last executing test programs: 18m34.5013552s ago: executing program 1 (id=301): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) openat$hwrng(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) mknodat(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0xb) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x6a980) 18m32.846317408s ago: executing program 1 (id=305): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe2(&(0x7f0000000400), 0x80000) pselect6(0x40, &(0x7f0000000240)={0x300, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 18m27.25269278s ago: executing program 1 (id=311): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x40, 0x1, 0x2}, 0x30, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0xfffffffffffffffa) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3}) close(r1) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x4000, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) lseek(0xffffffffffffffff, 0xfffffffffffffff8, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) 18m26.253598351s ago: executing program 1 (id=313): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980282000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000004) r2 = socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x401400, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_vlan\x00', 0x2000}) mount_setattr(r3, &(0x7f0000000180)='./file0\x00', 0x100, &(0x7f0000000200)={0xd, 0x1000f7, 0x140000, {r4}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') write$binfmt_misc(r5, &(0x7f0000000540)="f64b", 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x80400) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b00000101020301090224000100001000090414000239261a5509050602ff0300000009058202"], 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x2}, @mss={0x2, 0x3}, @window={0x3, 0x9, 0x7}, @timestamp, @mss={0x2, 0x5ca9e04c}, @timestamp, @sack_perm, @sack_perm, @timestamp, @timestamp], 0xa) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000fb89ae000300000000", @ANYRES32=r2, @ANYRESDEC=r2], 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x40000) 18m22.555451441s ago: executing program 1 (id=315): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) openat$hwrng(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) mknodat(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0xb) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x6a980) 18m15.496300766s ago: executing program 1 (id=330): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x20, 0x118, 0x0, r4}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r5, &(0x7f00000004c0)={0x0, 0x400042cc, 0x1000, 0x1, 0x80, 0x0, r6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 18m14.742209706s ago: executing program 32 (id=330): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x20, 0x118, 0x0, r4}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r5, &(0x7f00000004c0)={0x0, 0x400042cc, 0x1000, 0x1, 0x80, 0x0, r6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 14m7.304592574s ago: executing program 0 (id=697): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b1183700000100000001090222000101008032090400000103000000092111010001223e000705810308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x21, @any, 0x0, 0x2}, 0xe) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f00000004c0)={0x14, &(0x7f0000000300)={0x40, 0x22, 0xfb, {0xfb, 0x9, "e3bfa5400433c524cc88bc1842686d73bf7bbafa833f7713000819815e50d318f734c855ec3fb7366aa461f7d9df055e50e230a275c09ee30530e88aa90cdcfc777c172b286316b25d51ab4d5adbbc73cbd51547a20afb552e9f4f3084c5e7ea137e5d9baca5d622122ba88cdba17688a1fc91c657acef137efbef33faae07457f738838ebccb06e8a8637ae127682d1aaf2a4ca0cd1b4af57680680bf2eb071fbd524b6c9f8b179bfb88b1a4284efe64aa780661c7bd83c373378cea24d15d1cd76e50f67987291b4eac459113da520ec33dff070f7ad4a58018e5334972d1f3114afb8321c1ba7a0fef216f73844fc32c757c9bb6794337c"}}, &(0x7f0000000440)={0x0, 0x3, 0x60, @string={0x60, 0x3, "91a4871b7c75afec4d14146486a362dd9ef995416e9d7074dbe496f2aaad8c40809532f92d5ba1bbcdbeda0aa46f79aeb01dc49b70cda71dc0cdee5811ed7350aec18d8d96e0f574bf878b051129a368ea9a449ed22394bfb973666adaf7"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x40, 0x19, 0xa7, "fb8404c81cfbd2da69084d125ac1ca3178e12385953b9135703ab4069441ed242dbf5dab86c657688a82779768e49352fa0b71844845fd9bc17f7d911ef9af87cd3cd97430c3ac82f0cd11ca270274af8ca23d16d37ff5fdaaa9f1083dbf5f73c838613de6a14404da55b414558fe2cc6071229f21ac491755e1da7b36872b62d5c691b7361d6c8e948a9d6bae93f5ad6a3a3e3cbcd3d5ff87beb48bfec1079777d0dbbb783d50"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x81, 0x2, "0f83"}, &(0x7f0000000680)={0x20, 0x82, 0x3, "f18cd1"}, &(0x7f00000006c0)={0x20, 0x83, 0x2, "2dd3"}, &(0x7f0000000700)={0x20, 0x84, 0x2, "749d"}, &(0x7f0000000740)={0x20, 0x85, 0x3, '=F\"'}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x38, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0xb, '\x00', {0x9, 0x6, "155569", 0x7, 0x6c, 0xff, @private0={0xfc, 0x0, '\x00', 0x8}, @private0, [], "796ee019f45e1987"}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000102000000020015cd64eb42f3ad3cfb401fba770bf4c5bdf1ee87ed39bcd5f1ddf61a0250cd2022248ad0044327fb700a2067ad4822e3dc5bf4496f2765d99b4b7c2e075cdb376f497a6461a0efac32b680abc9180ef3685c03dcef7a7555c9aabac3214aac5c05727ba9a3aa7510951f79779c51586f7bcb9ee4afd2a90840b3f76ad68f22e677a68a22c7e38ea763d9c9affb9a19233ca4ca84604167d93d1dd921618d5d5c59d7c73ba3f3601407619f0dfa"], &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) io_submit(0x0, 0x0, 0x0) 14m5.193025264s ago: executing program 3 (id=700): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20161a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m4.208542353s ago: executing program 0 (id=701): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x1028, 0x30, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{0x1014, 0x1, [@m_mpls={0x100, 0x8, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xd224e}]}, {0xc9, 0x6, "73d7579a602f0a5381aab12c158671e7d731d80810de7d069af8214b1e54b3328f090cf031ed6ba36f29f68b73f97100289bb065cb40e0221c48d986b57a268142882e045d05cd2b17f34041bd663acaa33d7395cc4a9e89f2fccf3ba5a2d4d5efa2a14d1ebaa47133c93e78339eabbea7861a5ac185e826ad1bc29e3b7bd9878482278ff953044461fccbe443a45e7c0853e78230a3279fae33b228b636267628da2a049896493f098c4ec1be422f800365b99d209f9452f48dc81f19b8e36c47d142c1f5"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x34, 0x1d, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xedc, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0xead, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1028}}, 0x20004055) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xd) fchdir(r6) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r7, &(0x7f0000000000)=@known='system.posix_acl_default\x00') sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @empty}}) r8 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c80000001010203010902200001010080000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400108000000ebaa55"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 14m2.320640992s ago: executing program 2 (id=704): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x10, 0x1024002, 0x804d}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x1, 0x40}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r1, r2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) socket$key(0xf, 0x3, 0x2) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000080)={&(0x7f0000000780)=[{0x4010, 0x0, 0x0, 0x0}], 0x1}) (fail_nth: 1) 14m1.128274581s ago: executing program 3 (id=705): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000001300)=0x40, 0x4) ftruncate(r2, 0x6000809) sendfile(r1, r2, 0x0, 0x7ffff004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 14m1.057432884s ago: executing program 2 (id=706): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000180000000000feffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99f1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x541e, &(0x7f00000002c0)) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x21) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x80503d0a, &(0x7f0000000380)={0x5}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0xffff, 0x8c181) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f0000000100)={0x0, 0x90e, 0x0, '\x00', 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x5) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x2d8}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0xf5, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 13m59.791123931s ago: executing program 2 (id=707): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) r0 = socket$igmp(0x2, 0x3, 0x2) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x80e003, 0x0) pipe(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x40, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x8) mknod(&(0x7f0000000080)='./tracing/events/enable\x00', 0x1000, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) write(r1, 0x0, 0xfe31) 13m59.652953073s ago: executing program 0 (id=708): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b1183700000100000001090222000101008032090400000103000000092111010001223e000705810308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x21, @any, 0x0, 0x2}, 0xe) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f00000004c0)={0x14, &(0x7f0000000300)={0x40, 0x22, 0xfb, {0xfb, 0x9, "e3bfa5400433c524cc88bc1842686d73bf7bbafa833f7713000819815e50d318f734c855ec3fb7366aa461f7d9df055e50e230a275c09ee30530e88aa90cdcfc777c172b286316b25d51ab4d5adbbc73cbd51547a20afb552e9f4f3084c5e7ea137e5d9baca5d622122ba88cdba17688a1fc91c657acef137efbef33faae07457f738838ebccb06e8a8637ae127682d1aaf2a4ca0cd1b4af57680680bf2eb071fbd524b6c9f8b179bfb88b1a4284efe64aa780661c7bd83c373378cea24d15d1cd76e50f67987291b4eac459113da520ec33dff070f7ad4a58018e5334972d1f3114afb8321c1ba7a0fef216f73844fc32c757c9bb6794337c"}}, &(0x7f0000000440)={0x0, 0x3, 0x60, @string={0x60, 0x3, "91a4871b7c75afec4d14146486a362dd9ef995416e9d7074dbe496f2aaad8c40809532f92d5ba1bbcdbeda0aa46f79aeb01dc49b70cda71dc0cdee5811ed7350aec18d8d96e0f574bf878b051129a368ea9a449ed22394bfb973666adaf7"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x40, 0x19, 0xa7, "fb8404c81cfbd2da69084d125ac1ca3178e12385953b9135703ab4069441ed242dbf5dab86c657688a82779768e49352fa0b71844845fd9bc17f7d911ef9af87cd3cd97430c3ac82f0cd11ca270274af8ca23d16d37ff5fdaaa9f1083dbf5f73c838613de6a14404da55b414558fe2cc6071229f21ac491755e1da7b36872b62d5c691b7361d6c8e948a9d6bae93f5ad6a3a3e3cbcd3d5ff87beb48bfec1079777d0dbbb783d50"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x81, 0x2, "0f83"}, &(0x7f0000000680)={0x20, 0x82, 0x3, "f18cd1"}, &(0x7f00000006c0)={0x20, 0x83, 0x2, "2dd3"}, &(0x7f0000000700)={0x20, 0x84, 0x2, "749d"}, &(0x7f0000000740)={0x20, 0x85, 0x3, '=F\"'}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x38, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0xb, '\x00', {0x9, 0x6, "155569", 0x7, 0x6c, 0xff, @private0={0xfc, 0x0, '\x00', 0x8}, @private0, [], "796ee019f45e1987"}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000102000000020015cd64eb42f3ad3cfb401fba770bf4c5bdf1ee87ed39bcd5f1ddf61a0250cd2022248ad0044327fb700a2067ad4822e3dc5bf4496f2765d99b4b7c2e075cdb376f497a6461a0efac32b680abc9180ef3685c03dcef7a7555c9aabac3214aac5c05727ba9a3aa7510951f79779c51586f7bcb9ee4afd2a90840b3f76ad68f22e677a68a22c7e38ea763d9c9affb9a19233ca4ca84604167d93d1dd921618d5d5c59d7c73ba3f3601407619f0dfa"], &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) io_submit(0x0, 0x0, 0x0) 13m59.14582207s ago: executing program 4 (id=709): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805) r0 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xffffff64, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m58.590236764s ago: executing program 4 (id=710): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0x30000, 0x1a, &(0x7f0000000040)=""/26}]}) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008012}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r2, &(0x7f0000002940)=[{0x0}, {&(0x7f0000001880)="05", 0x1}], 0x2, 0x8, 0x3) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000abaff9), 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0xf0abc20785377744}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000d40)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) unshare(0x20000400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1) 13m58.400077697s ago: executing program 2 (id=711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x8}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a1bc0005000000000000000e4191000900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x46}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x5, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x5, 0x5}}]}}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0x40, 0x7, 0xff, 0x8}, 0x3d, &(0x7f0000000100)={0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0x6, 0xe0, 0xc, 0x9, 0xfffd, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0x1, 0x2, 0x3a65}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xa4, 0x5, 0x4, 0xf00, 0x19b9, [0xf, 0xc000, 0xf, 0x0, 0x0]}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41b}}, {0xd0, &(0x7f0000000240)=ANY=[@ANYBLOB="d00372a266ac95f7f3f7e2a77d815cc3751e8a8e80ea800cb5b2bbd2ee9d2dc65319d9c58a8921e7abd2719eb550099afff8fbf476aefce0558641c83ff84472413d5ce483b5a7fb7be4f62ba9cb58e303ca117817ac05e30c898f52084ab2b15385a50e0d5407e5e8d538393c69675c7bf92a71e8c1f2ba13f030108deec85726043c05df8d0bdfea559f73587f2a6fdade55012a0149585e2b1ba51d579ebb9a29900c569df5165d863a98e233ba2f32ccf78455178dca0145d50fb05dae3459c235506435551d0abbfe46f0064ab1"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_connect$cdc_ncm(0x2, 0x13a, &(0x7f0000001500)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x128, 0x2, 0x1, 0x9, 0x20, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xb963}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x3, 0x6, 0x8}, {0x6, 0x24, 0x1a, 0xcb63, 0x20}, [@mdlm_detail={0xcc, 0x24, 0x13, 0x3f, "37cde67a7b9e353617c9dfa9ff461a4513e0c64271ed0a6ee479230e2226712ed85815839fc02cbe133e267be99718ea0cdace04440e64c02f474996a9e3c29eb8713e5060790c98e91e34c042fd46c1b4278799a296cf1a28963cff9c657faa793c17601a0de8553ce770b9e0c4b45095a6662eb1c945a07f9f55bc53a2183715602962554329b6ca56f0a9f5ca9bbc845b887e34a2ccc00bdda50a9c2b6e081885dd6cdb713dac2f5949e7a92b08a30df17009053f4a17869ac5a792a030d44051da4c338f57f7"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x5, 0xd2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xc, 0x4a, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x8, 0x54}}}}}}}]}}, &(0x7f00000016c0)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x110, 0x6, 0x8, 0x3, 0x10, 0x3b}, 0x5, &(0x7f0000001680)={0x5, 0xf, 0x5}}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000380)={0x1, 0x10003, 0x10000, 0x4, 0x15, "1bd60000000000000000f800000000001600"}) write$UHID_INPUT(r3, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000000, 0x204031, 0xffffffffffffffff, 0xec775000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0x14, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b0000000a000000050000000800100001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r5, &(0x7f0000000200), 0x0}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000017c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x48, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x810) 13m58.107637981s ago: executing program 3 (id=712): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone3(&(0x7f0000000080)={0x2a694b000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) vmsplice(r0, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$kcm(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 13m57.423355833s ago: executing program 3 (id=713): socket(0x10, 0x803, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000140)={0x2001, 0x1, 0x3, 0x9, 0x4}) close(0x3) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000240)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000ffff2abd7000fbdbdf2500000000", @ANYRESHEX=r2, @ANYBLOB="715a0300031a05001c001080090001ec7b29c50d538cb4651831df4800626f6e64000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x6004c060) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000200)={0x158, 0x4, 0x0, {0x7, 0x6}, 0x5, 0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r6, &(0x7f00000045c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x3}, 0xe) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xe) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}}}, 0x10) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="400b008080fd0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYBLOB="4941647cb398ad70ba90aae6581b1188d91612a65edefdfa6b52fbe2d652ba8b4fa5e506f9cf13c80061415ec74af0e2d5ca9a0e29a6286558f780d249cc523cffad2f808a5cba8918b0fb7d9844fafcdbc1402cc3d4c71f91af33c375dbaa1750b85b3168db12dcdb799d745315a3bac54363bea1b7bdaf64d04e5d8d41f15fb6fdd70a33d0f27996fd18b0f8945a4a74a6e8009a84892ae4721348cdd31de21dd3c527714e7a188e5c3711a94af364dc4bd9a1132c996f58fe2104e4e4e079f53437f944812080288c0d45ca73aace534cd6808378ff0670fc56f8ef4d21047a0f877e16d7b621fc72333b", @ANYRES8=r6, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) socket$unix(0x1, 0x1, 0x0) 13m57.33089126s ago: executing program 0 (id=714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)='hfsplus\x00', 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x13, 0xffffffffffffffff, 0x100000000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) openat$autofs(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x18, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@generic={0x38, 0xd, 0x3, 0x2, 0x48}, @alu={0x4, 0x1, 0x7, 0x9, 0x5, 0x3c, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}]}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000440), 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001900)={0x0, 0x0, 0x9, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff], &(0x7f0000001980)=[{0x0, 0x1, 0x2, 0x2}], 0x10, 0x1}, 0x94) r4 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x30000000}) madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x210002, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=r5, 0x9, 0x1, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 13m53.865510243s ago: executing program 2 (id=715): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x102c, 0x30, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{0x1014, 0x1, [@m_mpls={0x100, 0x8, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xd224e}]}, {0xc9, 0x6, "73d7579a602f0a5381aab12c158671e7d731d80810de7d069af8214b1e54b3328f090cf031ed6ba36f29f68b73f97100289bb065cb40e0221c48d986b57a268142882e045d05cd2b17f34041bd663acaa33d7395cc4a9e89f2fccf3ba5a2d4d5efa2a14d1ebaa47133c93e78339eabbea7861a5ac185e826ad1bc29e3b7bd9878482278ff953044461fccbe443a45e7c0853e78230a3279fae33b228b636267628da2a049896493f098c4ec1be422f800365b99d209f9452f48dc81f19b8e36c47d142c1f5"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x34, 0x1d, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xedc, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0xead, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x4}]}, 0x102c}}, 0x20004055) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xd) fchdir(r6) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r7, &(0x7f0000000000)=@known='system.posix_acl_default\x00') sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @empty}}) r8 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c80000001010203010902200001010080000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400108000000ebaa55"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 13m53.833854412s ago: executing program 4 (id=716): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000180000000000feffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99f1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x541e, &(0x7f00000002c0)) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x21) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x80503d0a, &(0x7f0000000380)={0x5}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0xffff, 0x8c181) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f0000000100)={0x0, 0x90e, 0x0, '\x00', 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x5) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x2d8}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0xf5, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 13m53.502169319s ago: executing program 0 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)='hfsplus\x00', 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x13, 0xffffffffffffffff, 0x100000000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) openat$autofs(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x18, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@generic={0x38, 0xd, 0x3, 0x2, 0x48}, @alu={0x4, 0x1, 0x7, 0x9, 0x5, 0x3c, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}]}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000440), 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001900)={0x0, 0x0, 0x9, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff], &(0x7f0000001980)=[{0x0, 0x1, 0x2, 0x2}], 0x10, 0x1}, 0x94) r4 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x30000000}) madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x210002, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=r5, 0x9, 0x1, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 13m50.532313603s ago: executing program 4 (id=718): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket(0x1e, 0xa, 0x4) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) io_uring_setup(0x66a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414", 0x11) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000200000000000000002000004000000011f0000000c000c400000000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000240)=""/12, &(0x7f0000000340)=0xc) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) sendfile(r3, r4, 0x0, 0x20000023896) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000003380)={0x2020}, 0x2020) 13m50.072495633s ago: executing program 3 (id=719): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805) r0 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xffffff64, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m49.602783886s ago: executing program 3 (id=720): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x4000000000000ffc, 0x0, 0x0, 0x1f, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "80523e719468ac75f270b4ecff0000004380224d000000000001ff00", [0x5, 0x9]}}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="0000010000000000c72a8d8c000000", 0xf, 0xfffffffffffffffe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x402, 0x0) r5 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r5}) ptrace$pokeuser(0x6, r5, 0xff, 0x9) sendfile(r4, r4, 0x0, 0x23d1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x801, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000900)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0', 0x3a, [0x8df32e9dbe2ae471, 0x43, 0x9, 0x50]}, 0x260) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r6, r0}, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x4ce, [{{0x9, 0x2, 0x48}}]}}, 0x0) 13m49.537926293s ago: executing program 0 (id=721): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002, 0x18}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x99) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) r0 = socket$igmp(0x2, 0x3, 0x2) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x80e003, 0x0) pipe(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x40, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x8) mknod(&(0x7f0000000080)='./tracing/events/enable\x00', 0x1000, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) write(r1, 0x0, 0xfe31) 13m48.682594026s ago: executing program 2 (id=722): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x4000000000000ffc, 0x0, 0x0, 0x1f, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "80523e719468ac75f270b4ecff0000004380224d000000000001ff00", [0x5, 0x9]}}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="0000010000000000c72a8d8c000000", 0xf, 0xfffffffffffffffe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x402, 0x0) r5 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r5}) ptrace$pokeuser(0x6, r5, 0xff, 0x9) sendfile(r4, r4, 0x0, 0x23d1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x801, 0x0) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000900)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0', 0x3a, [0x8df32e9dbe2ae471, 0x43, 0x9, 0x50]}, 0x260) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r7, r0}, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x4ce, [{{0x9, 0x2, 0x48}}]}}, 0x0) 13m48.675895649s ago: executing program 4 (id=723): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone3(&(0x7f0000000080)={0x2a694b000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) vmsplice(r0, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$kcm(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 13m47.345254684s ago: executing program 4 (id=724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)='hfsplus\x00', 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x13, 0xffffffffffffffff, 0x100000000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) openat$autofs(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x18, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@generic={0x38, 0xd, 0x3, 0x2, 0x48}, @alu={0x4, 0x1, 0x7, 0x9, 0x5, 0x3c, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}]}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000440), 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001900)={0x0, 0x0, 0x9, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff], &(0x7f0000001980)=[{0x0, 0x1, 0x2, 0x2}], 0x10, 0x1}, 0x94) r4 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x30000000}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000) mount$9p_fd(0x0, 0x0, 0x0, 0x210002, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=r6, 0x9, 0x1, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 13m27.189177101s ago: executing program 33 (id=721): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002, 0x18}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x99) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) r0 = socket$igmp(0x2, 0x3, 0x2) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x80e003, 0x0) pipe(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x40, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x8) mknod(&(0x7f0000000080)='./tracing/events/enable\x00', 0x1000, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) write(r1, 0x0, 0xfe31) 13m27.011147247s ago: executing program 34 (id=722): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x4000000000000ffc, 0x0, 0x0, 0x1f, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "80523e719468ac75f270b4ecff0000004380224d000000000001ff00", [0x5, 0x9]}}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="0000010000000000c72a8d8c000000", 0xf, 0xfffffffffffffffe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x402, 0x0) r5 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r5}) ptrace$pokeuser(0x6, r5, 0xff, 0x9) sendfile(r4, r4, 0x0, 0x23d1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x801, 0x0) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000900)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0', 0x3a, [0x8df32e9dbe2ae471, 0x43, 0x9, 0x50]}, 0x260) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r7, r0}, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x4ce, [{{0x9, 0x2, 0x48}}]}}, 0x0) 13m26.729651409s ago: executing program 35 (id=720): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x4000000000000ffc, 0x0, 0x0, 0x1f, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "80523e719468ac75f270b4ecff0000004380224d000000000001ff00", [0x5, 0x9]}}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="0000010000000000c72a8d8c000000", 0xf, 0xfffffffffffffffe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x402, 0x0) r5 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r5}) ptrace$pokeuser(0x6, r5, 0xff, 0x9) sendfile(r4, r4, 0x0, 0x23d1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x801, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000900)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0', 0x3a, [0x8df32e9dbe2ae471, 0x43, 0x9, 0x50]}, 0x260) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r6, r0}, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x4ce, [{{0x9, 0x2, 0x48}}]}}, 0x0) 13m26.442051463s ago: executing program 36 (id=724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)='hfsplus\x00', 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x13, 0xffffffffffffffff, 0x100000000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) openat$autofs(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x18, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@generic={0x38, 0xd, 0x3, 0x2, 0x48}, @alu={0x4, 0x1, 0x7, 0x9, 0x5, 0x3c, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}]}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000440), 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001900)={0x0, 0x0, 0x9, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff], &(0x7f0000001980)=[{0x0, 0x1, 0x2, 0x2}], 0x10, 0x1}, 0x94) r4 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x30000000}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000) mount$9p_fd(0x0, 0x0, 0x0, 0x210002, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=r6, 0x9, 0x1, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 8m4.203049996s ago: executing program 8 (id=1230): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() setrlimit(0xa, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xcc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xf}, 0x6e) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x0, 0x0, &(0x7f0000000040)=0xffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000300), 0x6}, 0x38) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000364fcdd5ade720b651", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 8m2.956312506s ago: executing program 8 (id=1232): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, 0x0, 0x20044082) r2 = getpid() socket$packet(0x11, 0x3, 0x300) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ptrace$peekuser(0x3, r2, 0x8000000000000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7m56.44249788s ago: executing program 8 (id=1250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8fc, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101002, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x83, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101003, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) file_getattr(r0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0), 0x18, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000"], 0x54}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) 7m54.908638486s ago: executing program 8 (id=1254): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') readv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000380)=""/255, 0xff}], 0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8, 0x1, 0x2}) keyctl$clear(0x7, 0x0) preadv(r0, &(0x7f0000000000), 0x0, 0x7fff, 0x0) 7m54.220690596s ago: executing program 8 (id=1256): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) io_uring_setup(0xbfc, &(0x7f0000000000)={0x0, 0x8ee7, 0x1, 0x1, 0x2b2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x26}, 0x20) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r3) (async) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x40, 0x1, 0x0, 0xfffffc00}, {0x6, 0x0, 0x0, 0x2000000}]}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x40, 0x1, 0x0, 0xfffffc00}, {0x6, 0x0, 0x0, 0x2000000}]}) ioctl$TUNGETVNETLE(r3, 0x40107446, &(0x7f0000000180)) (async) ioctl$TUNGETVNETLE(r3, 0x40107446, &(0x7f0000000180)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000010000/0x1000)=nil) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000000c000/0x13000)=nil, 0x13000, 0x3000, 0x3, &(0x7f0000bde000/0x3000)=nil) 7m50.339849653s ago: executing program 8 (id=1264): socket(0x10, 0x803, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000140)={0x2001, 0x1, 0x3, 0x9, 0x4}) close(0x3) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x8000, &(0x7f0000000240)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000200)={0x158, 0x4, 0x0, {0x7, 0x6}, 0x5, 0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r6, &(0x7f00000045c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x3}, 0xe) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xe) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}}}, 0x10) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="400b008080fd0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYBLOB="4941647cb398ad70ba90aae6581b1188d91612a65edefdfa6b52fbe2d652ba8b4fa5e506f9cf13c80061415ec74af0e2d5ca9a0e29a6286558f780d249cc523cffad2f808a5cba8918b0fb7d9844fafcdbc1402cc3d4c71f91af33c375dbaa1750b85b3168db12dcdb799d745315a3bac54363bea1b7bdaf64d04e5d8d41f15fb6fdd70a33d0f27996fd18b0f8945a4a74a6e8009a84892ae4721348cdd31de21dd3c527714e7a188e5c3711a94af364dc4bd9a1132c996f58fe2104e4e4e079f53437f944812080288c0d45ca73aace534cd6808378ff0670fc56f8ef4d21047a0f877e16d7b621fc72333b", @ANYRES8=r6, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) socket$unix(0x1, 0x1, 0x0) 7m34.902296961s ago: executing program 37 (id=1264): socket(0x10, 0x803, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000140)={0x2001, 0x1, 0x3, 0x9, 0x4}) close(0x3) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x8000, &(0x7f0000000240)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000200)={0x158, 0x4, 0x0, {0x7, 0x6}, 0x5, 0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r6, &(0x7f00000045c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x3}, 0xe) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xe) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}}}, 0x10) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="400b008080fd0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYBLOB="4941647cb398ad70ba90aae6581b1188d91612a65edefdfa6b52fbe2d652ba8b4fa5e506f9cf13c80061415ec74af0e2d5ca9a0e29a6286558f780d249cc523cffad2f808a5cba8918b0fb7d9844fafcdbc1402cc3d4c71f91af33c375dbaa1750b85b3168db12dcdb799d745315a3bac54363bea1b7bdaf64d04e5d8d41f15fb6fdd70a33d0f27996fd18b0f8945a4a74a6e8009a84892ae4721348cdd31de21dd3c527714e7a188e5c3711a94af364dc4bd9a1132c996f58fe2104e4e4e079f53437f944812080288c0d45ca73aace534cd6808378ff0670fc56f8ef4d21047a0f877e16d7b621fc72333b", @ANYRES8=r6, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) socket$unix(0x1, 0x1, 0x0) 1m33.748066956s ago: executing program 9 (id=1841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) clock_nanosleep(0x2, 0x0, &(0x7f0000000140), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008080) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) timer_create(0x1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a3100000000050004000000000016000300686173683a6e65742c706f72742c6e65740000000c0007800500150023000000050005000a00000005000100060000007512ba72382d00412c79017ef88763c3a7c896cf84a324c9e08d207b9fd758736b20041301408e0666c2261ee19752bc"], 0x5c}}, 0x90) 1m28.688725365s ago: executing program 9 (id=1849): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) creat(&(0x7f0000000000)='./file0\x00', 0x40) listen(r1, 0x9) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r5, 0x2, 0x81, &(0x7f0000000280)='Z\x00\x00', 0x3) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x81}, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200)={0x8}, 0x1) 1m23.696042187s ago: executing program 9 (id=1851): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r0) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x45) r1 = inotify_init() socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f0000005280), 0x4000000000001cd, 0x1008c811) close_range(r1, 0xffffffffffffffff, 0x0) 1m21.131952362s ago: executing program 9 (id=1856): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m15.121939652s ago: executing program 7 (id=1861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)='hfsplus\x00', 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x13, 0xffffffffffffffff, 0x100000000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) openat$autofs(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x18, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@generic={0x38, 0xd, 0x3, 0x2, 0x48}, @alu={0x4, 0x1, 0x7, 0x9, 0x5, 0x3c, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}]}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000440), 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001900)={0x0, 0x0, 0x9, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff], &(0x7f0000001980)=[{0x0, 0x1, 0x2, 0x2}], 0x10, 0x1}, 0x94) r4 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x30000000}) madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000) mount$9p_fd(0x0, 0x0, 0x0, 0x210002, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=r6, 0x9, 0x1, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1m14.896302271s ago: executing program 9 (id=1862): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x4, 0xd, 0x0, 0x0, 0x0, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 1m8.855262975s ago: executing program 9 (id=1864): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) fcntl$notify(r0, 0x402, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='gid_map\x00') copy_file_range(r1, 0x0, r1, &(0x7f0000000080)=0xfffffffffffffff7, 0x8, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r4 = fcntl$dupfd(r3, 0x0, r3) write$FUSE_ATTR(r4, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x7fffffff, 0xfffffffc, 0x0, {0x800000002, 0xa, 0xfffffffffffffffb, 0x40, 0x6, 0x6, 0x757, 0x2, 0x8, 0x0, 0x0, 0xee00, 0x0, 0x0, 0x223b8fb9}}}, 0x78) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x3f}], 0x1) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x3}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) r7 = gettid() r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r8, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) rt_sigqueueinfo(r7, 0x21, &(0x7f0000000180)={0x33, 0x40000021, 0xfffffffb}) socket$tipc(0x1e, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/bus/input/devices\x00', 0x1800, 0x0) unshare(0x20000400) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x800) inotify_init1(0x800) 1m2.21761456s ago: executing program 7 (id=1868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) 1m1.118999896s ago: executing program 7 (id=1869): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000007000000000000000104000091114b00c1c886bf9500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000040)=0x80000000, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="c4000000190001000000000008000000ac1414bb0000000000000000000000000000000000000000000000000000000080001000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000f818ffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000100000000000a00100001000000000000008c0a4fe632206b796da9189eb7c8c40736bbbccc8bcd8638b3e5467a6529f8051976b9efe0aa054bdf00"/165], 0xc4}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) read(r1, 0x0, 0x6b) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0}) 54.741796674s ago: executing program 7 (id=1873): socket$inet(0x2, 0xa, 0x7) fsopen(&(0x7f0000000000)='ceph\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004280)=ANY=[@ANYBLOB="0500000001000000a003000002"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1, @ANYRESOCT=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 53.30891242s ago: executing program 38 (id=1864): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) fcntl$notify(r0, 0x402, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='gid_map\x00') copy_file_range(r1, 0x0, r1, &(0x7f0000000080)=0xfffffffffffffff7, 0x8, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r4 = fcntl$dupfd(r3, 0x0, r3) write$FUSE_ATTR(r4, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x7fffffff, 0xfffffffc, 0x0, {0x800000002, 0xa, 0xfffffffffffffffb, 0x40, 0x6, 0x6, 0x757, 0x2, 0x8, 0x0, 0x0, 0xee00, 0x0, 0x0, 0x223b8fb9}}}, 0x78) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x3f}], 0x1) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x3}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) r7 = gettid() r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r8, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) rt_sigqueueinfo(r7, 0x21, &(0x7f0000000180)={0x33, 0x40000021, 0xfffffffb}) socket$tipc(0x1e, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/bus/input/devices\x00', 0x1800, 0x0) unshare(0x20000400) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x800) inotify_init1(0x800) 49.880337813s ago: executing program 7 (id=1878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) clock_nanosleep(0x2, 0x0, &(0x7f0000000140), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24008080) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) timer_settime(0x0, 0x1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a3100000000050004000000000016000300686173683a6e65742c706f72742c6e65740000000c0007800500150023000000050005000a00000005000100060000007512ba72382d00412c79017ef88763c3a7c896cf84a324c9e08d207b9fd758736b20041301408e0666c2261ee19752bc"], 0x5c}}, 0x90) 43.734161194s ago: executing program 7 (id=1884): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048800}, 0x20000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8}}, 0x0, 0x0, 0x0, 0x4, 0x94}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0640"], 0x9) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x402, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x1, 0x4002004c4, 0xf, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010c3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r3) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000800"/18, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8004044}, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002023a5d40f934b11b05ffff9f7f01020300ee02120001bd00100209047fc700ff02c106"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x0, 0x0, 0x800}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) 31.152205243s ago: executing program 6 (id=1894): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x97, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./mnt\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') 30.152349533s ago: executing program 5 (id=1896): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ef) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x0, 0x4e) getdents64(r0, &(0x7f0000000000)=""/52, 0x34) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000090000000600000000000000", @ANYRES32, @ANYBLOB="6b00000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000300"/28], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = getpid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000240)={0x80, 0x1000, 0x1, 0x1, 0x2, 0xb}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4040) syz_pidfd_open(r2, 0x0) epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f00000001c0)='timerslack_ns\x00') exit(0x100000000000035) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x0, 0x5, 0x6}}, 0x30) sendto$packet(r1, &(0x7f0000000900)="280320000a00140000007ef506be00000000001000000000000000143baa111f1f858ce632f47142195e", 0x2a, 0x2000c010, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0xa5, 0x6, @random="00001000ed4c"}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.11713999s ago: executing program 6 (id=1897): r0 = socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000100)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f0000000140)={{0x8, 0x3, &(0x7f0000000080)=[{0x44, 0x0, 0x3ff}, {0x81, 0x0, 0x7}, {0x77, 0x0, 0x1}]}, 0x8, 0x9, 0xf, 0x3, 0x0, 0x8, 0x9fa5f3a, 0x9, r2}) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 28.422334291s ago: executing program 39 (id=1884): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048800}, 0x20000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8}}, 0x0, 0x0, 0x0, 0x4, 0x94}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0640"], 0x9) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x402, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x1, 0x4002004c4, 0xf, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010c3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r3) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000800"/18, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8004044}, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002023a5d40f934b11b05ffff9f7f01020300ee02120001bd00100209047fc700ff02c106"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x0, 0x0, 0x800}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) 27.400491021s ago: executing program 6 (id=1899): socket(0x10, 0x803, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000140)={0x2001, 0x1, 0x3, 0x9, 0x4}) close(0x3) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x6004c060) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000200)={0x158, 0x4, 0x0, {0x7, 0x6}, 0x5, 0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r6, &(0x7f00000045c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x3}, 0xe) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xe) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}}}, 0x10) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, 0x0) getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f00000003c0)=""/184, &(0x7f0000000580)=0xb8) syz_usb_control_io(r7, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="400b008080fd0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYBLOB="4941647cb398ad70ba90aae6581b1188d91612a65edefdfa6b52fbe2d652ba8b4fa5e506f9cf13c80061415ec74af0e2d5ca9a0e29a6286558f780d249cc523cffad2f808a5cba8918b0fb7d9844fafcdbc1402cc3d4c71f91af33c375dbaa1750b85b3168db12dcdb799d745315a3bac54363bea1b7bdaf64d04e5d8d41f15fb6fdd70a33d0f27996fd18b0f8945a4a74a6e8009a84892ae4721348cdd31de21dd3c527714e7a188e5c3711a94af364dc4bd9a1132c996f58fe2104e4e4e079f53437f944812080288c0d45ca73aace534cd6808378ff0670fc56f8ef4d21047a0f877e16d7b621fc72333b", @ANYRES8=r6, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85) socket$unix(0x1, 0x1, 0x0) 26.322018079s ago: executing program 5 (id=1900): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000000c0)="bbfe55f19a7230739eea07d071dc775dd9e4a7ca65c58b8c1d06c2b160c3482c9bbdd88024", 0x25}, {&(0x7f00000008c0)="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", 0x1000}], 0x2, &(0x7f0000001900)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30, 0x8851}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@op={0x18}, @iv={0x88, 0x117, 0x2, 0x74, "ebc0a18f6cbca133e13358358de97e78ad2d511c1b9888b8179601b78571e6be4284a5f5e500f5e13b9cdafc630c3b2e03142685c1c6bbd42cef223b3abad178799c76c28d843dcd64a958afda5474d22d3a244e4f79542f887505ce16344743098e6341dae9b44d4f7a5c70f970455d309e4e8f"}, @iv={0x18, 0x117, 0x2, 0x2, '?>'}, @assoc={0x18, 0x117, 0x4, 0x3ff}], 0xd0, 0x4000001}], 0x2, 0x4008000) 24.045656223s ago: executing program 5 (id=1901): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d030037250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x4924924924925b9, 0x8001) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffff12, 0x0, 0x12345}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x1, @tid=r6}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r8, 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0102, 0x10a) flock(r9, 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) flock(r10, 0x1) r11 = socket$key(0xf, 0x3, 0x2) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000040)={0x1f, 0xffff, 0x4}, 0x6) write(r12, &(0x7f0000000340)='#\x00\x00\x00', 0x4) sendmsg$key(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x10001) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 23.101121014s ago: executing program 6 (id=1902): socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x4c80, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@my=0x0}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0x20000020064e, 0xe, 0x200000, 0x3, 0x5, 0x9}) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 19.146081478s ago: executing program 5 (id=1903): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000380), &(0x7f00000000c0)=r1}, 0x20) 19.145384778s ago: executing program 5 (id=1904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) 18.374091836s ago: executing program 6 (id=1905): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 17.29835898s ago: executing program 6 (id=1906): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'dvmrp1\x00', 0x2000}) unshare(0x6020400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_DST={0x8, 0x1, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r2, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000000100)}, 0x46) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000180)) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @local, 0x5}}}, 0x108) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r8 = dup(r5) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r3, &(0x7f0000000400)="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"}, 0x3e) 15.565990639s ago: executing program 5 (id=1907): unshare(0x28000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) unshare(0x40000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0x8430}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0xb, &(0x7f00000000c0)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) 1.508332294s ago: executing program 40 (id=1906): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'dvmrp1\x00', 0x2000}) unshare(0x6020400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_DST={0x8, 0x1, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r2, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000000100)}, 0x46) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000180)) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @local, 0x5}}}, 0x108) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r8 = dup(r5) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r3, &(0x7f0000000400)="b71767351a792eb71d5eb4cc7dc12f0b7e5ad57c9777591058aded8394c8356a93771bf6ae4c7079146aefd435b1097c59eab0e82612bc9f56293f570d0c0955570e851f2495c4286348621e7cef417510a4f0844b9d4bd506044a5d315118ade989bc4605fabeef482b4e4e4819792acf2ca88395ba48a67d01404e1d7ca893d9a33181299c83a3c3d002b18e87159138314d52a7ddde872470fbfc5dca3268223f68674d2766eb5176cc7ed7852f8e37a5f244c600db5501fb90d202c2a91a002908cdafaa1ae209407075891c654983fc393f86745639833263b14ccf65f3dbd827d7a33b40384603749dc6d0a11d8945570ed2db65a327b00e507d55cabb885fcb67f9c5b591f8cfadf0050ec1bd"}, 0x3e) 0s ago: executing program 41 (id=1907): unshare(0x28000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) unshare(0x40000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0x8430}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0xb, &(0x7f00000000c0)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) kernel console output (not intermixed with test programs): code=0x7ffc0000 [ 1247.661037][T14465] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1748'. [ 1249.828144][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1249.844112][T14476] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1752'. [ 1249.903869][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1249.928314][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1249.943616][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1249.962663][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1252.177432][ T5606] Bluetooth: hci3: command tx timeout [ 1253.128137][T14523] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1763'. [ 1254.271452][ T5606] Bluetooth: hci3: command tx timeout [ 1256.900213][ T5606] Bluetooth: hci3: command tx timeout [ 1257.097361][ T5729] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1257.258352][ T5729] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1257.262128][ T5729] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1257.262199][ T5729] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1257.262274][ T5729] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1257.280025][ T5729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.280112][ T5729] usb 7-1: Product: syz [ 1257.280158][ T5729] usb 7-1: Manufacturer: syz [ 1257.280203][ T5729] usb 7-1: SerialNumber: syz [ 1257.386208][ T5729] usb 7-1: config 0 descriptor?? [ 1257.395742][T14534] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1257.397075][T14534] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1257.415907][ T5729] usb 7-1: ucan: probing device on interface #0 [ 1257.823943][ T5729] usb 7-1: ucan: device reported invalid device info [ 1257.824022][ T5729] usb 7-1: ucan: probe failed; try to update the device firmware [ 1258.066049][ T5603] usb 7-1: USB disconnect, device number 41 [ 1258.085875][ T9929] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.977378][ T5606] Bluetooth: hci3: command tx timeout [ 1259.129970][T14577] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1774'. [ 1259.205588][T14580] FAULT_INJECTION: forcing a failure. [ 1259.205588][T14580] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.206267][T14580] CPU: 1 UID: 0 PID: 14580 Comm: syz.5.1773 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1259.206355][T14580] Tainted: [L]=SOFTLOCKUP [ 1259.206384][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1259.206419][T14580] Call Trace: [ 1259.206449][T14580] [ 1259.206472][T14580] dump_stack_lvl+0xe8/0x150 [ 1259.206574][T14580] should_fail_ex+0x46b/0x600 [ 1259.206659][T14580] should_failslab+0xa8/0x100 [ 1259.206750][T14580] ? alloc_empty_file+0x5b/0x1d0 [ 1259.206837][T14580] kmem_cache_alloc_noprof+0x9e/0x690 [ 1259.206913][T14580] ? alloc_empty_file+0x5b/0x1d0 [ 1259.207011][T14580] alloc_empty_file+0x5b/0x1d0 [ 1259.207104][T14580] alloc_file_pseudo+0x115/0x1e0 [ 1259.207150][T14580] ? rt_spin_unlock+0x165/0x200 [ 1259.207194][T14580] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1259.207225][T14580] ? alloc_fd+0x654/0x6d0 [ 1259.207269][T14580] anon_inode_getfd+0xc8/0x200 [ 1259.207313][T14580] __se_sys_fsopen+0x232/0x2c0 [ 1259.207417][T14580] do_syscall_64+0x166/0x520 [ 1259.207489][T14580] ? trace_irq_disable+0x3b/0x140 [ 1259.207564][T14580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.207628][T14580] ? clear_bhb_loop+0x70/0xc0 [ 1259.207705][T14580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.207768][T14580] RIP: 0033:0x7feb1778e159 [ 1259.207831][T14580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.207877][T14580] RSP: 002b:00007feb159e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1259.207941][T14580] RAX: ffffffffffffffda RBX: 00007feb17a15fa0 RCX: 00007feb1778e159 [ 1259.207984][T14580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 1259.208026][T14580] RBP: 00007feb159e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.208067][T14580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.208107][T14580] R13: 00007feb17a16038 R14: 00007feb17a15fa0 R15: 00007fff18e86278 [ 1259.208194][T14580] [ 1259.776193][ T9929] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.811589][T14586] netlink: 'syz.5.1776': attribute type 17 has an invalid length. [ 1259.811687][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1776'. [ 1260.134734][T14586] bond0: option all_slaves_active: invalid value (48) [ 1261.745691][T14633] FAULT_INJECTION: forcing a failure. [ 1261.745691][T14633] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.764451][T14633] CPU: 0 UID: 60929 PID: 14633 Comm: syz.7.1781 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1261.764492][T14633] Tainted: [L]=SOFTLOCKUP [ 1261.764504][T14633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1261.764519][T14633] Call Trace: [ 1261.764527][T14633] [ 1261.764539][T14633] dump_stack_lvl+0xe8/0x150 [ 1261.764586][T14633] should_fail_ex+0x46b/0x600 [ 1261.764618][T14633] should_failslab+0xa8/0x100 [ 1261.764653][T14633] ? security_file_alloc+0x34/0x310 [ 1261.764678][T14633] kmem_cache_alloc_noprof+0x9e/0x690 [ 1261.764706][T14633] ? rcu_is_watching+0x16/0xb0 [ 1261.764738][T14633] ? security_file_alloc+0x34/0x310 [ 1261.764761][T14633] ? alloc_empty_file+0x5b/0x1d0 [ 1261.764797][T14633] security_file_alloc+0x34/0x310 [ 1261.764822][T14633] init_file+0x96/0x2d0 [ 1261.764857][T14633] alloc_empty_file+0x74/0x1d0 [ 1261.764894][T14633] alloc_file_pseudo+0x115/0x1e0 [ 1261.764931][T14633] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1261.764976][T14633] __anon_inode_getfile+0x129/0x210 [ 1261.765015][T14633] io_uring_create+0x57f/0x990 [ 1261.765045][T14633] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1261.765080][T14633] ? key_fsuid_changed+0xb3/0x100 [ 1261.765157][T14633] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1261.765206][T14633] ? rcu_is_watching+0x16/0xb0 [ 1261.765253][T14633] do_syscall_64+0x166/0x520 [ 1261.765280][T14633] ? trace_irq_disable+0x3b/0x140 [ 1261.765310][T14633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.765335][T14633] ? clear_bhb_loop+0x70/0xc0 [ 1261.765364][T14633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.765388][T14633] RIP: 0033:0x7f4e2696e159 [ 1261.765411][T14633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.765433][T14633] RSP: 002b:00007f4e24bc6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1261.765460][T14633] RAX: ffffffffffffffda RBX: 00007f4e26bf5fa0 RCX: 00007f4e2696e159 [ 1261.765478][T14633] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000001b7b [ 1261.765495][T14633] RBP: 00007f4e26a05024 R08: 0000000000000000 R09: 0000000000000000 [ 1261.765510][T14633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1261.765525][T14633] R13: 00007f4e26bf6038 R14: 00007f4e26bf5fa0 R15: 00007ffd4467bcf8 [ 1261.765569][T14633] [ 1261.992866][T14635] openvswitch: netlink: Message has 9744 unknown bytes. [ 1261.993028][T14635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1262.465147][ T9929] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.769884][T14657] netlink: 9 bytes leftover after parsing attributes in process `syz.9.1788'. [ 1262.779579][T14656] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1262.835812][T14652] bridge1: entered promiscuous mode [ 1262.835844][T14652] bridge1: entered allmulticast mode [ 1262.877900][T14657] netlink: 9 bytes leftover after parsing attributes in process `syz.9.1788'. [ 1265.067373][ T7973] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1265.240685][ T7973] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1265.261917][ T7973] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1265.270674][ T7973] usb 6-1: Product: syz [ 1265.298106][ T7973] usb 6-1: config 0 descriptor?? [ 1265.314753][ T7973] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1265.330374][ T7973] usb 6-1: Detected FT232H [ 1265.594078][ T7973] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1265.637684][ T5803] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 1265.663073][ T9929] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.824157][ T7973] ftdi_sio 6-1:0.0: GPIO initialisation failed: -5 [ 1265.887851][ T7973] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1265.918189][ T5803] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1265.929355][ T5803] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.937670][ T5803] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1265.937738][ T5803] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.969267][ T5803] usb 10-1: config 0 descriptor?? [ 1265.978487][T14470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.979602][T14470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.980230][T14470] bridge_slave_0: entered allmulticast mode [ 1266.024056][T14470] bridge_slave_0: entered promiscuous mode [ 1266.033238][ T5803] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1266.041734][ T5803] dvb-usb: bulk message failed: -22 (3/0) [ 1266.060563][T14665] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1790'. [ 1266.139933][T14470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.140693][T14470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.141315][T14470] bridge_slave_1: entered allmulticast mode [ 1266.161521][ T5803] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1266.172730][ T5803] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1266.172798][ T5803] usb 10-1: media controller created [ 1266.176383][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1266.217099][T14470] bridge_slave_1: entered promiscuous mode [ 1266.245549][ T5803] dvb-usb: bulk message failed: -22 (6/0) [ 1266.253221][ T5803] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1266.299774][ T5803] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input33 [ 1266.365610][ T5803] dvb-usb: schedule remote query interval to 150 msecs. [ 1266.374314][ T5803] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1266.532419][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1266.557462][ T5803] dvb-usb: error while querying for an remote control event. [ 1266.673967][T14470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.709673][T14470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1266.719008][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1266.719049][ T5803] dvb-usb: error while querying for an remote control event. [ 1266.877449][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1266.883373][ T5803] dvb-usb: error while querying for an remote control event. [ 1266.947772][T14470] team0: Port device team_slave_0 added [ 1266.964405][T14470] team0: Port device team_slave_1 added [ 1267.037320][ T1237] dvb-usb: bulk message failed: -22 (1/0) [ 1267.043335][ T1237] dvb-usb: error while querying for an remote control event. [ 1267.197319][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1267.203363][ T5847] dvb-usb: error while querying for an remote control event. [ 1267.459347][ T1237] dvb-usb: bulk message failed: -22 (1/0) [ 1267.459390][ T1237] dvb-usb: error while querying for an remote control event. [ 1267.494924][T14470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1267.495022][T14470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.495309][T14470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1267.545958][T14470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1267.545983][T14470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.546015][T14470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.617464][ T1237] dvb-usb: bulk message failed: -22 (1/0) [ 1267.623401][ T1237] dvb-usb: error while querying for an remote control event. [ 1267.777522][ T1237] dvb-usb: bulk message failed: -22 (1/0) [ 1267.788297][ T1237] dvb-usb: error while querying for an remote control event. [ 1267.817002][ T5729] usb 6-1: USB disconnect, device number 47 [ 1267.892567][ T5729] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1267.911618][ T5729] ftdi_sio 6-1:0.0: device disconnected [ 1267.947355][ T1237] dvb-usb: bulk message failed: -22 (1/0) [ 1267.953315][ T1237] dvb-usb: error while querying for an remote control event. [ 1268.117811][ T1237] dvb-usb: bulk message failed: -22 (1/0) [ 1268.123907][ T1237] dvb-usb: error while querying for an remote control event. [ 1268.185444][T14470] hsr_slave_0: entered promiscuous mode [ 1268.193937][T14470] hsr_slave_1: entered promiscuous mode [ 1268.196505][T14470] debugfs: 'hsr0' already exists in 'hsr' [ 1268.196534][T14470] Cannot create hsr debugfs directory [ 1268.287770][ T1237] dvb-usb: bulk message failed: -22 (1/0) [ 1268.287836][ T1237] dvb-usb: error while querying for an remote control event. [ 1268.359713][ T37] kauditd_printk_skb: 163 callbacks suppressed [ 1268.359809][ T37] audit: type=1326 audit(1788267402.391:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.5.1795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1778e159 code=0x7ffc0000 [ 1268.378678][ T37] audit: type=1326 audit(1788267402.411:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.5.1795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1778e159 code=0x7ffc0000 [ 1268.378904][ T37] audit: type=1326 audit(1788267402.411:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.5.1795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1778e159 code=0x7ffc0000 [ 1268.430772][ T37] audit: type=1326 audit(1788267402.461:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.5.1795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1778e159 code=0x7ffc0000 [ 1268.433150][ T37] audit: type=1326 audit(1788267402.461:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.5.1795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb1778dec2 code=0x7ffc0000 [ 1268.441121][ T37] audit: type=1326 audit(1788267402.461:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.5.1795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7feb1778df57 code=0x7ffc0000 [ 1268.447276][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1268.447308][ T5803] dvb-usb: error while querying for an remote control event. [ 1268.476730][ T37] audit: type=1326 audit(1788267402.481:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.5.1795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7feb1774ae51 code=0x7ffc0000 [ 1268.486298][ T37] audit: type=1326 audit(1788267402.511:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.5.1795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7feb1778ef49 code=0x7ffc0000 [ 1268.502064][ T37] audit: type=1326 audit(1788267402.521:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.5.1795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7feb1774a5ac code=0x7ffc0000 [ 1268.503819][ T37] audit: type=1326 audit(1788267402.391:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.5.1795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1778e159 code=0x7ffc0000 [ 1268.607368][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1268.607404][ T5803] dvb-usb: error while querying for an remote control event. [ 1268.745367][T14677] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1795'. [ 1268.774964][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1268.775045][ T5803] dvb-usb: error while querying for an remote control event. [ 1268.937794][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1268.945882][ T5803] dvb-usb: error while querying for an remote control event. [ 1269.097315][ T1237] dvb-usb: bulk message failed: -22 (1/0) [ 1269.097406][ T1237] dvb-usb: error while querying for an remote control event. [ 1269.106343][ T121] usb 10-1: USB disconnect, device number 40 [ 1269.559677][ T121] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1269.658493][T14682] nvme_fabrics: missing parameter 'host_traddr=%s' [ 1269.957725][ T9929] bridge_slave_1: left allmulticast mode [ 1269.957826][ T9929] bridge_slave_1: left promiscuous mode [ 1269.958423][ T9929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.981391][ T121] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1270.040718][T14693] openvswitch: netlink: Message has 9744 unknown bytes. [ 1270.042510][T14693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1270.110890][ T9929] bridge_slave_0: left allmulticast mode [ 1270.110994][ T9929] bridge_slave_0: left promiscuous mode [ 1270.111921][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.157356][ T121] usb 10-1: Using ep0 maxpacket: 16 [ 1270.161305][ T121] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1270.174764][ T121] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.174905][ T121] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1270.175017][ T121] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1270.175090][ T121] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1270.175154][ T121] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1270.200641][ T121] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1270.200725][ T121] usb 10-1: Manufacturer: syz [ 1270.313719][ T121] usb 10-1: config 0 descriptor?? [ 1270.857372][ T5803] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1271.018711][ T5803] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1271.033972][ T5803] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.035763][ T5803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.406590][T14695] input: syz1 as /devices/virtual/input/input34 [ 1271.452487][T14695] input: failed to attach handler leds to device input34, error: -6 [ 1272.497811][ T121] rc_core: IR keymap rc-hauppauge not found [ 1272.497892][ T121] Registered IR keymap rc-empty [ 1272.498380][ T121] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1272.517471][ T121] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1272.528349][ T9929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.554326][T14709] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1802'. [ 1272.566193][ T121] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1272.583566][ T121] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input35 [ 1272.622502][ T9929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.634107][ T121] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1272.648066][ T121] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1272.666780][ T9929] bond0 (unregistering): Released all slaves [ 1272.673030][ T121] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1272.688110][ T121] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1272.707493][ T121] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1272.727518][ T121] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1272.754228][ T121] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1272.768075][ T121] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1272.794018][ T121] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1272.807869][ T121] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1273.060646][ T121] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1273.060722][ T121] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1273.124866][ T121] usb 10-1: USB disconnect, device number 41 [ 1273.210959][ T5803] usb 7-1: USB disconnect, device number 42 [ 1273.215331][T14713] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1803'. [ 1273.377459][ T37] kauditd_printk_skb: 465 callbacks suppressed [ 1273.377485][ T37] audit: type=1326 audit(1788267407.401:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14707 comm="syz.9.1802" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0629e1e159 code=0x7ffc0000 [ 1273.993804][T14721] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1274.371626][ T121] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1275.259703][ T121] usb 10-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1275.276658][ T121] usb 10-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1275.276691][ T121] usb 10-1: Product: syz [ 1275.306861][ T121] usb 10-1: config 0 descriptor?? [ 1275.322050][ T121] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1275.348745][ T121] usb 10-1: Detected FT232H [ 1275.555868][ T121] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1276.713117][ T121] ftdi_sio 10-1:0.0: GPIO initialisation failed: -5 [ 1276.840039][ T121] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1278.994991][T14750] RDS: rds_bind could not find a transport for 24bd:7000:fc20:0:8000:0:20:0, load rds_tcp or rds_rdma? [ 1279.235003][ T5249] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1279.450039][T13419] usb 10-1: USB disconnect, device number 42 [ 1279.476423][T13419] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1279.489946][T13419] ftdi_sio 10-1:0.0: device disconnected [ 1280.126525][T14759] openvswitch: netlink: Message has 9744 unknown bytes. [ 1280.126668][T14759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1280.170171][ T9929] hsr_slave_0: left promiscuous mode [ 1280.207459][ T5803] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1280.219047][ T9929] hsr_slave_1: left promiscuous mode [ 1280.226265][ T9929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1280.226297][ T9929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1280.271437][ T9929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1280.275632][ T9929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.397651][ T5803] usb 10-1: Using ep0 maxpacket: 32 [ 1280.400331][ T5803] usb 10-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1280.413807][ T5803] usb 10-1: config 1 has an invalid interface number: 48 but max is 0 [ 1280.413836][ T5803] usb 10-1: config 1 has no interface number 0 [ 1280.413871][ T5803] usb 10-1: too many endpoints for config 1 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 1280.413901][ T5803] usb 10-1: config 1 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1280.413922][ T5803] usb 10-1: config 1 interface 48 has no altsetting 0 [ 1280.495576][ T5803] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.496665][ T5803] usb 10-1: Product: syz [ 1280.496687][ T5803] usb 10-1: Manufacturer: syz [ 1280.496706][ T5803] usb 10-1: SerialNumber: syz [ 1280.867567][ T5803] usb 10-1: palm_os_4_probe - error -110 getting connection info [ 1280.867816][ T5803] visor 10-1:1.48: Handspring Visor / Palm OS converter detected [ 1280.894063][ T5803] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1280.938470][ T5803] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1281.608739][ T9929] veth1_macvtap: left promiscuous mode [ 1281.614522][ T9929] veth0_macvtap: left promiscuous mode [ 1281.614765][ T9929] veth1_vlan: left promiscuous mode [ 1281.614914][ T9929] veth0_vlan: left promiscuous mode [ 1281.933537][T14775] netlink: 92 bytes leftover after parsing attributes in process `syz.9.1811'. [ 1283.942073][ T9929] team0 (unregistering): Port device team_slave_1 removed [ 1283.978317][ T9929] team0 (unregistering): Port device team_slave_0 removed [ 1284.169930][T14766] tipc: Started in network mode [ 1284.171500][T14766] tipc: Node identity ac14140f, cluster identity 4711 [ 1284.213267][T14766] tipc: Enabled bearer , priority 10 [ 1284.327114][ T5847] usb 10-1: USB disconnect, device number 43 [ 1284.380177][ T5847] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1284.452340][ T5847] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1284.466799][ T5847] visor 10-1:1.48: device disconnected [ 1284.527786][T14783] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1284.947295][ T5847] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1285.102510][ T5847] usb 10-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1285.119196][ T5847] usb 10-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1285.122339][ T5847] usb 10-1: Product: syz [ 1285.148142][ T5847] usb 10-1: config 0 descriptor?? [ 1285.918931][ T5847] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1285.933655][ T5847] usb 10-1: Detected FT232H [ 1285.970640][ T5803] tipc: Node number set to 2886997007 [ 1286.058009][T14793] RDS: rds_bind could not find a transport for 24bd:7000:fc20:0:8000:0:20:0, load rds_tcp or rds_rdma? [ 1286.266822][ T5847] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1286.507090][ T5847] ftdi_sio 10-1:0.0: GPIO initialisation failed: -5 [ 1286.521387][ T5847] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1288.184868][ T5847] usb 10-1: USB disconnect, device number 44 [ 1288.203023][ T5847] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1288.239089][ T5847] ftdi_sio 10-1:0.0: device disconnected [ 1288.427431][ T5803] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1288.937346][ T5803] usb 7-1: Using ep0 maxpacket: 32 [ 1288.938463][ T5803] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1288.940207][ T5803] usb 7-1: config index 0 descriptor too short (expected 27632, got 27) [ 1288.940238][ T5803] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1288.940264][ T5803] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1288.940290][ T5803] usb 7-1: config 1 has no interface number 0 [ 1288.940341][ T5803] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1288.940374][ T5803] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1288.940422][ T5803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.965963][ T5803] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1289.238047][ T5803] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 1289.575205][T14833] openvswitch: netlink: Message has 10000 unknown bytes. [ 1289.582950][T14833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1290.513241][ T5803] snd_usb_pod 7-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1290.544023][ T5847] usb 7-1: USB disconnect, device number 43 [ 1290.561897][ T5847] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1290.692386][T14833] could not allocate digest TFM handle sha3-256-generic [ 1291.290012][ T5847] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1291.470892][ T5847] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1291.479913][ T5847] usb 6-1: not running at top speed; connect to a high speed hub [ 1291.479958][ T5847] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1291.483042][ T5847] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.483070][ T5847] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1291.563453][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.571735][ T5847] usb 6-1: Product: syz [ 1291.571760][ T5847] usb 6-1: Manufacturer: syz [ 1291.571777][ T5847] usb 6-1: SerialNumber: syz [ 1292.166818][T14854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.185990][T14854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.517265][T14856] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1834'. [ 1296.743855][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1296.784372][ T5847] usb 6-1: 3:0: cannot get min/max values for control 3 (id 3) [ 1296.809572][ T5847] usb 6-1: 3:0: failed to get current value for ch 0 (-71) [ 1297.044852][T14863] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1297.070125][ T5847] usb 6-1: 3:0: cannot get min/max values for control 11 (id 3) [ 1297.304149][ T5847] usb 6-1: 3:0: cannot get min/max values for control 3 (id 3) [ 1297.380165][ T5847] usb 6-1: USB disconnect, device number 48 [ 1297.517101][T14331] udevd[14331]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1299.217679][ T5847] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1299.380357][ T5847] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1299.615649][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1299.624195][ T5847] usb 6-1: Product: syz [ 1299.664185][ T5847] usb 6-1: config 0 descriptor?? [ 1299.695993][ T5847] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1299.705830][ T5847] usb 6-1: Detected FT232H [ 1300.832719][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.832921][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.113717][ T5847] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1301.123555][ T5847] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1301.136584][ T5847] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1301.161383][ T5847] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1301.186653][ T5847] usb 6-1: USB disconnect, device number 49 [ 1301.469336][ T5847] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1301.481266][ T5847] ftdi_sio 6-1:0.0: device disconnected [ 1311.522128][T14943] loop5: detected capacity change from 0 to 7 [ 1311.608542][T14943] Dev loop5: unable to read RDB block 7 [ 1311.609428][T14943] loop5: AHDI p2 [ 1311.609455][T14943] loop5: partition table partially beyond EOD, truncated [ 1311.833014][T14962] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1852'. [ 1311.881921][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1312.764515][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1312.790592][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1312.815678][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1312.832490][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1313.025818][ T4954] Dev loop5: unable to read RDB block 7 [ 1313.025917][ T4954] loop5: AHDI p2 [ 1313.026019][ T4954] loop5: partition table partially beyond EOD, truncated [ 1313.877752][ T5729] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 1314.556314][ T5729] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1314.846448][ T5729] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.846542][ T5729] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1314.846644][ T5729] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.020613][ T5729] usb 8-1: config 0 descriptor?? [ 1315.267460][ T5606] Bluetooth: hci2: command tx timeout [ 1316.261655][ T5729] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1316.261799][ T5729] dvb-usb: bulk message failed: -22 (3/0) [ 1316.390775][ T5729] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1316.393106][ T5729] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1316.393257][ T5729] usb 8-1: media controller created [ 1316.558191][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1316.917607][ T5729] dvb-usb: bulk message failed: -22 (6/0) [ 1316.920289][ T5729] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1317.082294][ T5729] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input36 [ 1317.127098][ T5729] dvb-usb: schedule remote query interval to 150 msecs. [ 1317.127244][ T5729] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1318.055232][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1318.055344][ T5729] dvb-usb: error while querying for an remote control event. [ 1318.305932][ T5606] Bluetooth: hci2: command tx timeout [ 1318.439366][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1318.452314][ T5729] dvb-usb: error while querying for an remote control event. [ 1318.748989][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1318.762962][ T5729] dvb-usb: error while querying for an remote control event. [ 1319.827933][T13956] usb 8-1: USB disconnect, device number 43 [ 1320.041659][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1320.041771][T13419] dvb-usb: error while querying for an remote control event. [ 1320.337428][ T59] Bluetooth: hci2: command tx timeout [ 1322.417350][ T59] Bluetooth: hci2: command tx timeout [ 1327.117694][T13956] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1327.922433][T15049] kAFS: bad VL server IP address [ 1328.818023][T13419] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 1329.018314][ T37] audit: type=1326 audit(1788267463.051:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15052 comm="syz.5.1865" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1778e159 code=0x7ffc0000 [ 1329.018502][ T37] audit: type=1326 audit(1788267463.051:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15052 comm="syz.5.1865" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1778e159 code=0x7ffc0000 [ 1329.040993][T13419] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1329.189023][ T37] audit: type=1326 audit(1788267463.221:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15052 comm="syz.5.1865" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feb1778e159 code=0x7ffc0000 [ 1329.204202][ T37] audit: type=1326 audit(1788267463.221:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15052 comm="syz.5.1865" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feb1778e159 code=0x7ffc0000 [ 1329.272931][T13419] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.273023][T13419] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1329.273098][T13419] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.276970][T13419] usb 10-1: config 0 descriptor?? [ 1329.346442][T13419] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1329.347330][T13419] dvb-usb: bulk message failed: -22 (3/0) [ 1329.580897][T13419] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1329.584688][T13419] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1329.584733][T13419] usb 10-1: media controller created [ 1329.595785][T13419] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1329.635990][T13419] dvb-usb: bulk message failed: -22 (6/0) [ 1329.636173][T13419] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1329.708324][T13419] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input37 [ 1329.765661][T13419] dvb-usb: schedule remote query interval to 150 msecs. [ 1329.765689][T13419] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1329.917326][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1329.917410][T13419] dvb-usb: error while querying for an remote control event. [ 1331.361845][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1331.361942][T13419] dvb-usb: error while querying for an remote control event. [ 1331.517486][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1331.724158][ T5729] dvb-usb: error while querying for an remote control event. [ 1331.890662][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1331.890756][ T5729] dvb-usb: error while querying for an remote control event. [ 1332.697711][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 1332.697800][ T5720] dvb-usb: error while querying for an remote control event. [ 1332.858475][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1332.858603][ T5729] dvb-usb: error while querying for an remote control event. [ 1333.093434][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1333.909663][ T5729] dvb-usb: error while querying for an remote control event. [ 1334.072393][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1334.072482][ T5729] dvb-usb: error while querying for an remote control event. [ 1334.230251][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1334.230369][T13419] dvb-usb: error while querying for an remote control event. [ 1334.387930][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1334.388040][ T5729] dvb-usb: error while querying for an remote control event. [ 1334.555116][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1334.555243][ T5729] dvb-usb: error while querying for an remote control event. [ 1334.681092][T13419] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1334.709454][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1334.709565][ T5729] dvb-usb: error while querying for an remote control event. [ 1334.916114][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1334.916228][ T121] dvb-usb: error while querying for an remote control event. [ 1335.324554][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 1335.832028][T13419] usb 8-1: Using ep0 maxpacket: 32 [ 1335.848435][ T5720] dvb-usb: error while querying for an remote control event. [ 1335.941963][ T5847] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1336.248191][ T5847] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1336.374516][T13419] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1336.381468][T13376] dvb-usb: bulk message failed: -22 (1/0) [ 1336.381508][T13376] dvb-usb: error while querying for an remote control event. [ 1336.477915][T13419] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.497108][ T5847] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.508101][ T5847] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1336.508179][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.537615][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1336.537720][ T121] dvb-usb: error while querying for an remote control event. [ 1336.825858][T13376] dvb-usb: bulk message failed: -22 (1/0) [ 1336.825900][T13376] dvb-usb: error while querying for an remote control event. [ 1336.938167][ T5847] usb 7-1: config 0 descriptor?? [ 1336.990206][ T5847] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1336.990330][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 1337.056579][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1337.056689][ T121] dvb-usb: error while querying for an remote control event. [ 1337.069785][ T5847] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1337.091040][ T5847] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1337.095155][T13419] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1337.104681][ T5847] usb 7-1: media controller created [ 1337.114623][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1337.155627][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 1337.161695][ T5847] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1337.192240][ T5847] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input38 [ 1337.208706][T13376] dvb-usb: bulk message failed: -22 (1/0) [ 1337.208967][T13376] dvb-usb: error while querying for an remote control event. [ 1337.245667][ T5847] dvb-usb: schedule remote query interval to 150 msecs. [ 1337.258209][ T5847] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1337.338136][T14960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.349544][T14960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.350321][T14960] bridge_slave_0: entered allmulticast mode [ 1337.367350][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1337.367596][ T121] dvb-usb: error while querying for an remote control event. [ 1337.417351][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1337.423311][ T5847] dvb-usb: error while querying for an remote control event. [ 1337.533422][T14960] bridge_slave_0: entered promiscuous mode [ 1337.587689][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1337.587941][ T5847] dvb-usb: error while querying for an remote control event. [ 1337.748217][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1337.748319][ T5729] dvb-usb: error while querying for an remote control event. [ 1337.784599][T14960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.785753][T14960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.786003][T14960] bridge_slave_1: entered allmulticast mode [ 1337.828575][T14960] bridge_slave_1: entered promiscuous mode [ 1337.847631][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1337.853657][ T5803] dvb-usb: error while querying for an remote control event. [ 1338.667600][T15070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1869'. [ 1339.346564][T13419] gspca_nw80x: reg_r err -110 [ 1339.346868][T13419] nw80x 8-1:3.0: probe with driver nw80x failed with error -110 [ 1339.956483][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1339.956552][ T5847] dvb-usb: error while querying for an remote control event. [ 1340.075371][T13419] usb 8-1: USB disconnect, device number 44 [ 1340.124479][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1340.137307][ T5847] dvb-usb: error while querying for an remote control event. [ 1340.206559][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1340.206677][ T121] dvb-usb: error while querying for an remote control event. [ 1340.297295][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1340.299119][ T5847] dvb-usb: error while querying for an remote control event. [ 1340.398731][T14960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.434918][T14960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.457351][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1340.463375][ T5847] dvb-usb: error while querying for an remote control event. [ 1340.528045][T14960] team0: Port device team_slave_0 added [ 1340.538604][T14960] team0: Port device team_slave_1 added [ 1340.606127][T14960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1340.616859][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.616924][T14960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1340.646361][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1340.646396][ T5847] dvb-usb: error while querying for an remote control event. [ 1340.675006][T14960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.682104][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.682144][T14960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.797318][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1340.803235][ T5847] dvb-usb: error while querying for an remote control event. [ 1340.838635][T14960] hsr_slave_0: entered promiscuous mode [ 1340.846407][T14960] hsr_slave_1: entered promiscuous mode [ 1340.957439][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1340.963396][ T5847] dvb-usb: error while querying for an remote control event. [ 1341.117346][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1341.117443][ T5847] dvb-usb: error while querying for an remote control event. [ 1341.277947][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1341.283901][ T5847] dvb-usb: error while querying for an remote control event. [ 1341.309543][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1341.309605][ T121] dvb-usb: error while querying for an remote control event. [ 1341.416814][ T5729] usb 7-1: USB disconnect, device number 44 [ 1341.440626][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1341.446543][ T5847] dvb-usb: error while querying for an remote control event. [ 1341.474853][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1341.474980][T13419] dvb-usb: error while querying for an remote control event. [ 1341.627343][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1341.627467][T13419] dvb-usb: error while querying for an remote control event. [ 1341.793150][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1341.793267][T13419] dvb-usb: error while querying for an remote control event. [ 1341.931006][T15095] openvswitch: netlink: Message has 9744 unknown bytes. [ 1341.938237][T15095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1341.947636][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1341.947748][T13419] dvb-usb: error while querying for an remote control event. [ 1342.166855][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1342.176285][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1342.182851][T13419] dvb-usb: error while querying for an remote control event. [ 1342.271607][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1342.298682][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1342.313722][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1342.316146][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1342.379486][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1342.379592][T13419] dvb-usb: error while querying for an remote control event. [ 1342.451410][ T5729] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1342.537399][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1342.537687][T13419] dvb-usb: error while querying for an remote control event. [ 1342.701481][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1342.701600][T13419] dvb-usb: error while querying for an remote control event. [ 1343.234883][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1343.235014][ T5729] dvb-usb: error while querying for an remote control event. [ 1343.506116][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1343.506158][T13419] dvb-usb: error while querying for an remote control event. [ 1343.695561][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1343.695692][T13419] dvb-usb: error while querying for an remote control event. [ 1343.847474][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1343.847606][T13419] dvb-usb: error while querying for an remote control event. [ 1344.007360][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1344.007469][T13419] dvb-usb: error while querying for an remote control event. [ 1344.109898][T15106] netlink: 'syz.7.1873': attribute type 14 has an invalid length. [ 1344.118054][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1873'. [ 1344.118123][T15106] bond0: option xmit_hash_policy: invalid value (48) [ 1344.167334][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1344.167467][T13419] dvb-usb: error while querying for an remote control event. [ 1344.342543][ T9] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1344.379471][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1344.379559][T13419] dvb-usb: error while querying for an remote control event. [ 1344.607681][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1344.607830][ T5729] dvb-usb: error while querying for an remote control event. [ 1344.745875][ T5606] Bluetooth: hci3: command tx timeout [ 1344.767105][ T9] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1344.767506][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1344.767611][T13419] dvb-usb: error while querying for an remote control event. [ 1344.899224][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.901060][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1344.901132][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.928841][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1344.928967][ T121] dvb-usb: error while querying for an remote control event. [ 1344.955653][ T9] usb 6-1: config 0 descriptor?? [ 1344.983585][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1344.992431][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1345.032758][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1345.042453][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1345.051919][ T9] usb 6-1: media controller created [ 1345.062252][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1345.087441][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1345.087559][ T121] dvb-usb: error while querying for an remote control event. [ 1345.119813][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1345.125790][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1345.141114][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input39 [ 1345.155130][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1345.155156][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1345.247393][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1345.247499][ T121] dvb-usb: error while querying for an remote control event. [ 1345.307380][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1345.313346][ T9] dvb-usb: error while querying for an remote control event. [ 1345.407391][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1345.407477][ T121] dvb-usb: error while querying for an remote control event. [ 1346.735149][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1346.735240][ T121] dvb-usb: error while querying for an remote control event. [ 1346.956130][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1346.956206][ T9] dvb-usb: error while querying for an remote control event. [ 1346.956727][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1346.956792][T13419] dvb-usb: error while querying for an remote control event. [ 1346.956918][ T5606] Bluetooth: hci3: command tx timeout [ 1347.107848][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1347.120372][ T121] dvb-usb: error while querying for an remote control event. [ 1347.278928][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1347.279333][ T121] dvb-usb: error while querying for an remote control event. [ 1347.437853][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1347.445077][ T121] dvb-usb: error while querying for an remote control event. [ 1347.494303][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1347.494415][ T9] dvb-usb: error while querying for an remote control event. [ 1347.610528][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1347.610631][ T121] dvb-usb: error while querying for an remote control event. [ 1347.650827][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1347.650926][ T9] dvb-usb: error while querying for an remote control event. [ 1347.807470][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1347.807571][ T9] dvb-usb: error while querying for an remote control event. [ 1347.913144][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1347.919882][ T121] dvb-usb: error while querying for an remote control event. [ 1347.967362][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1347.967451][ T5847] dvb-usb: error while querying for an remote control event. [ 1348.078219][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1348.084162][T13419] dvb-usb: error while querying for an remote control event. [ 1348.137330][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1348.137429][ T9] dvb-usb: error while querying for an remote control event. [ 1348.174299][T15126] FAULT_INJECTION: forcing a failure. [ 1348.174299][T15126] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.219072][T15126] CPU: 0 UID: 0 PID: 15126 Comm: syz.6.1879 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1348.219109][T15126] Tainted: [L]=SOFTLOCKUP [ 1348.219119][T15126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1348.219137][T15126] Call Trace: [ 1348.219147][T15126] [ 1348.219158][T15126] dump_stack_lvl+0xe8/0x150 [ 1348.219203][T15126] should_fail_ex+0x46b/0x600 [ 1348.219239][T15126] should_failslab+0xa8/0x100 [ 1348.219274][T15126] ? skb_clone+0x212/0x3a0 [ 1348.219309][T15126] kmem_cache_alloc_noprof+0x9e/0x690 [ 1348.219341][T15126] ? skb_clone+0x212/0x3a0 [ 1348.219380][T15126] skb_clone+0x212/0x3a0 [ 1348.219419][T15126] ? dev_queue_xmit_nit+0x25c/0xac0 [ 1348.219528][T15126] dev_queue_xmit_nit+0x28d/0xac0 [ 1348.219556][T15126] ? dev_queue_xmit_nit+0x2d/0xac0 [ 1348.219595][T15126] dev_hard_start_xmit+0x1be/0x870 [ 1348.219631][T15126] ? validate_xmit_skb+0xcac/0x14f0 [ 1348.219678][T15126] __dev_queue_xmit+0x14d2/0x3880 [ 1348.219724][T15126] ? __dev_queue_xmit+0x294/0x3880 [ 1348.219773][T15126] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1348.219823][T15126] ? __copy_skb_header+0xa3/0x4a0 [ 1348.219854][T15126] ? __asan_memcpy+0x40/0x70 [ 1348.219880][T15126] ? __skb_clone+0x5c/0x6c0 [ 1348.219918][T15126] ? __skb_clone+0x449/0x6c0 [ 1348.219957][T15126] ? skb_clone+0x246/0x3a0 [ 1348.219992][T15126] __netlink_deliver_tap+0x5b4/0x860 [ 1348.220042][T15126] ? netlink_deliver_tap+0x2e/0x1b0 [ 1348.220078][T15126] netlink_deliver_tap+0x19c/0x1b0 [ 1348.220125][T15126] netlink_unicast+0x7b8/0x990 [ 1348.220169][T15126] netlink_sendmsg+0x813/0xb40 [ 1348.220203][T15126] ? lock_acquire+0x115/0x350 [ 1348.220244][T15126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1348.220282][T15126] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1348.220318][T15126] ? __fget_files+0x3a8/0x420 [ 1348.220341][T15126] ? __fget_files+0x2a/0x420 [ 1348.220366][T15126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1348.220406][T15126] sock_sendmsg_nosec+0x13a/0x180 [ 1348.220437][T15126] __sys_sendto+0x41e/0x5d0 [ 1348.220473][T15126] ? __pfx___sys_sendto+0x10/0x10 [ 1348.220533][T15126] ? __pfx_ksys_write+0x10/0x10 [ 1348.220566][T15126] __x64_sys_sendto+0xde/0x100 [ 1348.220599][T15126] do_syscall_64+0x166/0x520 [ 1348.220627][T15126] ? trace_irq_disable+0x3b/0x140 [ 1348.220656][T15126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.220681][T15126] ? clear_bhb_loop+0x70/0xc0 [ 1348.220711][T15126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.220735][T15126] RIP: 0033:0x7f8f4bf7e159 [ 1348.220758][T15126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.220779][T15126] RSP: 002b:00007f8f4a194028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1348.220805][T15126] RAX: ffffffffffffffda RBX: 00007f8f4c206180 RCX: 00007f8f4bf7e159 [ 1348.220823][T15126] RDX: 000000000000004c RSI: 0000200000000080 RDI: 0000000000000004 [ 1348.220839][T15126] RBP: 00007f8f4a194090 R08: 0000000000000000 R09: 0000000000000000 [ 1348.220855][T15126] R10: 0000000000000810 R11: 0000000000000246 R12: 0000000000000001 [ 1348.220870][T15126] R13: 00007f8f4c206218 R14: 00007f8f4c206180 R15: 00007fff13f66748 [ 1348.220909][T15126] [ 1348.237399][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1348.237433][T13419] dvb-usb: error while querying for an remote control event. [ 1348.297922][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1348.298004][ T5847] dvb-usb: error while querying for an remote control event. [ 1348.397287][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1348.397334][T13419] dvb-usb: error while querying for an remote control event. [ 1348.461617][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 1348.461722][ T5847] dvb-usb: error while querying for an remote control event. [ 1348.530749][ T5847] usb 6-1: USB disconnect, device number 50 [ 1348.557322][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1348.557355][T13419] dvb-usb: error while querying for an remote control event. [ 1348.752893][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1348.763663][T13419] dvb-usb: error while querying for an remote control event. [ 1349.064979][ T5606] Bluetooth: hci3: command tx timeout [ 1349.274795][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1349.294672][ T121] dvb-usb: error while querying for an remote control event. [ 1349.632310][ T5847] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1349.636677][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1349.636770][ T7973] dvb-usb: error while querying for an remote control event. [ 1349.993646][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1349.993760][ T5729] dvb-usb: error while querying for an remote control event. [ 1350.170868][ T9] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 1350.171563][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1350.171603][ T121] dvb-usb: error while querying for an remote control event. [ 1350.374134][ T9] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1350.385090][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.385168][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1350.385266][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.415550][ T9] usb 7-1: config 0 descriptor?? [ 1350.527260][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1350.527404][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1350.566768][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1350.583264][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1350.583454][ T9] usb 7-1: media controller created [ 1350.607540][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1351.270110][ T5606] Bluetooth: hci3: command tx timeout [ 1351.341625][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1351.346630][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1351.353704][T15137] warning: `syz.5.1883' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1351.530574][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input40 [ 1351.545648][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1351.546046][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1351.546110][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1351.573315][ T7973] dvb-usb: error while querying for an remote control event. [ 1351.700099][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1351.726163][ T5803] dvb-usb: error while querying for an remote control event. [ 1351.769357][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1351.776386][T13419] dvb-usb: error while querying for an remote control event. [ 1352.308425][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1352.314536][T13419] dvb-usb: error while querying for an remote control event. [ 1352.332892][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1352.333546][ T5803] dvb-usb: error while querying for an remote control event. [ 1352.487338][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1352.487420][ T9] dvb-usb: error while querying for an remote control event. [ 1352.648380][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1352.648420][ T5803] dvb-usb: error while querying for an remote control event. [ 1352.790075][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1352.795983][T13419] dvb-usb: error while querying for an remote control event. [ 1352.808441][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1352.808480][ T9] dvb-usb: error while querying for an remote control event. [ 1352.947316][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1352.953728][T13419] dvb-usb: error while querying for an remote control event. [ 1352.978007][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1352.978100][ T9] dvb-usb: error while querying for an remote control event. [ 1353.107321][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1353.120737][ T7973] dvb-usb: error while querying for an remote control event. [ 1353.161340][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1353.161440][ T9] dvb-usb: error while querying for an remote control event. [ 1353.277320][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1353.277362][ T7973] dvb-usb: error while querying for an remote control event. [ 1353.327386][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1353.333419][ T9] dvb-usb: error while querying for an remote control event. [ 1353.493143][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1353.499249][ T9] dvb-usb: error while querying for an remote control event. [ 1353.659933][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1353.676548][ T9] dvb-usb: error while querying for an remote control event. [ 1353.702165][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1353.717350][ T7973] dvb-usb: error while querying for an remote control event. [ 1353.829992][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1353.830101][ T5803] dvb-usb: error while querying for an remote control event. [ 1353.883445][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1353.883544][ T7973] dvb-usb: error while querying for an remote control event. [ 1353.987279][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1353.993239][ T5803] dvb-usb: error while querying for an remote control event. [ 1354.068555][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1354.068660][ T7973] dvb-usb: error while querying for an remote control event. [ 1354.139290][ T7973] usb 7-1: USB disconnect, device number 45 [ 1354.403042][T13419] dvb-usb: bulk message failed: -22 (1/0) [ 1354.407307][T13419] dvb-usb: error while querying for an remote control event. [ 1354.689583][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 1354.689695][ T5720] dvb-usb: error while querying for an remote control event. [ 1354.819547][T15153] rnbd_client L127: Can't parse path i: -93 [ 1354.830510][T15153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1354.847649][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1354.847741][ T5729] dvb-usb: error while querying for an remote control event. [ 1355.009408][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1355.009506][ T5729] dvb-usb: error while querying for an remote control event. [ 1355.167445][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1355.167538][ T5729] dvb-usb: error while querying for an remote control event. [ 1355.328597][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1355.328706][ T5729] dvb-usb: error while querying for an remote control event. [ 1355.487269][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1355.487362][ T5729] dvb-usb: error while querying for an remote control event. [ 1355.647327][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1355.647484][ T5729] dvb-usb: error while querying for an remote control event. [ 1355.807289][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1355.807380][ T5729] dvb-usb: error while querying for an remote control event. [ 1355.967295][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1355.973220][ T5729] dvb-usb: error while querying for an remote control event. [ 1356.127939][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1356.133832][ T121] dvb-usb: error while querying for an remote control event. [ 1356.293405][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1356.296158][ T121] dvb-usb: error while querying for an remote control event. [ 1356.512969][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1356.519422][ T121] dvb-usb: error while querying for an remote control event. [ 1357.358354][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1357.415677][ T121] dvb-usb: error while querying for an remote control event. [ 1357.618483][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1357.633502][ T121] dvb-usb: error while querying for an remote control event. [ 1357.982101][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1358.030308][ T121] dvb-usb: error while querying for an remote control event. [ 1358.190547][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1358.196470][ T121] dvb-usb: error while querying for an remote control event. [ 1358.250934][ T7973] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1358.829333][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1358.829442][ T121] dvb-usb: error while querying for an remote control event. [ 1359.007344][ T5847] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1359.030251][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1359.030336][ T121] dvb-usb: error while querying for an remote control event. [ 1359.187297][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1359.187396][ T121] dvb-usb: error while querying for an remote control event. [ 1359.360397][ T5847] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1359.368551][ T5847] usb 8-1: New USB device found, idVendor=34f9, idProduct=1bb1, bcdDevice=ff.05 [ 1359.392333][ T5847] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1359.399103][ T5847] usb 8-1: can't read configurations, error -61 [ 1359.486884][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1359.486984][ T121] dvb-usb: error while querying for an remote control event. [ 1359.577487][ T5847] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1359.637321][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1359.637412][ T121] dvb-usb: error while querying for an remote control event. [ 1359.797320][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1359.797403][ T121] dvb-usb: error while querying for an remote control event. [ 1359.824155][ T5847] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1359.832570][ T5847] usb 8-1: New USB device found, idVendor=34f9, idProduct=1bb1, bcdDevice=ff.05 [ 1359.836315][ T5847] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1359.836355][ T5847] usb 8-1: can't read configurations, error -61 [ 1359.881053][ T5803] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1359.891449][ T5847] usb usb8-port1: attempt power cycle [ 1359.957359][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1359.957460][ T121] dvb-usb: error while querying for an remote control event. [ 1360.027444][ T5803] usb 6-1: device descriptor read/64, error -71 [ 1360.121928][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1360.122199][ T121] dvb-usb: error while querying for an remote control event. [ 1360.292464][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1360.292479][ T5847] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1360.292574][ T7973] dvb-usb: error while querying for an remote control event. [ 1360.449287][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1360.449371][ T7973] dvb-usb: error while querying for an remote control event. [ 1360.608276][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1360.608370][ T7973] dvb-usb: error while querying for an remote control event. [ 1360.905956][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1360.906187][ T7973] dvb-usb: error while querying for an remote control event. [ 1361.057913][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1361.058182][ T7973] dvb-usb: error while querying for an remote control event. [ 1361.220332][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1361.226688][ T7973] dvb-usb: error while querying for an remote control event. [ 1361.387118][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1361.393651][ T7973] dvb-usb: error while querying for an remote control event. [ 1361.556101][ T5803] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1361.868042][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1361.874400][ T7973] dvb-usb: error while querying for an remote control event. [ 1362.027769][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1362.027907][ T7973] dvb-usb: error while querying for an remote control event. [ 1362.101146][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.109153][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.189450][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1362.195498][ T7973] dvb-usb: error while querying for an remote control event. [ 1363.616589][ T5847] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1363.616770][ T5847] usb 8-1: New USB device found, idVendor=34f9, idProduct=1bb1, bcdDevice=ff.05 [ 1363.618657][ T5847] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1363.618766][ T5847] usb 8-1: can't read configurations, error -71 [ 1363.653366][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1363.659276][ T7973] dvb-usb: error while querying for an remote control event. [ 1363.707938][ T5803] usb 6-1: device descriptor read/64, error -71 [ 1363.822650][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1363.828557][ T121] dvb-usb: error while querying for an remote control event. [ 1363.852279][ T5803] usb usb6-port1: attempt power cycle [ 1363.987428][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1363.993326][ T121] dvb-usb: error while querying for an remote control event. [ 1364.147315][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1364.153238][ T121] dvb-usb: error while querying for an remote control event. [ 1364.308117][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1364.320158][ T121] dvb-usb: error while querying for an remote control event. [ 1364.488218][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1364.495298][ T121] dvb-usb: error while querying for an remote control event. [ 1364.657545][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1364.663484][ T7973] dvb-usb: error while querying for an remote control event. [ 1364.900377][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1364.906589][ T7973] dvb-usb: error while querying for an remote control event. [ 1365.058890][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1365.064823][ T7973] dvb-usb: error while querying for an remote control event. [ 1365.268219][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1365.268314][ T5729] dvb-usb: error while querying for an remote control event. [ 1365.433280][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1365.441690][ T5729] dvb-usb: error while querying for an remote control event. [ 1365.600226][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1365.606170][ T5729] dvb-usb: error while querying for an remote control event. [ 1366.627371][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1366.627430][ T5729] dvb-usb: error while querying for an remote control event. [ 1366.653279][T15184] jffs2: notice: (15184) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1366.733072][T15187] ip6gre1: entered promiscuous mode [ 1366.734930][T15187] ip6gre1: entered allmulticast mode [ 1366.793385][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1366.799319][ T121] dvb-usb: error while querying for an remote control event. [ 1366.957418][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1366.966033][ T121] dvb-usb: error while querying for an remote control event. [ 1366.966105][ T9929] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1366.966486][ T9929] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1366.980498][ T5847] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1367.117348][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1367.117437][ T121] dvb-usb: error while querying for an remote control event. [ 1367.277342][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1367.277428][ T121] dvb-usb: error while querying for an remote control event. [ 1367.442769][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1367.448724][ T121] dvb-usb: error while querying for an remote control event. [ 1367.459799][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1367.607267][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1367.607360][ T7973] dvb-usb: error while querying for an remote control event. [ 1367.617305][T15097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.617443][T15097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.617985][T15097] bridge_slave_0: entered allmulticast mode [ 1367.658046][T15097] bridge_slave_0: entered promiscuous mode [ 1367.696518][ T5847] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1367.711881][T15097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.712236][T15097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.721019][T15097] bridge_slave_1: entered allmulticast mode [ 1367.767322][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1367.773258][ T7973] dvb-usb: error while querying for an remote control event. [ 1367.927326][T15097] bridge_slave_1: entered promiscuous mode [ 1368.015885][T15198] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1368.239613][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1368.239720][ T7973] dvb-usb: error while querying for an remote control event. [ 1368.374399][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1368.394525][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1368.398277][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1368.398310][ T121] dvb-usb: error while querying for an remote control event. [ 1368.445025][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1368.500660][T15097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.534187][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1368.537523][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1368.559374][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1368.559438][ T5729] dvb-usb: error while querying for an remote control event. [ 1368.667922][ T5847] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1368.717389][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1368.717491][ T5729] dvb-usb: error while querying for an remote control event. [ 1368.740258][T15097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.928245][ T5847] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1368.946844][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1368.946877][ T5847] usb 7-1: Product: syz [ 1368.984932][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1368.985044][ T5729] dvb-usb: error while querying for an remote control event. [ 1369.020170][ T5847] usb 7-1: config 0 descriptor?? [ 1369.041813][ T5847] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1369.076760][ T5847] usb 7-1: Detected FT232H [ 1369.142695][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1369.142805][ T121] dvb-usb: error while querying for an remote control event. [ 1369.224469][ T5847] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1369.298444][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1369.298558][ T121] dvb-usb: error while querying for an remote control event. [ 1369.457324][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1369.457440][ T5729] dvb-usb: error while querying for an remote control event. [ 1369.503373][ T5847] ftdi_sio 7-1:0.0: GPIO initialisation failed: -5 [ 1369.517038][ T5847] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1369.553792][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1369.635433][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1369.635528][ T5729] dvb-usb: error while querying for an remote control event. [ 1369.725599][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1369.730911][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1369.742212][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1369.745800][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1369.787286][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1369.787366][ T5729] dvb-usb: error while querying for an remote control event. [ 1369.948278][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1369.960554][ T5729] dvb-usb: error while querying for an remote control event. [ 1370.117254][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1370.125298][ T5729] dvb-usb: error while querying for an remote control event. [ 1370.293744][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1370.293827][ T5729] dvb-usb: error while querying for an remote control event. [ 1370.447269][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1370.453202][ T5729] dvb-usb: error while querying for an remote control event. [ 1370.607268][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1370.613274][ T5729] dvb-usb: error while querying for an remote control event. [ 1370.822676][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1370.822804][ T121] dvb-usb: error while querying for an remote control event. [ 1370.897425][ T5606] Bluetooth: hci1: command tx timeout [ 1370.977349][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1370.977481][ T5729] dvb-usb: error while querying for an remote control event. [ 1371.141017][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1371.141133][ T5729] dvb-usb: error while querying for an remote control event. [ 1371.217533][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1371.308738][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1371.308929][ T5729] dvb-usb: error while querying for an remote control event. [ 1371.330475][ T5847] usb 7-1: USB disconnect, device number 46 [ 1371.354534][ T5847] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1371.367587][ T5847] ftdi_sio 7-1:0.0: device disconnected [ 1371.524251][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1371.524369][ T121] dvb-usb: error while querying for an remote control event. [ 1371.681193][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1371.681595][ T121] dvb-usb: error while querying for an remote control event. [ 1371.837309][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1371.837422][ T5729] dvb-usb: error while querying for an remote control event. [ 1371.997469][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1372.001322][ T5729] dvb-usb: error while querying for an remote control event. [ 1372.079452][T15097] team0: Port device team_slave_0 added [ 1372.160567][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1372.160671][ T5729] dvb-usb: error while querying for an remote control event. [ 1372.257582][ T5606] Bluetooth: hci4: command tx timeout [ 1372.317428][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1372.317525][ T5729] dvb-usb: error while querying for an remote control event. [ 1372.477345][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1372.477442][ T5729] dvb-usb: error while querying for an remote control event. [ 1372.508916][T15097] team0: Port device team_slave_1 added [ 1372.637445][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1372.637551][ T5729] dvb-usb: error while querying for an remote control event. [ 1372.797639][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1372.797741][ T5729] dvb-usb: error while querying for an remote control event. [ 1372.957362][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1372.957473][ T5729] dvb-usb: error while querying for an remote control event. [ 1372.977562][ T5606] Bluetooth: hci1: command tx timeout [ 1373.117487][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1373.117595][ T5729] dvb-usb: error while querying for an remote control event. [ 1373.278537][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1373.278636][ T5729] dvb-usb: error while querying for an remote control event. [ 1373.596024][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1373.610892][ T5729] dvb-usb: error while querying for an remote control event. [ 1373.784690][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1373.798321][ T5729] dvb-usb: error while querying for an remote control event. [ 1373.957406][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1373.957505][ T121] dvb-usb: error while querying for an remote control event. [ 1374.117401][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1374.117495][ T121] dvb-usb: error while querying for an remote control event. [ 1374.277396][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1374.277487][ T121] dvb-usb: error while querying for an remote control event. [ 1374.337783][ T5606] Bluetooth: hci4: command tx timeout [ 1374.457209][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1374.477723][ T5729] dvb-usb: error while querying for an remote control event. [ 1374.676970][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1374.687305][ T5729] dvb-usb: error while querying for an remote control event. [ 1374.902050][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1374.912803][ T5729] dvb-usb: error while querying for an remote control event. [ 1375.057316][ T5606] Bluetooth: hci1: command tx timeout [ 1375.067365][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1375.067449][ T5729] dvb-usb: error while querying for an remote control event. [ 1375.227400][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1375.227504][ T5729] dvb-usb: error while querying for an remote control event. [ 1375.398257][T15097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.398348][T15097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.398388][T15097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.466227][T15097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.478916][T15097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.478959][T15097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.574797][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1375.593214][ T5729] dvb-usb: error while querying for an remote control event. [ 1375.750121][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1375.750215][ T5729] dvb-usb: error while querying for an remote control event. [ 1375.907334][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1375.907425][ T5729] dvb-usb: error while querying for an remote control event. [ 1376.285673][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1376.285790][ T5729] dvb-usb: error while querying for an remote control event. [ 1376.417317][ T5606] Bluetooth: hci4: command tx timeout [ 1376.437350][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1376.437444][ T5729] dvb-usb: error while querying for an remote control event. [ 1376.604302][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1376.604550][ T5729] dvb-usb: error while querying for an remote control event. [ 1376.961045][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1376.961161][ T5729] dvb-usb: error while querying for an remote control event. [ 1377.018472][T15097] hsr_slave_0: entered promiscuous mode [ 1377.047005][T15097] hsr_slave_1: entered promiscuous mode [ 1377.070634][T15097] debugfs: 'hsr0' already exists in 'hsr' [ 1377.076661][T15097] Cannot create hsr debugfs directory [ 1377.118207][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1377.118308][ T5729] dvb-usb: error while querying for an remote control event. [ 1377.139642][ T5606] Bluetooth: hci1: command tx timeout [ 1377.277283][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1377.277386][ T5729] dvb-usb: error while querying for an remote control event. [ 1377.440488][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1377.440594][ T121] dvb-usb: error while querying for an remote control event. [ 1377.597331][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1377.597427][ T121] dvb-usb: error while querying for an remote control event. [ 1377.759199][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1377.759309][ T121] dvb-usb: error while querying for an remote control event. [ 1377.917280][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1377.917383][ T121] dvb-usb: error while querying for an remote control event. [ 1378.114611][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1378.114733][ T121] dvb-usb: error while querying for an remote control event. [ 1378.267300][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1378.267385][ T5729] dvb-usb: error while querying for an remote control event. [ 1378.473687][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1378.473817][ T5729] dvb-usb: error while querying for an remote control event. [ 1378.500047][ T5606] Bluetooth: hci4: command tx timeout [ 1378.634244][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1378.634343][ T5729] dvb-usb: error while querying for an remote control event. [ 1378.789468][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1378.789561][ T5729] dvb-usb: error while querying for an remote control event. [ 1378.947944][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1378.948062][ T5729] dvb-usb: error while querying for an remote control event. [ 1379.107351][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1379.107445][ T5729] dvb-usb: error while querying for an remote control event. [ 1379.625870][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1379.625989][ T5729] dvb-usb: error while querying for an remote control event. [ 1379.777330][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1379.777421][ T5729] dvb-usb: error while querying for an remote control event. [ 1379.944897][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1379.945014][ T5729] dvb-usb: error while querying for an remote control event. [ 1380.017581][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1380.097293][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1380.097387][ T5729] dvb-usb: error while querying for an remote control event. [ 1380.257302][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1380.257390][ T5729] dvb-usb: error while querying for an remote control event. [ 1380.417576][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1380.417676][ T121] dvb-usb: error while querying for an remote control event. [ 1380.579484][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1380.579591][ T5729] dvb-usb: error while querying for an remote control event. [ 1380.755088][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1380.755202][ T5729] dvb-usb: error while querying for an remote control event. [ 1380.907322][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1380.907413][ T5729] dvb-usb: error while querying for an remote control event. [ 1381.074251][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1381.187819][ T5729] dvb-usb: error while querying for an remote control event. [ 1381.347389][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1381.347478][ T5729] dvb-usb: error while querying for an remote control event. [ 1381.509220][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1381.509343][ T5729] dvb-usb: error while querying for an remote control event. [ 1381.667317][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1381.673273][ T5729] dvb-usb: error while querying for an remote control event. [ 1382.217233][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1382.217353][ T5729] dvb-usb: error while querying for an remote control event. [ 1382.238878][T15196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.246619][T15196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.256911][T15196] bridge_slave_0: entered allmulticast mode [ 1382.266092][T15196] bridge_slave_0: entered promiscuous mode [ 1382.293648][T15196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.294151][T15196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.294710][T15196] bridge_slave_1: entered allmulticast mode [ 1382.316951][T15196] bridge_slave_1: entered promiscuous mode [ 1382.407376][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1382.407468][ T5729] dvb-usb: error while querying for an remote control event. [ 1382.494030][T15196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.495990][T15200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.496126][T15200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.496340][T15200] bridge_slave_0: entered allmulticast mode [ 1382.499809][T15200] bridge_slave_0: entered promiscuous mode [ 1382.544189][T15196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.554992][T15200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.562459][T15200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.571008][T15200] bridge_slave_1: entered allmulticast mode [ 1382.586498][T15200] bridge_slave_1: entered promiscuous mode [ 1382.636823][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1382.636929][ T5729] dvb-usb: error while querying for an remote control event. [ 1382.814529][T15196] team0: Port device team_slave_0 added [ 1382.833372][T15200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.868859][T15196] team0: Port device team_slave_1 added [ 1382.883277][T15200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.041262][T15196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.050351][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1383.050388][T15196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.056687][T15200] team0: Port device team_slave_0 added [ 1383.106171][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1383.106261][ T121] dvb-usb: error while querying for an remote control event. [ 1383.122327][T15196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1383.131529][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1383.154809][T15196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1383.172010][T15200] team0: Port device team_slave_1 added [ 1383.257575][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1383.257680][ T121] dvb-usb: error while querying for an remote control event. [ 1383.561797][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1383.626736][ T121] dvb-usb: error while querying for an remote control event. [ 1383.777297][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1383.777381][ T7973] dvb-usb: error while querying for an remote control event. [ 1383.942583][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1383.944591][ T7973] dvb-usb: error while querying for an remote control event. [ 1384.099245][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1384.337647][ T7973] dvb-usb: error while querying for an remote control event. [ 1384.739295][ T7973] dvb-usb: bulk message failed: -22 (1/0) [ 1384.739401][ T7973] dvb-usb: error while querying for an remote control event. [ 1384.814734][T15200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1384.823278][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.852457][T15200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1384.897248][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1384.897356][ T5729] dvb-usb: error while querying for an remote control event. [ 1384.912285][T15200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.920256][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.946623][T15200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1385.023058][T15196] hsr_slave_0: entered promiscuous mode [ 1385.030329][T15196] hsr_slave_1: entered promiscuous mode [ 1385.031378][T15196] debugfs: 'hsr0' already exists in 'hsr' [ 1385.031407][T15196] Cannot create hsr debugfs directory [ 1385.057295][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1385.057382][ T5729] dvb-usb: error while querying for an remote control event. [ 1385.217296][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1385.217400][ T5729] dvb-usb: error while querying for an remote control event. [ 1385.285938][T15200] hsr_slave_0: entered promiscuous mode [ 1385.293244][T15200] hsr_slave_1: entered promiscuous mode [ 1385.294368][T15200] debugfs: 'hsr0' already exists in 'hsr' [ 1385.294398][T15200] Cannot create hsr debugfs directory [ 1385.415193][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1385.415298][ T5729] dvb-usb: error while querying for an remote control event. [ 1385.567299][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1385.567406][ T5729] dvb-usb: error while querying for an remote control event. [ 1385.727356][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1385.727454][ T5729] dvb-usb: error while querying for an remote control event. [ 1385.887291][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1385.887374][ T5729] dvb-usb: error while querying for an remote control event. [ 1386.047303][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1386.047406][ T5729] dvb-usb: error while querying for an remote control event. [ 1386.207319][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1386.207417][ T5729] dvb-usb: error while querying for an remote control event. [ 1386.374758][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1386.381816][ T5729] dvb-usb: error while querying for an remote control event. [ 1386.538474][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1386.538598][ T5729] dvb-usb: error while querying for an remote control event. [ 1386.699622][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1386.703265][ T121] dvb-usb: error while querying for an remote control event. [ 1386.960413][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1387.034880][ T121] dvb-usb: error while querying for an remote control event. [ 1387.189585][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1387.189690][ T121] dvb-usb: error while querying for an remote control event. [ 1387.348118][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1387.348222][ T121] dvb-usb: error while querying for an remote control event. [ 1387.507451][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1387.507555][ T121] dvb-usb: error while querying for an remote control event. [ 1387.704136][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1387.704266][ T121] dvb-usb: error while querying for an remote control event. [ 1387.994339][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1387.994465][ T121] dvb-usb: error while querying for an remote control event. [ 1388.164443][ T121] dvb-usb: bulk message failed: -22 (1/0) [ 1388.164694][ T121] dvb-usb: error while querying for an remote control event. [ 1388.318659][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1388.318775][ T5729] dvb-usb: error while querying for an remote control event. [ 1388.494835][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1388.494954][ T5729] dvb-usb: error while querying for an remote control event. [ 1388.648897][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1388.680277][ T5729] dvb-usb: error while querying for an remote control event. [ 1388.839035][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1388.839146][ T5729] dvb-usb: error while querying for an remote control event. [ 1389.017375][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1389.017459][ T5729] dvb-usb: error while querying for an remote control event. [ 1389.178858][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1389.178960][ T5729] dvb-usb: error while querying for an remote control event. [ 1389.340149][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1389.382050][ T5729] dvb-usb: error while querying for an remote control event. [ 1389.610270][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1389.681405][ T5729] dvb-usb: error while querying for an remote control event. [ 1389.839134][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1389.839231][ T5729] dvb-usb: error while querying for an remote control event. [ 1390.034578][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 1390.034692][ T5729] dvb-usb: error while querying for an remote control event. [ 1390.160948][ T121] usb 10-1: USB disconnect, device number 45 [ 1390.648680][ T121] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1394.015447][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1394.071708][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1394.089318][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1394.103999][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1394.106335][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1395.475842][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1395.571881][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1395.583521][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1395.610094][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1395.621049][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1396.257566][ T5606] Bluetooth: hci6: command tx timeout [ 1397.297402][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1397.864014][ T5606] Bluetooth: hci7: command tx timeout [ 1398.285311][T15285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.287738][T15285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.288926][T15285] bridge_slave_0: entered allmulticast mode [ 1398.308069][T15285] bridge_slave_0: entered promiscuous mode [ 1398.331930][T15285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.337405][ T5606] Bluetooth: hci6: command tx timeout [ 1398.344664][T15285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.344891][T15285] bridge_slave_1: entered allmulticast mode [ 1398.361253][T15285] bridge_slave_1: entered promiscuous mode [ 1398.504578][T15285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.542247][T15285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.668392][T15285] team0: Port device team_slave_0 added [ 1398.673331][T15285] team0: Port device team_slave_1 added [ 1399.613735][T15285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.621316][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.621352][T15285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.695479][T15285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.702603][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.702641][T15285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.910565][T15285] hsr_slave_0: entered promiscuous mode [ 1399.918418][T15285] hsr_slave_1: entered promiscuous mode [ 1399.925275][T15285] debugfs: 'hsr0' already exists in 'hsr' [ 1399.925306][T15285] Cannot create hsr debugfs directory [ 1399.937577][ T5606] Bluetooth: hci7: command tx timeout [ 1399.971019][T15298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.978545][T15298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.978791][T15298] bridge_slave_0: entered allmulticast mode [ 1399.981650][T15298] bridge_slave_0: entered promiscuous mode [ 1400.027085][T15298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.035327][T15298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.035560][T15298] bridge_slave_1: entered allmulticast mode [ 1400.052799][T15298] bridge_slave_1: entered promiscuous mode [ 1400.181635][T15298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.208427][T15298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.417315][ T5606] Bluetooth: hci6: command tx timeout [ 1402.017281][ T5606] Bluetooth: hci7: command tx timeout [ 1402.339438][T15298] team0: Port device team_slave_0 added [ 1402.395919][T15298] team0: Port device team_slave_1 added [ 1402.497280][ T5606] Bluetooth: hci6: command tx timeout [ 1402.950489][T15298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.958893][T15298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.958930][T15298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.056761][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1403.096816][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1403.178346][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1403.229689][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1403.291052][T15298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.298192][T15298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.298228][T15298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.459314][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1403.840987][T15298] hsr_slave_0: entered promiscuous mode [ 1403.850507][T15298] hsr_slave_1: entered promiscuous mode [ 1403.868074][T15298] debugfs: 'hsr0' already exists in 'hsr' [ 1403.873978][T15298] Cannot create hsr debugfs directory [ 1404.104499][ T5606] Bluetooth: hci7: command tx timeout [ 1405.617356][ T5606] Bluetooth: hci8: command tx timeout [ 1405.833213][T15326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.840799][T15326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.841062][T15326] bridge_slave_0: entered allmulticast mode [ 1405.843988][T15326] bridge_slave_0: entered promiscuous mode [ 1405.867555][T15326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.874960][T15326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.875257][T15326] bridge_slave_1: entered allmulticast mode [ 1405.892530][T15326] bridge_slave_1: entered promiscuous mode [ 1405.952474][T15326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.966479][T15326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.072014][T15326] team0: Port device team_slave_0 added [ 1406.083270][T15326] team0: Port device team_slave_1 added [ 1406.140130][T15326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.147296][T15326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.147332][T15326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.150548][T15326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.150564][T15326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.150596][T15326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.301386][T15326] hsr_slave_0: entered promiscuous mode [ 1406.308734][T15326] hsr_slave_1: entered promiscuous mode [ 1406.309729][T15326] debugfs: 'hsr0' already exists in 'hsr' [ 1406.309756][T15326] Cannot create hsr debugfs directory [ 1407.697456][ T5606] Bluetooth: hci8: command tx timeout [ 1409.777296][ T5606] Bluetooth: hci8: command tx timeout [ 1411.857330][ T5606] Bluetooth: hci8: command tx timeout [ 1417.674380][T15260] bond0: (slave syz_tun): Releasing backup interface [ 1423.555459][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.562006][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.589846][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1427.616793][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1427.632096][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1427.665403][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1427.677866][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1429.031461][T15347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.038784][T15347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.039011][T15347] bridge_slave_0: entered allmulticast mode [ 1429.041896][T15347] bridge_slave_0: entered promiscuous mode [ 1429.045456][T15347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.045679][T15347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.045902][T15347] bridge_slave_1: entered allmulticast mode [ 1429.092189][T15347] bridge_slave_1: entered promiscuous mode [ 1429.158015][T15347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1429.172193][T15347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.289898][T15347] team0: Port device team_slave_0 added [ 1429.301604][T15347] team0: Port device team_slave_1 added [ 1429.461751][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1429.523311][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1429.540625][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1429.547960][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1429.557302][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1429.774221][T15347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1429.774314][T15347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1429.774421][T15347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1429.857366][ T59] Bluetooth: hci5: command tx timeout [ 1430.316434][T15347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.323714][T15347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.323753][T15347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1430.562132][T15347] hsr_slave_0: entered promiscuous mode [ 1430.569902][T15347] hsr_slave_1: entered promiscuous mode [ 1430.571003][T15347] debugfs: 'hsr0' already exists in 'hsr' [ 1430.571031][T15347] Cannot create hsr debugfs directory [ 1431.617339][ T59] Bluetooth: hci9: command tx timeout [ 1431.937282][ T59] Bluetooth: hci5: command tx timeout [ 1432.425636][T15366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.433067][T15366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.433295][T15366] bridge_slave_0: entered allmulticast mode [ 1432.436358][T15366] bridge_slave_0: entered promiscuous mode [ 1432.467595][T15366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.476940][T15366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.487663][T15366] bridge_slave_1: entered allmulticast mode [ 1432.497362][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1432.512590][T15366] bridge_slave_1: entered promiscuous mode [ 1432.602355][T15366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.620205][T15366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.696085][T15366] team0: Port device team_slave_0 added [ 1432.708123][T15366] team0: Port device team_slave_1 added [ 1432.765537][T15366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.773052][T15366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.773090][T15366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.775828][T15366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.775844][T15366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.775896][T15366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.697268][ T59] Bluetooth: hci9: command tx timeout [ 1434.017443][ T59] Bluetooth: hci5: command tx timeout [ 1434.127726][T15366] hsr_slave_0: entered promiscuous mode [ 1434.135071][T15366] hsr_slave_1: entered promiscuous mode [ 1434.136188][T15366] debugfs: 'hsr0' already exists in 'hsr' [ 1434.136218][T15366] Cannot create hsr debugfs directory [ 1435.777271][ T59] Bluetooth: hci9: command tx timeout [ 1435.857283][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 1436.097285][ T5606] Bluetooth: hci5: command tx timeout [ 1437.857436][ T5606] Bluetooth: hci9: command tx timeout [ 1456.404969][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1456.462624][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1456.477478][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1456.501614][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1456.510085][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1456.719023][T15390] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1456.896384][T15390] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1457.005470][T15390] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1457.018479][T15390] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1457.026280][T15390] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1458.666458][T14473] Bluetooth: hci10: command tx timeout [ 1459.217539][T14473] Bluetooth: hci11: command tx timeout [ 1460.456578][T15388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.464009][T15388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.464273][T15388] bridge_slave_0: entered allmulticast mode [ 1460.482938][T15388] bridge_slave_0: entered promiscuous mode [ 1460.520008][T15388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.527424][T15388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.527663][T15388] bridge_slave_1: entered allmulticast mode [ 1460.530573][T15388] bridge_slave_1: entered promiscuous mode [ 1460.602727][T15387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.610523][T15387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.610774][T15387] bridge_slave_0: entered allmulticast mode [ 1460.614192][T15387] bridge_slave_0: entered promiscuous mode [ 1460.659087][T15387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.678093][T15387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.687017][T15387] bridge_slave_1: entered allmulticast mode [ 1460.700038][T15387] bridge_slave_1: entered promiscuous mode [ 1460.741818][T14473] Bluetooth: hci10: command tx timeout [ 1460.813838][T15388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.013822][T15388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.034577][T15387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.137011][T15387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.264247][T15387] team0: Port device team_slave_0 added [ 1461.274633][T15387] team0: Port device team_slave_1 added [ 1461.297642][T14473] Bluetooth: hci11: command tx timeout [ 1461.330426][T15387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1461.337594][T15387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.337632][T15387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1461.340355][T15387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1461.340373][T15387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.340412][T15387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1461.524165][T15387] hsr_slave_0: entered promiscuous mode [ 1461.531566][T15387] hsr_slave_1: entered promiscuous mode [ 1461.532670][T15387] debugfs: 'hsr0' already exists in 'hsr' [ 1461.532703][T15387] Cannot create hsr debugfs directory [ 1462.579732][T15388] team0: Port device team_slave_0 added [ 1462.587042][T15388] team0: Port device team_slave_1 added [ 1462.817232][T14473] Bluetooth: hci10: command tx timeout [ 1462.896023][T15388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.903583][T15388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.903621][T15388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.951559][T15388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.960375][T15388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.960416][T15388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.303820][ T5606] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1463.378100][ T5606] Bluetooth: hci11: command tx timeout [ 1463.422474][ T5606] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1463.431179][ T5606] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1463.450028][ T5606] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1463.458395][ T5606] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1464.141864][T15388] hsr_slave_0: entered promiscuous mode [ 1464.155941][T15388] hsr_slave_1: entered promiscuous mode [ 1464.165666][T15388] debugfs: 'hsr0' already exists in 'hsr' [ 1464.165755][T15388] Cannot create hsr debugfs directory [ 1464.901023][ T5606] Bluetooth: hci10: command tx timeout [ 1465.457837][ T5606] Bluetooth: hci11: command tx timeout [ 1465.777405][ T5606] Bluetooth: hci12: command tx timeout [ 1466.068792][T15427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.076352][T15427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.076608][T15427] bridge_slave_0: entered allmulticast mode [ 1466.095319][T15427] bridge_slave_0: entered promiscuous mode [ 1466.121671][T15427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.132682][T15427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.133411][T15427] bridge_slave_1: entered allmulticast mode [ 1466.136459][T15427] bridge_slave_1: entered promiscuous mode [ 1466.231737][T15427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.246483][T15427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.316792][T15427] team0: Port device team_slave_0 added [ 1466.328842][T15427] team0: Port device team_slave_1 added [ 1466.378316][T15427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.385464][T15427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.385503][T15427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.581942][ T5606] Bluetooth: hci3: command 0x0406 tx timeout [ 1467.028345][T15427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1467.035558][T15427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1467.035598][T15427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.203928][T15427] hsr_slave_0: entered promiscuous mode [ 1467.212707][T15427] hsr_slave_1: entered promiscuous mode [ 1467.213902][T15427] debugfs: 'hsr0' already exists in 'hsr' [ 1467.213932][T15427] Cannot create hsr debugfs directory [ 1467.857279][T14473] Bluetooth: hci12: command tx timeout [ 1469.937549][T14473] Bluetooth: hci12: command tx timeout [ 1472.017525][T14473] Bluetooth: hci12: command tx timeout [ 1484.988092][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.988243][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.035203][ T5606] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1488.116964][ T5606] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1488.131083][ T5606] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1488.147822][ T5606] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1488.423230][ T5606] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1489.985015][T15449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.993345][T15449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.993610][T15449] bridge_slave_0: entered allmulticast mode [ 1489.996579][T15449] bridge_slave_0: entered promiscuous mode [ 1490.038981][T15449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.042200][T15449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.057495][T15449] bridge_slave_1: entered allmulticast mode [ 1490.071784][T15449] bridge_slave_1: entered promiscuous mode [ 1490.173120][T15449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.194058][T15449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.301986][T15449] team0: Port device team_slave_0 added [ 1490.329877][T15449] team0: Port device team_slave_1 added [ 1490.425223][T15449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.432459][T15449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.432499][T15449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1490.436092][T15449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1490.436112][T15449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.436145][T15449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1490.657874][T14473] Bluetooth: hci13: command tx timeout [ 1491.049523][T15390] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1491.170155][T15390] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1491.189751][T15390] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1491.200887][T15390] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1491.240941][T15390] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1491.582832][T15449] hsr_slave_0: entered promiscuous mode [ 1491.590587][T15449] hsr_slave_1: entered promiscuous mode [ 1491.591637][T15449] debugfs: 'hsr0' already exists in 'hsr' [ 1491.591668][T15449] Cannot create hsr debugfs directory [ 1492.192556][T14473] Bluetooth: hci1: command 0x0406 tx timeout [ 1492.737656][T14473] Bluetooth: hci13: command tx timeout [ 1493.538014][ T5606] Bluetooth: hci14: command tx timeout [ 1493.973410][T15468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.980931][T15468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.981199][T15468] bridge_slave_0: entered allmulticast mode [ 1493.984237][T15468] bridge_slave_0: entered promiscuous mode [ 1494.009124][T15468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.016571][T15468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.016880][T15468] bridge_slave_1: entered allmulticast mode [ 1494.036118][T15468] bridge_slave_1: entered promiscuous mode [ 1494.123362][T15468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1494.150184][T15468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1494.261764][T15468] team0: Port device team_slave_0 added [ 1494.293501][T15468] team0: Port device team_slave_1 added [ 1494.393160][T15468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1494.400328][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.400366][T15468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1494.403337][T15468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1494.403354][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.403386][T15468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1494.625242][T15468] hsr_slave_0: entered promiscuous mode [ 1494.632938][T15468] hsr_slave_1: entered promiscuous mode [ 1494.634075][T15468] debugfs: 'hsr0' already exists in 'hsr' [ 1494.634106][T15468] Cannot create hsr debugfs directory [ 1494.818142][ T5606] Bluetooth: hci13: command tx timeout [ 1495.617582][ T5606] Bluetooth: hci14: command tx timeout [ 1496.897529][ T5606] Bluetooth: hci13: command tx timeout [ 1497.297504][ T5606] Bluetooth: hci4: command 0x0406 tx timeout [ 1497.707618][ T5606] Bluetooth: hci14: command tx timeout [ 1499.777278][T14473] Bluetooth: hci14: command tx timeout [ 1505.457650][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1515.697801][ T38] INFO: task kworker/u8:2:40 blocked for more than 143 seconds. [ 1515.697889][ T38] Tainted: G L syzkaller #0 [ 1515.697903][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1515.697914][ T38] task:kworker/u8:2 state:D stack:21392 pid:40 tgid:40 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1515.697982][ T38] Workqueue: netns cleanup_net [ 1515.698082][ T38] Call Trace: [ 1515.698090][ T38] [ 1515.698103][ T38] __schedule+0x16d9/0x5700 [ 1515.698149][ T38] ? trace_irq_disable+0x3b/0x140 [ 1515.698179][ T38] ? __pfx___schedule+0x10/0x10 [ 1515.698209][ T38] rt_mutex_schedule+0x76/0xf0 [ 1515.698236][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1515.698272][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1515.698303][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1515.698333][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1515.698365][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1515.698412][ T38] ? devlink_pernet_pre_exit+0x129/0x420 [ 1515.698494][ T38] ? devlink_pernet_pre_exit+0x129/0x420 [ 1515.698516][ T38] mutex_lock_nested+0x168/0x1d0 [ 1515.698562][ T38] devlink_pernet_pre_exit+0x129/0x420 [ 1515.698590][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1515.698610][ T38] ? iput+0xb84/0xf00 [ 1515.698638][ T38] ops_undo_list+0x17d/0x8d0 [ 1515.698667][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1515.698687][ T38] ? rt_spin_unlock+0x159/0x200 [ 1515.698715][ T38] ? idr_destroy+0x21b/0x2a0 [ 1515.698763][ T38] ? rt_spin_unlock+0x165/0x200 [ 1515.698886][ T38] cleanup_net+0x575/0x810 [ 1515.698920][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 1515.698948][ T38] ? rcu_is_watching+0x16/0xb0 [ 1515.698985][ T38] ? process_scheduled_works+0x97a/0x1630 [ 1515.699017][ T38] process_scheduled_works+0xc3d/0x1630 [ 1515.699067][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1515.699100][ T38] ? assign_work+0x3cf/0x5d0 [ 1515.699132][ T38] worker_thread+0xa47/0xfb0 [ 1515.699181][ T38] kthread+0x38b/0x470 [ 1515.699222][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1515.699250][ T38] ? __pfx_kthread+0x10/0x10 [ 1515.699272][ T38] ret_from_fork+0x514/0xb70 [ 1515.699324][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1515.699377][ T38] ? __switch_to+0xc89/0x1420 [ 1515.699413][ T38] ? __pfx_kthread+0x10/0x10 [ 1515.699437][ T38] ret_from_fork_asm+0x1a/0x30 [ 1515.699479][ T38] [ 1515.699918][ T38] [ 1515.699918][ T38] Showing all locks held in the system: [ 1515.699981][ T38] locks held by ksoftirqd/1/30: 5, last CPU#1: [ 1515.700021][ T38] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1515.700105][ T38] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1515.700153][ T38] #2: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 1515.700244][ T38] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 1515.700289][ T38] #4: ffff8880b8746e18 ((&pcs->lock)){+.+.}-{3:3}, at: kmem_cache_alloc_node_noprof+0x22d/0x660 [ 1515.700341][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 1515.700354][ T38] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1515.700400][ T38] locks held by kworker/u8:2/40: 4, on CPU#1: [ 1515.700413][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1515.700461][ T38] #1: ffffc90000b17c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1515.700509][ T38] #2: ffffffff8f5c33e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1515.700554][ T38] #3: ffff888026d10160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1515.700621][ T38] locks held by getty/5342: 2, on CPU#0: [ 1515.700633][ T38] #0: ffff8880321190a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1515.700749][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1515.700797][ T38] locks held by kworker/0:7/5847: 3, on CPU#0: [ 1515.700810][ T38] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1515.700858][ T38] #1: ffffc90005d6fc40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1515.700906][ T38] #2: ffffffff8e1c9d30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1515.700961][ T38] locks held by kworker/u9:1/14473: 6, last CPU#1: [ 1515.700975][ T38] #0: ffff88801e6d1138 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1515.701040][ T38] #1: ffffc9000555fc40 ((work_completion)(&(&conn->disc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1515.701094][ T38] #2: ffff8880402cc870 (&hdev->unregister_lock){+.+.}-{4:4}, at: hci_cmd_sync_submit+0x3c/0x2d0 [ 1515.701206][ T38] #3: ffffffff8e310fb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1515.701255][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1515.701302][ T38] #5: ffff8880b8728558 (hrtimer_bases.lock){-...}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x4d0 [ 1515.701350][ T38] locks held by syz-executor/14960: 7, on CPU#0: [ 1515.701364][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.701413][ T38] #1: ffff88805c668478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.701468][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.701526][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.701610][ T38] #4: ffff888026d10160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1515.701726][ T38] #5: ffff888038e62310 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1515.701807][ T38] #6: ffffffff8e1c9d30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1515.701857][ T38] locks held by syz-executor/15097: 4, on CPU#0: [ 1515.701873][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.701925][ T38] #1: ffff8880353bd878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.701975][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.702027][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.702073][ T38] locks held by syz-executor/15196: 4, on CPU#0: [ 1515.702086][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.702133][ T38] #1: ffff88805e75fc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.702182][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.702237][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.702282][ T38] locks held by syz-executor/15200: 4, on CPU#0: [ 1515.702296][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.702343][ T38] #1: ffff88803a2b1078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.702393][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.702451][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.702503][ T38] locks held by syz.6.1906/15260: 1, on CPU#0: [ 1515.702518][ T38] #0: ffffffff8e1c9d30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1515.702563][ T38] locks held by syz.5.1907/15265: 2, on CPU#0: [ 1515.702577][ T38] #0: ffffffff8f5c33e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 1515.702632][ T38] #1: ffffffff8e1c9d30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1515.702682][ T38] locks held by syz-executor/15285: 4, on CPU#0: [ 1515.702701][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.702762][ T38] #1: ffff88804df1f478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.702811][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.702864][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.702910][ T38] locks held by syz-executor/15298: 4, on CPU#0: [ 1515.702924][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.702971][ T38] #1: ffff8880604d4478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.703022][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.703080][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.703135][ T38] locks held by syz-executor/15326: 4, on CPU#0: [ 1515.703152][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.703200][ T38] #1: ffff888062edc878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.703252][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.703307][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.703355][ T38] locks held by syz-executor/15347: 4, on CPU#0: [ 1515.703369][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.703419][ T38] #1: ffff888029280878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.703473][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.703530][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.703582][ T38] locks held by syz-executor/15366: 4, on CPU#0: [ 1515.703598][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.703655][ T38] #1: ffff88804b331878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.703708][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.703779][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.703829][ T38] locks held by syz-executor/15387: 4, on CPU#0: [ 1515.703846][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.703898][ T38] #1: ffff888031489c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.703946][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.703999][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.704044][ T38] locks held by syz-executor/15388: 4, on CPU#0: [ 1515.704057][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.704105][ T38] #1: ffff88809a183878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.704154][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.704211][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.704269][ T38] locks held by syz-executor/15427: 4, on CPU#0: [ 1515.704285][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.704332][ T38] #1: ffff88803b359878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.704386][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.704445][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.704496][ T38] locks held by syz-executor/15449: 4, on CPU#0: [ 1515.704511][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.704563][ T38] #1: ffff888062f0d078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.704620][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.704682][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.704739][ T38] locks held by syz-executor/15468: 4, on CPU#0: [ 1515.704754][ T38] #0: ffff888035112510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1515.704802][ T38] #1: ffff888021333078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1515.704854][ T38] #2: ffff8880286c5b48 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1515.704914][ T38] #3: ffffffff8ee428b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1515.704965][ T38] [ 1515.704971][ T38] ============================================= [ 1515.704971][ T38] [ 1515.704982][ T38] NMI backtrace for cpu 0 [ 1515.705002][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1515.705038][ T38] Tainted: [L]=SOFTLOCKUP [ 1515.705047][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1515.705059][ T38] Call Trace: [ 1515.705068][ T38] [ 1515.705078][ T38] dump_stack_lvl+0xe8/0x150 [ 1515.705110][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1515.705184][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1515.705221][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1515.705256][ T38] sys_info+0x135/0x170 [ 1515.705284][ T38] watchdog+0xfd7/0x1030 [ 1515.705321][ T38] ? watchdog+0x1c7/0x1030 [ 1515.705353][ T38] kthread+0x38b/0x470 [ 1515.705377][ T38] ? __pfx_watchdog+0x10/0x10 [ 1515.705403][ T38] ? __pfx_kthread+0x10/0x10 [ 1515.705426][ T38] ret_from_fork+0x514/0xb70 [ 1515.705452][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1515.705476][ T38] ? __switch_to+0xc89/0x1420 [ 1515.705509][ T38] ? __pfx_kthread+0x10/0x10 [ 1515.705534][ T38] ret_from_fork_asm+0x1a/0x30 [ 1515.705571][ T38] [ 1515.705580][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1515.705615][ C1] NMI backtrace for cpu 1 [ 1515.705634][ C1] CPU: 1 UID: 0 PID: 14473 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1515.705661][ C1] Tainted: [L]=SOFTLOCKUP [ 1515.705668][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1515.705681][ C1] Workqueue: hci6 hci_conn_timeout [ 1515.705753][ C1] RIP: 0010:__slab_free+0xc0/0x2a0 [ 1515.705780][ C1] Code: 28 74 3c 85 f6 74 38 45 31 ed f6 43 0a 40 74 5a 48 8b 44 24 40 48 8b 54 24 48 48 8b 5c 24 30 48 8b 4c 24 38 f0 49 0f c7 4e 20 <0f> 84 d0 00 00 00 48 89 44 24 40 48 89 54 24 48 e9 af 00 00 00 49 [ 1515.705796][ C1] RSP: 0000:ffffc9000555f8b0 EFLAGS: 00000242 [ 1515.705812][ C1] RAX: ffff888091f62780 RBX: ffff888091f62640 RCX: 00000002000c0005 [ 1515.705827][ C1] RDX: 00000002000c0006 RSI: 0000000000000005 RDI: ffff88814044aa00 [ 1515.705841][ C1] RBP: ffffc9000555f938 R08: 0000000000000001 R09: ffffffff823236ae [ 1515.705855][ C1] R10: dffffc0000000000 R11: fffffbfff1f63bb0 R12: ffff888091f62780 [ 1515.705869][ C1] R13: 0000000000000000 R14: ffffea000247d880 R15: 0000000000000000 [ 1515.705883][ C1] FS: 0000000000000000(0000) GS:ffff888125cd6000(0000) knlGS:0000000000000000 [ 1515.705898][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1515.705912][ C1] CR2: 00007fde0fe57517 CR3: 000000002b5f8000 CR4: 00000000003526f0 [ 1515.705929][ C1] Call Trace: [ 1515.705937][ C1] [ 1515.705952][ C1] qlist_free_all+0x99/0x100 [ 1515.705977][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1515.706001][ C1] __kasan_slab_alloc+0x22/0x80 [ 1515.706029][ C1] __kmalloc_cache_noprof+0x353/0x680 [ 1515.706053][ C1] ? hci_cmd_sync_submit+0xc4/0x2d0 [ 1515.706079][ C1] ? hci_cmd_sync_submit+0xc4/0x2d0 [ 1515.706108][ C1] ? __pfx_abort_conn_sync+0x10/0x10 [ 1515.706131][ C1] hci_cmd_sync_submit+0xc4/0x2d0 [ 1515.706157][ C1] ? __pfx_abort_conn_destroy+0x10/0x10 [ 1515.706183][ C1] hci_abort_conn+0x106/0x260 [ 1515.706201][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1515.706233][ C1] process_scheduled_works+0xc3d/0x1630 [ 1515.706274][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1515.706302][ C1] ? assign_work+0x3cf/0x5d0 [ 1515.706327][ C1] worker_thread+0xa47/0xfb0 [ 1515.706367][ C1] kthread+0x38b/0x470 [ 1515.706385][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1515.706409][ C1] ? __pfx_kthread+0x10/0x10 [ 1515.706427][ C1] ret_from_fork+0x514/0xb70 [ 1515.706447][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1515.706464][ C1] ? __switch_to+0xc89/0x1420 [ 1515.706491][ C1] ? __pfx_kthread+0x10/0x10 [ 1515.706509][ C1] ret_from_fork_asm+0x1a/0x30 [ 1515.706536][ C1] [ 1515.706621][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1517.294231][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1517.305476][ T38] Tainted: [L]=SOFTLOCKUP [ 1517.309826][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1517.320002][ T38] Call Trace: [ 1517.323320][ T38] [ 1517.326308][ T38] vpanic+0x56d/0xa60 [ 1517.330339][ T38] ? __pfx_vpanic+0x10/0x10 [ 1517.334871][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 1517.340456][ T38] panic+0xc5/0xd0 [ 1517.344210][ T38] ? __pfx_panic+0x10/0x10 [ 1517.348664][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 1517.353736][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1517.359945][ T38] watchdog+0x1030/0x1030 [ 1517.364338][ T38] ? watchdog+0x1c7/0x1030 [ 1517.368816][ T38] kthread+0x38b/0x470 [ 1517.373010][ T38] ? __pfx_watchdog+0x10/0x10 [ 1517.377717][ T38] ? __pfx_kthread+0x10/0x10 [ 1517.382347][ T38] ret_from_fork+0x514/0xb70 [ 1517.386969][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1517.392110][ T38] ? __switch_to+0xc89/0x1420 [ 1517.396830][ T38] ? __pfx_kthread+0x10/0x10 [ 1517.401467][ T38] ret_from_fork_asm+0x1a/0x30 [ 1517.406298][ T38] [ 1517.409955][ T38] Kernel Offset: disabled [ 1517.414295][ T38] Rebooting in 86400 seconds..