11681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.108853][T11677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.122785][T11681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.164891][T11681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1485.245149][T11677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.307202][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1485.751653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1485.784325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1485.815046][T20781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1485.886644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1485.922569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1486.232536][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1486.256902][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1486.294864][T20781] device veth0_vlan entered promiscuous mode [ 1486.313956][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1486.337381][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1486.395661][T20781] device veth1_vlan entered promiscuous mode [ 1486.510460][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1486.653461][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1486.698304][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1487.228559][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1487.284662][T20781] device veth0_macvtap entered promiscuous mode [ 1488.001234][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1488.022021][T20781] device veth1_macvtap entered promiscuous mode [ 1488.263065][T20781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.286861][T20781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.334146][T20781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.365451][T20781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.406326][T20781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.425247][T20781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.448299][T20781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.460602][T20781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.489022][T20781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1488.511677][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1488.532972][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1488.611198][T20781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.678587][T20781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.884255][T20781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.895462][T20781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.003703][T20781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.035002][T20781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.082811][T20781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.227460][T20781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.333604][T20781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1489.412304][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1489.427596][T11677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1489.449411][T20781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.503106][T20781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.526708][T20781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.606511][T20781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.621096][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.627525][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.319017][T11673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.341822][T11673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.445428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1491.469197][ T5213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.483743][ T5213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.533200][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1492.727805][ T4981] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1492.919961][ T4981] usb 4-1: config 0 has no interfaces? [ 1492.928065][ T4981] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1492.973078][ T4981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.032407][ T4981] usb 4-1: Product: syz [ 1493.036731][ T4981] usb 4-1: Manufacturer: syz [ 1493.083303][ T4981] usb 4-1: SerialNumber: syz [ 1493.260405][ T4981] usb 4-1: config 0 descriptor?? [ 1494.337418][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'. [ 1494.795649][T18253] usb 4-1: USB disconnect, device number 88 [ 1501.150066][T21085] zonefs (nullb0) ERROR: Not a zoned block device [ 1501.214291][T21087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1502.829304][T18253] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1503.027781][T18253] usb 2-1: Using ep0 maxpacket: 32 [ 1503.047507][T18253] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1503.239760][T18253] usb 2-1: config 0 has no interface number 0 [ 1503.255616][T18253] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 219, changing to 7 [ 1503.285945][T18253] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 17515, setting to 1024 [ 1503.317110][T18253] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1503.899417][T18253] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1503.957500][T18253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.079479][T18253] usb 2-1: Product: syz [ 1504.122054][T18253] usb 2-1: Manufacturer: syz [ 1504.197959][T18253] usb 2-1: SerialNumber: syz [ 1504.235009][T18253] usb 2-1: config 0 descriptor?? [ 1504.265444][T18253] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1504.305161][T18253] em28xx 2-1:0.89: Video interface 89 found: isoc [ 1504.529405][T18253] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1504.610573][T18253] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1504.625618][T18253] em28xx 2-1:0.89: board has no eeprom [ 1504.697885][T18253] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1504.727941][T18253] em28xx 2-1:0.89: analog set to isoc mode. [ 1504.850787][T18253] usb 2-1: USB disconnect, device number 98 [ 1504.908103][T18253] em28xx 2-1:0.89: Disconnecting em28xx [ 1504.958213][ T7] em28xx 2-1:0.89: Registering V4L2 extension [ 1505.351039][ T7] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1505.368194][ T7] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1505.429187][ T7] em28xx 2-1:0.89: No AC97 audio processor [ 1505.464166][ T7] usb 2-1: Decoder not found [ 1505.484875][ T7] em28xx 2-1:0.89: failed to create media graph [ 1505.547316][ T7] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1505.604313][ T7] em28xx 2-1:0.89: Registering snapshot button... [ 1505.636764][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input96 [ 1505.675896][ T7] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1505.702549][T18253] em28xx 2-1:0.89: Closing input extension [ 1505.708754][T18253] em28xx 2-1:0.89: Deregistering snapshot button [ 1505.743284][T18253] em28xx 2-1:0.89: Freeing device [ 1509.002627][T21177] netlink: 2088 bytes leftover after parsing attributes in process `syz.7.2883'. [ 1512.013642][T21197] 9pnet_fd: Insufficient options for proto=fd [ 1514.117926][ T2216] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1514.450155][T21222] zonefs (nullb0) ERROR: Not a zoned block device [ 1514.483137][T21222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1515.088146][ T2216] usb 10-1: Using ep0 maxpacket: 8 [ 1515.425684][ T2216] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1515.445112][ T2216] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1515.466110][ T2216] usb 10-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1515.484757][ T2216] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.502458][ T2216] usb 10-1: Product: syz [ 1515.506784][ T2216] usb 10-1: Manufacturer: syz [ 1515.522921][ T2216] usb 10-1: SerialNumber: syz [ 1515.535933][ T2216] usb 10-1: config 0 descriptor?? [ 1515.753423][ T2216] usb 10-1: USB disconnect, device number 42 [ 1518.962922][T21260] 9pnet_fd: Insufficient options for proto=fd [ 1522.092686][T21289] netlink: 2088 bytes leftover after parsing attributes in process `syz.7.2910'. [ 1523.957889][T18253] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1524.185923][T21305] 9pnet_fd: Insufficient options for proto=fd [ 1524.194783][T18253] usb 10-1: Using ep0 maxpacket: 8 [ 1524.210059][T18253] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1524.313405][T18253] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.153770][T18253] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1525.281423][T18253] pvrusb2: ********** [ 1525.358859][T18253] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1525.515090][T18253] pvrusb2: Important functionality might not be entirely working. [ 1525.630297][T18253] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1525.820979][T18253] pvrusb2: ********** [ 1527.452936][ T2310] pvrusb2: Invalid write control endpoint [ 1527.457239][T18253] usb 10-1: USB disconnect, device number 43 [ 1529.725255][ T2310] pvrusb2: Invalid write control endpoint [ 1529.833118][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1529.903807][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1529.946531][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1530.006300][ T2310] pvrusb2: Device being rendered inoperable [ 1530.038067][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1530.076654][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1530.309420][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1530.665278][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1531.183765][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1535.618007][T17622] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1535.829361][T17622] usb 4-1: config 0 has no interfaces? [ 1535.840142][T17622] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1537.232590][T17622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.246634][T17622] usb 4-1: Product: syz [ 1537.251271][T17622] usb 4-1: Manufacturer: syz [ 1537.263995][T17622] usb 4-1: SerialNumber: syz [ 1537.284569][T17622] usb 4-1: config 0 descriptor?? [ 1537.648104][T17622] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1539.197872][T17622] usb 10-1: Using ep0 maxpacket: 8 [ 1539.205491][T17622] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1539.296771][T17622] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.426917][T18253] usb 4-1: USB disconnect, device number 89 [ 1539.524937][T17622] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1541.631802][T17622] pvrusb2: ********** [ 1541.770188][T17622] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1542.701775][T17622] pvrusb2: Important functionality might not be entirely working. [ 1542.722556][T17622] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1542.735657][T17622] pvrusb2: ********** [ 1542.750174][ T2310] pvrusb2: Invalid write control endpoint [ 1542.831667][T17622] usb 10-1: USB disconnect, device number 44 [ 1543.384480][ T2310] pvrusb2: Invalid write control endpoint [ 1543.394568][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1544.363614][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1544.527164][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1545.427737][ T2310] pvrusb2: Device being rendered inoperable [ 1545.442775][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1545.487403][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1546.040851][ T2310] pvrusb2: Attached sub-driver cx25840 [ 1546.046371][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1546.085668][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1548.972551][T21481] tc_dump_action: action bad kind [ 1551.060669][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.067573][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.207790][T18253] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1551.467908][T18253] usb 4-1: Using ep0 maxpacket: 8 [ 1551.482413][T18253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1551.540342][T18253] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1551.594496][T18253] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1551.612562][T18253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.666755][T18253] usb 4-1: Product: syz [ 1551.712235][T18253] usb 4-1: Manufacturer: syz [ 1551.737856][T18253] usb 4-1: SerialNumber: syz [ 1551.766087][T18253] usb 4-1: config 0 descriptor?? [ 1552.547756][T18253] usb 4-1: USB disconnect, device number 90 [ 1562.517799][T10889] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1562.760665][T10889] usb 8-1: config 0 has no interfaces? [ 1562.770240][T10889] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1562.797853][T10889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.829144][T10889] usb 8-1: Product: syz [ 1562.845494][T10889] usb 8-1: Manufacturer: syz [ 1562.859576][T10889] usb 8-1: SerialNumber: syz [ 1562.906190][T10889] usb 8-1: config 0 descriptor?? [ 1563.849317][ T6790] usb 8-1: USB disconnect, device number 83 [ 1565.253407][T21637] tc_dump_action: action bad kind [ 1567.513660][T21660] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 1567.621924][T21663] Bluetooth: MGMT ver 1.22 [ 1571.477903][ T4318] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1572.327769][ T4318] usb 4-1: Using ep0 maxpacket: 32 [ 1572.359039][ T4318] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1572.367210][ T4318] usb 4-1: config 0 has no interface number 0 [ 1572.415051][T17622] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1572.437254][ T4318] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1572.454271][ T4318] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1572.473055][ T4318] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1572.492563][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.513833][ T4318] usb 4-1: Product: syz [ 1572.526331][ T4318] usb 4-1: Manufacturer: syz [ 1572.536438][ T4318] usb 4-1: SerialNumber: syz [ 1572.563187][ T4318] usb 4-1: config 0 descriptor?? [ 1572.586025][ T4318] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1572.616573][ T4318] em28xx 4-1:0.89: Video interface 89 found: [ 1572.637781][T17622] usb 8-1: Using ep0 maxpacket: 32 [ 1572.651122][T17622] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1572.847757][T17622] usb 8-1: config 0 has no interface number 0 [ 1572.848246][ T4318] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1572.853993][T17622] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1572.854022][T17622] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1573.893607][T17622] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1573.947795][T17622] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.958868][ T4318] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1573.968840][ T4318] em28xx 4-1:0.89: board has no eeprom [ 1574.044387][T21725] tc_dump_action: action bad kind [ 1574.417752][T17622] usb 8-1: Product: syz [ 1574.422016][T17622] usb 8-1: Manufacturer: syz [ 1574.426664][T17622] usb 8-1: SerialNumber: syz [ 1574.432079][ T4318] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1574.450827][T17622] usb 8-1: config 0 descriptor?? [ 1574.467732][ T4318] em28xx 4-1:0.89: analog set to bulk mode. [ 1575.480240][T17622] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1575.497771][T17622] em28xx 8-1:0.89: Video interface 89 found: [ 1575.906045][ T4318] usb 4-1: USB disconnect, device number 91 [ 1576.037106][T17622] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1576.070691][ T4318] em28xx 4-1:0.89: Disconnecting em28xx [ 1576.127816][T17622] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1576.136688][T17622] em28xx 8-1:0.89: board has no eeprom [ 1576.139382][T10889] em28xx 4-1:0.89: Registering V4L2 extension [ 1576.335820][T17622] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1576.352700][T17622] em28xx 8-1:0.89: analog set to bulk mode. [ 1576.415393][T17622] usb 8-1: USB disconnect, device number 84 [ 1577.384580][T17622] em28xx 8-1:0.89: Disconnecting em28xx [ 1579.248087][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 1579.487740][T10889] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1579.494948][T10889] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1579.641562][T10889] em28xx 4-1:0.89: No AC97 audio processor [ 1579.649913][T10889] usb 4-1: Decoder not found [ 1579.654726][T10889] em28xx 4-1:0.89: failed to create media graph [ 1579.661603][T10889] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1579.674223][T10889] em28xx 4-1:0.89: Registering snapshot button... [ 1579.683079][T10889] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input97 [ 1579.786056][T10889] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1579.855399][ T4318] em28xx 4-1:0.89: Closing input extension [ 1579.861603][ T4318] em28xx 4-1:0.89: Deregistering snapshot button [ 1580.655481][T18253] em28xx 8-1:0.89: Registering V4L2 extension [ 1580.658354][ T4318] em28xx 4-1:0.89: Freeing device [ 1581.999337][T18253] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1582.006669][T18253] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1582.036577][T18253] em28xx 8-1:0.89: No AC97 audio processor [ 1582.077019][T18253] usb 8-1: Decoder not found [ 1582.197733][T18253] em28xx 8-1:0.89: failed to create media graph [ 1582.254153][T18253] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1582.994993][T18253] em28xx 8-1:0.89: Registering snapshot button... [ 1582.995343][T21770] ================================================================== [ 1583.009551][T21770] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 1583.011707][T18253] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input98 [ 1583.016717][T21770] Read of size 8 at addr ffff8880543c4738 by task v4l_id/21770 [ 1583.034772][T21770] [ 1583.037203][T21770] CPU: 1 PID: 21770 Comm: v4l_id Not tainted syzkaller #0 [ 1583.044414][T21770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1583.054596][T21770] Call Trace: [ 1583.057894][T21770] [ 1583.060823][T21770] dump_stack_lvl+0x188/0x24e [ 1583.065563][T21770] ? __lock_acquire+0x7d10/0x7d10 [ 1583.070642][T21770] ? show_regs_print_info+0x12/0x12 [ 1583.075879][T21770] ? load_image+0x400/0x400 [ 1583.080432][T21770] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1583.085695][T18253] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1583.086034][T21770] ? __virt_addr_valid+0x188/0x540 [ 1583.099660][T21770] ? __virt_addr_valid+0x465/0x540 [ 1583.104800][T21770] ? v4l2_fh_open+0xc6/0x430 [ 1583.109423][T21770] print_report+0xa8/0x210 [ 1583.113845][T21770] kasan_report+0x10b/0x140 [ 1583.118426][T21770] ? v4l2_fh_open+0xc6/0x430 [ 1583.123021][T21770] v4l2_fh_open+0xc6/0x430 [ 1583.127625][T21770] em28xx_v4l2_open+0x152/0x990 [ 1583.132572][T21770] ? __lock_acquire+0x7d10/0x7d10 [ 1583.137603][T21770] v4l2_open+0x20b/0x360 [ 1583.141861][T21770] chrdev_open+0x5c5/0x6a0 [ 1583.146409][T21770] ? cd_forget+0x160/0x160 [ 1583.151172][T21770] ? fsnotify_perm+0x39b/0x550 [ 1583.156078][T21770] ? cd_forget+0x160/0x160 [ 1583.160518][T21770] do_dentry_open+0x7e9/0x10d0 [ 1583.165343][T21770] path_openat+0x2635/0x2ee0 [ 1583.169956][T21770] ? verify_lock_unused+0x140/0x140 [ 1583.175234][T21770] ? do_syscall_64+0x4c/0xa0 [ 1583.179928][T21770] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1583.186092][T21770] ? do_filp_open+0x430/0x430 [ 1583.190866][T21770] do_filp_open+0x1f1/0x430 [ 1583.195375][T21770] ? vfs_tmpfile+0x480/0x480 [ 1583.199970][T21770] ? _raw_spin_unlock+0x24/0x40 [ 1583.204819][T21770] ? alloc_fd+0x58f/0x630 [ 1583.209207][T21770] do_sys_openat2+0x150/0x4b0 [ 1583.213976][T21770] ? up_read+0x20/0x20 [ 1583.218050][T21770] ? do_faccessat+0x73f/0xa10 [ 1583.222826][T21770] ? kmem_cache_free+0xf7/0x290 [ 1583.227683][T21770] ? do_sys_open+0xe0/0xe0 [ 1583.232104][T21770] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1583.238091][T21770] ? lock_chain_count+0x20/0x20 [ 1583.242952][T21770] __x64_sys_openat+0x135/0x160 [ 1583.247810][T21770] do_syscall_64+0x4c/0xa0 [ 1583.252247][T21770] ? clear_bhb_loop+0x60/0xb0 [ 1583.257014][T21770] ? clear_bhb_loop+0x60/0xb0 [ 1583.261810][T21770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1583.267820][T21770] RIP: 0033:0x7fdfd8ea7407 [ 1583.272256][T21770] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1583.292135][T21770] RSP: 002b:00007fffcaa94f30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1583.300651][T21770] RAX: ffffffffffffffda RBX: 00007fdfd9560880 RCX: 00007fdfd8ea7407 [ 1583.308628][T21770] RDX: 0000000000000000 RSI: 00007fffcaa96f1b RDI: ffffffffffffff9c [ 1583.316603][T21770] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1583.324579][T21770] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1583.332557][T21770] R13: 00007fffcaa95180 R14: 00007fdfd96bf000 R15: 0000559bb9cc04d8 [ 1583.340539][T21770] [ 1583.343559][T21770] [ 1583.345883][T21770] Allocated by task 18253: [ 1583.350299][T21770] kasan_set_track+0x4b/0x70 [ 1583.354902][T21770] __kasan_kmalloc+0x8e/0xa0 [ 1583.359500][T21770] em28xx_v4l2_init+0x107/0x2e70 [ 1583.364614][T21770] em28xx_init_extension+0x118/0x1b0 [ 1583.369963][T21770] process_one_work+0x8a2/0x1160 [ 1583.375022][T21770] worker_thread+0xaa2/0x1270 [ 1583.379705][T21770] kthread+0x29d/0x330 [ 1583.383800][T21770] ret_from_fork+0x1f/0x30 [ 1583.388254][T21770] [ 1583.390575][T21770] Freed by task 18253: [ 1583.394637][T21770] kasan_set_track+0x4b/0x70 [ 1583.399232][T21770] kasan_save_free_info+0x2d/0x50 [ 1583.404350][T21770] ____kasan_slab_free+0x126/0x1e0 [ 1583.409466][T21770] slab_free_freelist_hook+0x131/0x1a0 [ 1583.415186][T21770] __kmem_cache_free+0xb6/0x1f0 [ 1583.420212][T21770] em28xx_v4l2_init+0x166c/0x2e70 [ 1583.425326][T21770] em28xx_init_extension+0x118/0x1b0 [ 1583.430622][T21770] process_one_work+0x8a2/0x1160 [ 1583.435575][T21770] worker_thread+0xaa2/0x1270 [ 1583.440254][T21770] kthread+0x29d/0x330 [ 1583.444322][T21770] ret_from_fork+0x1f/0x30 [ 1583.448741][T21770] [ 1583.451154][T21770] The buggy address belongs to the object at ffff8880543c4000 [ 1583.451154][T21770] which belongs to the cache kmalloc-8k of size 8192 [ 1583.465297][T21770] The buggy address is located 1848 bytes inside of [ 1583.465297][T21770] 8192-byte region [ffff8880543c4000, ffff8880543c6000) [ 1583.478929][T21770] [ 1583.481253][T21770] The buggy address belongs to the physical page: [ 1583.487666][T21770] page:ffffea000150f000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x543c0 [ 1583.497939][T21770] head:ffffea000150f000 order:3 compound_mapcount:0 compound_pincount:0 [ 1583.506352][T21770] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1583.514344][T21770] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017442280 [ 1583.523022][T21770] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 1583.531704][T21770] page dumped because: kasan: bad access detected [ 1583.538115][T21770] page_owner tracks the page as allocated [ 1583.543830][T21770] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13634, tgid 13624 (syz.6.1498), ts 762822427536, free_ts 761505699957 [ 1583.566856][T21770] post_alloc_hook+0x173/0x1a0 [ 1583.571770][T21770] get_page_from_freelist+0x1a1e/0x1ab0 [ 1583.577358][T21770] __alloc_pages+0x1ec/0x4f0 [ 1583.581960][T21770] alloc_slab_page+0x5d/0x160 [ 1583.586644][T21770] new_slab+0x87/0x2c0 [ 1583.590714][T21770] ___slab_alloc+0xbc6/0x1240 [ 1583.595391][T21770] __kmem_cache_alloc_node+0x1a0/0x260 [ 1583.600862][T21770] __kmalloc_node_track_caller+0x9e/0x230 [ 1583.606735][T21770] __alloc_skb+0x22a/0x7e0 [ 1583.611267][T21770] alloc_skb_with_frags+0xa7/0x710 [ 1583.616390][T21770] sock_alloc_send_pskb+0x87f/0x9a0 [ 1583.621595][T21770] rawv6_send_hdrinc+0x2f8/0x16c0 [ 1583.626676][T21770] rawv6_sendmsg+0x11b3/0x1700 [ 1583.631445][T21770] kernel_sendmsg+0x255/0x380 [ 1583.636146][T21770] sock_no_sendpage+0x137/0x1c0 [ 1583.641001][T21770] kernel_sendpage+0x2cd/0x640 [ 1583.645771][T21770] page last free stack trace: [ 1583.650441][T21770] free_unref_page_prepare+0x8b4/0x9a0 [ 1583.655904][T21770] free_unref_page+0x2e/0x3f0 [ 1583.660672][T21770] __unfreeze_partials+0x1a5/0x200 [ 1583.665795][T21770] put_cpu_partial+0x17c/0x250 [ 1583.670568][T21770] qlist_free_all+0x76/0xe0 [ 1583.675070][T21770] kasan_quarantine_reduce+0x144/0x160 [ 1583.680532][T21770] __kasan_slab_alloc+0x1e/0x80 [ 1583.685389][T21770] slab_post_alloc_hook+0x4b/0x480 [ 1583.690503][T21770] kmem_cache_alloc+0x123/0x2f0 [ 1583.695353][T21770] vm_area_dup+0x23/0x1a0 [ 1583.699734][T21770] __split_vma+0xb9/0x500 [ 1583.704085][T21770] do_mas_align_munmap+0x7b9/0x12b0 [ 1583.709469][T21770] do_mas_munmap+0x240/0x2b0 [ 1583.714159][T21770] mmap_region+0x6e0/0x1ca0 [ 1583.718763][T21770] do_mmap+0x964/0xfd0 [ 1583.722842][T21770] vm_mmap_pgoff+0x1c1/0x2d0 [ 1583.727499][T21770] [ 1583.729826][T21770] Memory state around the buggy address: [ 1583.735462][T21770] ffff8880543c4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1583.743588][T21770] ffff8880543c4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1583.751652][T21770] >ffff8880543c4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1583.759795][T21770] ^ [ 1583.765773][T21770] ffff8880543c4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1583.773834][T21770] ffff8880543c4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1583.781896][T21770] ================================================================== [ 1583.827944][T17622] em28xx 8-1:0.89: Closing input extension [ 1583.834472][T17622] em28xx 8-1:0.89: Deregistering snapshot button [ 1583.857782][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 1585.071364][T21770] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1585.078620][T21770] CPU: 0 PID: 21770 Comm: v4l_id Not tainted syzkaller #0 [ 1585.085764][T21770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1585.095859][T21770] Call Trace: [ 1585.099164][T21770] [ 1585.102093][T21770] dump_stack_lvl+0x188/0x24e [ 1585.106771][T21770] ? memcpy+0x3c/0x60 [ 1585.110755][T21770] ? show_regs_print_info+0x12/0x12 [ 1585.115964][T21770] ? load_image+0x400/0x400 [ 1585.120524][T21770] panic+0x2e5/0x730 [ 1585.124416][T21770] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1585.130708][T21770] ? bpf_jit_dump+0xd0/0xd0 [ 1585.135243][T21770] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1585.141231][T21770] ? _raw_spin_unlock+0x40/0x40 [ 1585.146096][T21770] check_panic_on_warn+0x80/0xa0 [ 1585.151040][T21770] ? v4l2_fh_open+0xc6/0x430 [ 1585.155631][T21770] end_report+0x66/0x110 [ 1585.159875][T21770] kasan_report+0x118/0x140 [ 1585.164373][T21770] ? v4l2_fh_open+0xc6/0x430 [ 1585.168967][T21770] v4l2_fh_open+0xc6/0x430 [ 1585.173383][T21770] em28xx_v4l2_open+0x152/0x990 [ 1585.178228][T21770] ? __lock_acquire+0x7d10/0x7d10 [ 1585.183246][T21770] v4l2_open+0x20b/0x360 [ 1585.187537][T21770] chrdev_open+0x5c5/0x6a0 [ 1585.191965][T21770] ? cd_forget+0x160/0x160 [ 1585.196404][T21770] ? fsnotify_perm+0x39b/0x550 [ 1585.201175][T21770] ? cd_forget+0x160/0x160 [ 1585.205770][T21770] do_dentry_open+0x7e9/0x10d0 [ 1585.210557][T21770] path_openat+0x2635/0x2ee0 [ 1585.215163][T21770] ? verify_lock_unused+0x140/0x140 [ 1585.220369][T21770] ? do_syscall_64+0x4c/0xa0 [ 1585.224959][T21770] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1585.231205][T21770] ? do_filp_open+0x430/0x430 [ 1585.236005][T21770] do_filp_open+0x1f1/0x430 [ 1585.240589][T21770] ? vfs_tmpfile+0x480/0x480 [ 1585.245179][T21770] ? _raw_spin_unlock+0x24/0x40 [ 1585.250060][T21770] ? alloc_fd+0x58f/0x630 [ 1585.254416][T21770] do_sys_openat2+0x150/0x4b0 [ 1585.259970][T21770] ? up_read+0x20/0x20 [ 1585.264536][T21770] ? do_faccessat+0x73f/0xa10 [ 1585.269226][T21770] ? kmem_cache_free+0xf7/0x290 [ 1585.274074][T21770] ? do_sys_open+0xe0/0xe0 [ 1585.278486][T21770] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1585.284488][T21770] ? lock_chain_count+0x20/0x20 [ 1585.289354][T21770] __x64_sys_openat+0x135/0x160 [ 1585.294222][T21770] do_syscall_64+0x4c/0xa0 [ 1585.298651][T21770] ? clear_bhb_loop+0x60/0xb0 [ 1585.303434][T21770] ? clear_bhb_loop+0x60/0xb0 [ 1585.308231][T21770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1585.314214][T21770] RIP: 0033:0x7fdfd8ea7407 [ 1585.318647][T21770] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1585.338485][T21770] RSP: 002b:00007fffcaa94f30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1585.346948][T21770] RAX: ffffffffffffffda RBX: 00007fdfd9560880 RCX: 00007fdfd8ea7407 [ 1585.354923][T21770] RDX: 0000000000000000 RSI: 00007fffcaa96f1b RDI: ffffffffffffff9c [ 1585.363068][T21770] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1585.371242][T21770] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1585.379296][T21770] R13: 00007fffcaa95180 R14: 00007fdfd96bf000 R15: 0000559bb9cc04d8 [ 1585.387280][T21770] [ 1585.390812][T21770] Kernel Offset: disabled [ 1585.395133][T21770] Rebooting in 86400 seconds..