last executing test programs: 8.720613653s ago: executing program 4 (id=58): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x20, 0x55, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) syz_io_uring_setup(0x62d1, &(0x7f0000000380)={0x0, 0xd981, 0x0, 0x2, 0x21b}, &(0x7f00000000c0), 0x0) write$dsp(r4, &(0x7f0000000200)="97", 0x1) 8.638050902s ago: executing program 0 (id=59): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$fuse(0x0, 0x0, 0x4028, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002700), 0x200, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f0000002740)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x0, 0x91, 0x8000, 0x4, 0xa, 0xa4, 0xffb, 0x7, 0x8, 0xc3, 0x4, 0xd4200003, 0x3, 0x6, 0x6, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x6, 0x0, 0x7, 0x5, 0x100000, 0x767, 0xc, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x80001c00, 0xb, 0x5, 0xa, 0x8, 0x8000100, 0x1fc00000, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0xfffffffd, 0x7e, 0x6, 0xa, 0xcd22, 0xf, 0xff, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x17ffff, 0x4007, 0xfd, 0x9, 0x3, 0xf7, 0x5, 0x3, 0x6, 0x9, 0x10, 0x9, 0x6, 0xe, 0x4, 0x100002, 0x8, 0x80000752, 0x8, 0x3, 0x24, 0x10001, 0x312, 0x1, 0x6, 0x6, 0x9, 0x8, 0xfdffffff, 0x2, 0x41, 0x1084, 0x100, 0x5, 0x252, 0x81, 0x1, 0xaa10, 0x80, 0x5, 0x0, 0xb, 0x2, 0xd9a, 0xd, 0x2e2, 0xffffdffc, 0x43, 0x5, 0x5, 0x8, 0x3, 0x4, 0x2, 0x41a, 0x8, 0x9, 0x4, 0x401, 0x66d1, 0x9, 0x9, 0x8, 0x7, 0xc5c, 0xffffffff]}}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r7}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.821130716s ago: executing program 0 (id=69): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0x40c989, 0x0, 0xffffffdf, 0x175}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 5.749170311s ago: executing program 4 (id=70): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) write$binfmt_register(0xffffffffffffffff, &(0x7f0000001200)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x1000000000000009, 0x3a, 'M', 0x3a, '~\b\x011\xcaL\x8f\x88\x9fM\xf7e\xe2\xd6\xbb\xc7\\M\b\x98R\xc3\xf5\xbd\x0fq\xbd\x85\nJ\xa9\xac\xe7@\nfA\'o\xa3ry;\xeb3\xd4\x83\x92jZ{I\x8ei?U\xfbq\x97T!Xk\xaa%F\x01\x9e^\xb6H\xb2k\x94\xb2\xab\xbf\x82\xa7\xe6G6f\rHtA>\x13\x9b\xdb!\x18\xeb\x95\xb8,$4\xa2\xa4\xa8Ob7\xc0i\xbc\n\x97\xf6\xea\xe9\x1d\x86\xb9,\xfd\x0e`@\xcd\xedl#\xf0\x80\xfc\xb8\x86Z\xb3\v\xeb@\xe9%\xd0\x8e]\x03\xfd\xa1\xbc;\x8c\xb17A\x8b z\x81~\xef.\xa4\xa7\x04\x14%\x8a\xbdtP\xa5\x9f\xf1x\xbc\x80\x048w\x1e\x9fzL\xd6(TS0;[1\xb0F\x85\xe3\xf4\r6v0\xf8\'\x1f\x1f4@\xbc0D\xc6\xba.\xf3|\xebn\xc0&\xed[\xb5\x89\xb8<\x8e[x-\x01\'\xd5\xe5\x1f*\x9d!<\x82`\xd3\f\xf67\xa6U\":\xd9\x17;K\xe7;y\xa5.q\xf6\xc8/Dv\xd2s\xdeEq \xabz\xb6\xa7H\x82_\xe1\x8c\xaa\xefV\xafZ\x10!\x93K\x8e\r\xb6\xce\xf4]\xcc\xcf\x1f\x80\x11@\xec\x7f\xf5\xb3\xb1\nRV(\"\x100x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffe, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) 5.108715333s ago: executing program 1 (id=74): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) 5.043208576s ago: executing program 2 (id=75): timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 4.942918542s ago: executing program 1 (id=76): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000001c0)={&(0x7f0000000200)=[{0xe4, 0x2239, 0x0, 0x0}, {0x101, 0x201, 0x0, 0x0}], 0x2}) 4.801523398s ago: executing program 2 (id=77): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) 4.738616049s ago: executing program 0 (id=78): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) 4.701183857s ago: executing program 2 (id=79): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000100)=""/83, 0x53) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x4007) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x28, 0x4, @empty, 0xd}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe80004c0d00000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 4.462637997s ago: executing program 0 (id=80): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x20, 0x55, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) syz_io_uring_setup(0x62d1, &(0x7f0000000380)={0x0, 0xd981, 0x0, 0x2, 0x21b}, &(0x7f00000000c0), 0x0) write$dsp(r4, &(0x7f0000000200)="97", 0x1) 3.320309364s ago: executing program 1 (id=83): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x26, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}]}}]}, 0x154}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0xf, 0x400, 0x8, 0x3}) r6 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="e8700e44785ae9d7ff67347c3819271408a4975a52c1ab9b8b4db3945d10328f51895d704dc33a47d3a158da988456d30026b4cf186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf153871fb0d60047868b361ca6aa84dcd0b1576", 0x62}, {&(0x7f0000000440)="d3370d4bf5328db259678875a2d50c3b36adcfd58684580d5095c7454f60c432944f43cb9051e9a9a8259d7e4dfec86f6e0116097221541af670a3d62bf0ed206c8b75ed1eeb0b5dad4cae312fb40d2755e2ecf92f5cdee5785e4ae7fc3264d70b2d1c7aef9044b6ed4dce53adbaeb7778fc95aee91141f2188a2502880e4c67be52dbf0ef3bba4f98a6fa1ed2f6ee2ebacfc49ef6414e8abbbe12713de9850d800f140c903c1f63eac4365a56147501d8e9d56f77263d43a3ac5defd91e7b865ff0cd46bf8dff9c5ed31a03682576836b1a6ae95c69039f7857830154be52eea8898bf8f04c3661a01dc6", 0xeb}], 0x2, 0x0, 0x0, 0xfacd05679e69b95}], 0x1, 0x30040803) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) pipe(&(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x185877a4, 0x10200}) 3.262561391s ago: executing program 4 (id=84): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000780001062abd700000008ec20700"], 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x60, [0x3ff, 0xef8, 0x800, 0x0, 0x5, 0x1], 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000300)=""/96}, &(0x7f0000000400)=0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xffffffffffffff3c) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r8 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000008c0)={0x3, @pix_mp={0x6, 0x542f, 0x39555659, 0x8, 0x1, [{0x5, 0x5}, {0x80000000, 0xfffffff6}, {0x0, 0x5}, {0x5, 0x200}, {0x2, 0x1}, {0x3, 0x9d7b}, {0xffffffff, 0x1bd}, {0x8001000, 0x1}], 0xbd, 0x7, 0x2, 0x0, 0x5}}) sendto$unix(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 3.116602989s ago: executing program 3 (id=85): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) dup(r0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) 2.538671575s ago: executing program 3 (id=86): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) 2.416855985s ago: executing program 0 (id=87): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000000c0)={'ip6gretap0\x00', 0x9}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000000140)=@multiplanar_mmap={0x7fff, 0x3, 0x4, 0x400, 0xc6b, {}, {0x3, 0x17, 0x5, 0x6, 0x10, 0x7, "f40023c7"}, 0x10, 0x1, {0x0}, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r1, r1, 0x0, 0x40000f63c) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r2 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f00000001c0)) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000240)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r3}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0xe091}}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 2.105264819s ago: executing program 3 (id=88): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0x40c989, 0x0, 0xffffffdf, 0x175}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 1.553850205s ago: executing program 2 (id=89): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) 1.440848856s ago: executing program 2 (id=90): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) 1.42779866s ago: executing program 3 (id=91): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) 1.050416772s ago: executing program 0 (id=92): futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) openat$khugepaged_scan(0xffffff9c, 0x0, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) socket(0xa, 0x1, 0x1000) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000780)={0x24, &(0x7f0000000400)={0x40, 0xa, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 1.049188241s ago: executing program 2 (id=93): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f0000000200)=[{0xe4, 0x2239, 0x0, 0x0}, {0x101, 0x201, 0x0, 0x0}], 0x2}) 1.048144053s ago: executing program 1 (id=94): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x6, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x0, 0x5, 0x2, 0x0, 0x6, 0x0, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x9000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1000001, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0x1d, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d80)={'syz0\x00', {0xb, 0x3, 0x4, 0x9}, 0x3, [0xfffff47e, 0x0, 0x0, 0x3, 0xf, 0x0, 0x7ff, 0xa, 0x5, 0x3, 0x5, 0x40, 0x1, 0x1, 0x7, 0x6, 0x0, 0x7, 0x1, 0xdef, 0x9, 0x7, 0x200, 0x5, 0x73c, 0x5, 0x4, 0x7f, 0x4, 0x6, 0xfffffff9, 0x8, 0x6, 0x4, 0x7, 0x7, 0x1939, 0x8, 0x7, 0x2, 0xe12c, 0x8162, 0x4, 0x3, 0x1, 0x41, 0x7, 0x10000, 0x101, 0x8, 0xc000, 0x6, 0x4, 0x4, 0x5, 0x6, 0xfff, 0x0, 0x104, 0xf8ad, 0x2, 0x3, 0x7fffdfff], [0xfffffff8, 0xff, 0x4, 0x8, 0x1e0f, 0xfffffff7, 0x5, 0x7, 0xffffffff, 0x0, 0x6, 0x100, 0x8, 0xe63, 0x1, 0xa3a5, 0x2, 0x2, 0xb9, 0x6, 0x3, 0x43d, 0x6, 0xe, 0x4, 0x3, 0x6, 0x9, 0x1, 0x11, 0x5, 0x4, 0x8, 0x30000, 0x81, 0xfffffe00, 0x0, 0x10001, 0x7ff, 0x9, 0x8, 0xffffa467, 0x5, 0xfffffffb, 0x0, 0xff, 0x9, 0x6aac, 0x0, 0x3, 0x4, 0xfff, 0x200, 0xc1a, 0xe456, 0x100, 0x2, 0x0, 0x1c00000, 0x6, 0x3, 0xfffffff6, 0xffff1068, 0xffff9241], [0x9, 0x611, 0x6, 0xff, 0x101, 0x5, 0x0, 0x2, 0x80000001, 0x96, 0x7, 0x1, 0xfffffffa, 0x1, 0x4, 0xfb, 0x10001, 0x8, 0x8, 0x3, 0x1, 0x100001, 0x1, 0x7, 0x3, 0x40000000, 0x8, 0x3, 0x5, 0x3, 0xb89, 0xf, 0x0, 0x9, 0x3, 0xff, 0x0, 0x2, 0x1ff, 0x4501, 0x9, 0x0, 0x9, 0x7, 0x966, 0x6, 0x10000, 0xf, 0xffffffff, 0x9, 0xe2, 0x1, 0x8, 0x1, 0x8, 0x3ff, 0x5, 0xfffeffff, 0x3, 0x0, 0x80, 0x6, 0x7, 0xc], [0x5, 0x7f, 0x7, 0x9, 0x2, 0x6, 0x45c, 0x5, 0xab73, 0x5, 0x7, 0x0, 0x5, 0xed5a, 0x9, 0x4, 0x9, 0x8, 0x8, 0x3, 0xeb, 0x6, 0x5, 0xff, 0xffffffff, 0x7fff, 0x4, 0xcb7, 0xa3, 0xffff, 0x8, 0x80000000, 0x3, 0x1ff, 0xfffff26e, 0xf81e, 0x6, 0x9, 0x3, 0x8, 0x5, 0xe5, 0x2, 0x4, 0x4, 0x3, 0x0, 0xfffffff9, 0x7, 0x1ff, 0x204000, 0x5, 0x80, 0x9, 0x7, 0x5078, 0xd, 0x8001, 0x8000, 0x3000000, 0x200, 0x45, 0x0, 0x3]}, 0x45c) 1.015571868s ago: executing program 3 (id=95): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) link(0x0, &(0x7f0000000400)='./file0/../file0/file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x20804, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x9, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x3, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r2], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 786.343984ms ago: executing program 4 (id=96): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) dup(r0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) 765.200695ms ago: executing program 1 (id=97): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x20, 0x55, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) syz_io_uring_setup(0x62d1, &(0x7f0000000380)={0x0, 0xd981, 0x0, 0x2, 0x21b}, &(0x7f00000000c0), 0x0) write$dsp(r4, &(0x7f0000000200)="97", 0x1) 635.491765ms ago: executing program 4 (id=98): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x0, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 299.375724ms ago: executing program 3 (id=99): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) close(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r1, 0x0, 0x11, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000280)="d7e709134e97914c36c08652714aed2032e040ba020c8049f1bfcf8aed01fb1c2a96a76aeee894f34e4ac0b60b429f64b21cfd49810c4b1a796c28bdbb94c4cc8383c377017146ff13bdbb56159951b2d5eb32ad69c1448395c4f4a0c998ae7d49ce30ce7d9c6852b20509fdf2de442fae1123ff97a1de4c6d50486f296c7ffb4c46212252fd3f0fb10056c507c9ebcc2a2e", 0x92}, {&(0x7f0000000980)="3ecc3b467122aff45ce455916ee99a1a60102fa65fc6415f62d4a03bd3d66707274560a9f42246aece1ac3630bb85de1a8153395d932ef09b56995123ba21de6ad3c5a3919aaa222d78bceba9631275c9384e015cfffa0ac6c0838e5ac5c4c4529ae2907d7e474aaf506827c6a5d545bd35818b4c4c6d8521931025abec25d7bef7599da432e2d11f09e4da9f80b13e35c778242d1bfadabf5eb4afab4ca538b06", 0xa1}, {0x0}, {&(0x7f0000000100)="4acc7a53afdb8ce5e18d10f98104b6ace442d7f7ebc367b9", 0x18}, {&(0x7f0000000a40)="88b12ebdb3c1baec2d17288efe23802c64c9bae0a0f81e30eeb7207cfa90a5f70ff79d1490393827ff9baf8ac2042f3b75cf8507624440465e980efd9a060dd526c4ab4c2e24a08fffa2a78604a066", 0x4f}, {&(0x7f00000003c0)="14eb84d9e99a76f975a313907eacc13f1c573dfda32f16b8a582e8146cc52d4e042d56662bf09d4c14b7eb56e82f29b5926765f9fec2f167e9899979901654927fb49b79fbe4c6868a1889a409a994a8d5671bee3b2aa6d9d9575894427e7020e3d632a2433a18580a502feb9a0a6102fa0a2a1493755b8bbe680af9bfc92f60faf11b80851f78e12ea30b8b", 0x8c}, {&(0x7f00000004c0)="f70d20f86f8877ac67c76caaae15d8a234be452c3dd0b89653499e9fa69bc2b6ce37a68e943d87b1b68456cb8a40a98b7e71", 0x32}, {&(0x7f0000000580)="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", 0xff}], 0x8, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xfce1) fchmod(r0, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)={0x40, 0x17, 0x11, "0a248c0291390e000000005e9ccddd623b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x14, &(0x7f00000001c0), 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 0s ago: executing program 4 (id=100): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 81.232100][ T5817] cgroup: Unknown subsys name 'net' [ 81.342498][ T5817] cgroup: Unknown subsys name 'cpuset' [ 81.352144][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.966257][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.409064][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.417555][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.425375][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.433568][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.441887][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.460989][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.478650][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.486762][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.502215][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.510251][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.610972][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.619471][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.627096][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.638974][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.646912][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.669628][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.677397][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.685111][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.699797][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.710679][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.719415][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.727823][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.735881][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.748463][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.782440][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.268049][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 86.511489][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 86.645054][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 86.676298][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.684937][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.692917][ T5829] bridge_slave_0: entered allmulticast mode [ 86.702293][ T5829] bridge_slave_0: entered promiscuous mode [ 86.750537][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.757868][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.765650][ T5829] bridge_slave_1: entered allmulticast mode [ 86.773590][ T5829] bridge_slave_1: entered promiscuous mode [ 86.782044][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.883683][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 87.014219][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.022130][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.030067][ T5838] bridge_slave_0: entered allmulticast mode [ 87.038817][ T5838] bridge_slave_0: entered promiscuous mode [ 87.048835][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.056182][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.063577][ T5838] bridge_slave_1: entered allmulticast mode [ 87.072423][ T5838] bridge_slave_1: entered promiscuous mode [ 87.085907][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.180470][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.220733][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.229424][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.236783][ T5833] bridge_slave_0: entered allmulticast mode [ 87.252572][ T5833] bridge_slave_0: entered promiscuous mode [ 87.269628][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.284565][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.346940][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.355186][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.362966][ T5833] bridge_slave_1: entered allmulticast mode [ 87.371024][ T5833] bridge_slave_1: entered promiscuous mode [ 87.461387][ T5829] team0: Port device team_slave_0 added [ 87.503904][ T5838] team0: Port device team_slave_0 added [ 87.513030][ T5829] team0: Port device team_slave_1 added [ 87.529069][ T5835] Bluetooth: hci0: command tx timeout [ 87.539564][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.546891][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.554271][ T5837] bridge_slave_0: entered allmulticast mode [ 87.562457][ T5837] bridge_slave_0: entered promiscuous mode [ 87.575414][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.590440][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.603413][ T5838] team0: Port device team_slave_1 added [ 87.609153][ T5835] Bluetooth: hci1: command tx timeout [ 87.640201][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.647583][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.655510][ T5837] bridge_slave_1: entered allmulticast mode [ 87.663460][ T5837] bridge_slave_1: entered promiscuous mode [ 87.727686][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.735106][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.742518][ T5839] bridge_slave_0: entered allmulticast mode [ 87.750614][ T5839] bridge_slave_0: entered promiscuous mode [ 87.759480][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.766791][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.774190][ T5835] Bluetooth: hci3: command tx timeout [ 87.774597][ T5844] Bluetooth: hci2: command tx timeout [ 87.782414][ T5839] bridge_slave_1: entered allmulticast mode [ 87.793728][ T5839] bridge_slave_1: entered promiscuous mode [ 87.831599][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.838615][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.850211][ T5844] Bluetooth: hci4: command tx timeout [ 87.865358][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.883919][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.891009][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.917083][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.930613][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.937680][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.964066][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.005230][ T5833] team0: Port device team_slave_0 added [ 88.013086][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.020159][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.046420][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.086976][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.099561][ T5833] team0: Port device team_slave_1 added [ 88.134365][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.147686][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.220506][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.253384][ T5837] team0: Port device team_slave_0 added [ 88.261255][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.268364][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.294541][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.312840][ T5829] hsr_slave_0: entered promiscuous mode [ 88.320284][ T5829] hsr_slave_1: entered promiscuous mode [ 88.356983][ T5837] team0: Port device team_slave_1 added [ 88.364470][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.371814][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.397928][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.477290][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.484320][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.510471][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.527810][ T5839] team0: Port device team_slave_0 added [ 88.541171][ T5838] hsr_slave_0: entered promiscuous mode [ 88.548733][ T5838] hsr_slave_1: entered promiscuous mode [ 88.555459][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 88.561717][ T5838] Cannot create hsr debugfs directory [ 88.593347][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.600662][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.626757][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.641217][ T5839] team0: Port device team_slave_1 added [ 88.698708][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.705786][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.732208][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.778270][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.785262][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.811331][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.936796][ T5833] hsr_slave_0: entered promiscuous mode [ 88.945186][ T5833] hsr_slave_1: entered promiscuous mode [ 88.952841][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 88.958805][ T5833] Cannot create hsr debugfs directory [ 88.984184][ T5837] hsr_slave_0: entered promiscuous mode [ 88.992048][ T5837] hsr_slave_1: entered promiscuous mode [ 88.999003][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 89.004756][ T5837] Cannot create hsr debugfs directory [ 89.218412][ T5839] hsr_slave_0: entered promiscuous mode [ 89.225359][ T5839] hsr_slave_1: entered promiscuous mode [ 89.232271][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 89.238043][ T5839] Cannot create hsr debugfs directory [ 89.608328][ T5844] Bluetooth: hci0: command tx timeout [ 89.688413][ T5844] Bluetooth: hci1: command tx timeout [ 89.717502][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.731455][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.743210][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.772969][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.849073][ T5844] Bluetooth: hci2: command tx timeout [ 89.854543][ T5844] Bluetooth: hci3: command tx timeout [ 89.873451][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.887648][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.902976][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.928778][ T5844] Bluetooth: hci4: command tx timeout [ 89.936897][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.043774][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.068398][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.082223][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.096067][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.225853][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.242666][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.256809][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.273891][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.281037][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.419265][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.432608][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.452645][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.465430][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.477300][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.533940][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.541284][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.554113][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.561333][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.614149][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.743999][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.826153][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.844280][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.851547][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.896051][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.903290][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.977073][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.047243][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.084840][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.092039][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.123257][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.144493][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.151725][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.182289][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.189696][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.207332][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.233250][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.240499][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.267687][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.373424][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.460043][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.467194][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.494904][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.502559][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.614622][ T5829] veth0_vlan: entered promiscuous mode [ 91.689505][ T5844] Bluetooth: hci0: command tx timeout [ 91.716795][ T5829] veth1_vlan: entered promiscuous mode [ 91.773038][ T5844] Bluetooth: hci1: command tx timeout [ 91.784178][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.914328][ T5829] veth0_macvtap: entered promiscuous mode [ 91.930116][ T5844] Bluetooth: hci3: command tx timeout [ 91.935584][ T5844] Bluetooth: hci2: command tx timeout [ 91.943856][ T5829] veth1_macvtap: entered promiscuous mode [ 92.008822][ T5844] Bluetooth: hci4: command tx timeout [ 92.020943][ T988] cfg80211: failed to load regulatory.db [ 92.152494][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.219320][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.227491][ T5838] veth0_vlan: entered promiscuous mode [ 92.243385][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.265289][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.293578][ T5838] veth1_vlan: entered promiscuous mode [ 92.324298][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.332667][ T1165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.344229][ T1165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.390937][ T1165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.430857][ T1165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.555895][ T5838] veth0_macvtap: entered promiscuous mode [ 92.634382][ T5838] veth1_macvtap: entered promiscuous mode [ 92.644261][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.653869][ T5833] veth0_vlan: entered promiscuous mode [ 92.664101][ T5837] veth0_vlan: entered promiscuous mode [ 92.683529][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.749432][ T5833] veth1_vlan: entered promiscuous mode [ 92.792354][ T5837] veth1_vlan: entered promiscuous mode [ 92.804462][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.820103][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.832680][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.862877][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.912485][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.939301][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.965627][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.985944][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.002166][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.014229][ T5833] veth0_macvtap: entered promiscuous mode [ 93.040460][ T5837] veth0_macvtap: entered promiscuous mode [ 93.064038][ T5833] veth1_macvtap: entered promiscuous mode [ 93.122968][ T5837] veth1_macvtap: entered promiscuous mode [ 93.225740][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.244839][ T5839] veth0_vlan: entered promiscuous mode [ 93.344126][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.359633][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.385993][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.410209][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.422937][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.446653][ T5839] veth1_vlan: entered promiscuous mode [ 93.473140][ T5958] syz_tun: entered allmulticast mode [ 93.501785][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.510937][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.551582][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.560489][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.593721][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.604707][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.653284][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.676524][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.686898][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.712062][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.768694][ T5844] Bluetooth: hci0: command tx timeout [ 93.784666][ T5839] veth0_macvtap: entered promiscuous mode [ 93.845643][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.858692][ T5844] Bluetooth: hci1: command tx timeout [ 93.865581][ T5839] veth1_macvtap: entered promiscuous mode [ 93.883584][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.981978][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.008800][ T5844] Bluetooth: hci2: command tx timeout [ 94.014267][ T5844] Bluetooth: hci3: command tx timeout [ 94.021835][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.064670][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.088681][ T5844] Bluetooth: hci4: command tx timeout [ 94.133862][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.142900][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.158626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.258044][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.481625][ T5971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.543150][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.562379][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.636318][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.759161][ T5979] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 94.786977][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.839277][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.891666][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.157931][ T5983] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.259935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.528474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.630989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.839433][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.888750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.899726][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.908509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.916854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.925604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.935531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.944168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.130192][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.161976][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.490654][ T5989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.564576][ T5987] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 96.609521][ T5987] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 96.661246][ T5987] Zero length message leads to an empty skb [ 97.511971][ T5997] tipc: Started in network mode [ 97.517952][ T5997] tipc: Node identity a67aeaf0c712, cluster identity 4711 [ 97.549034][ T5997] tipc: Enabled bearer , priority 0 [ 97.582961][ T6002] syzkaller0: entered promiscuous mode [ 97.758658][ T6002] syzkaller0: entered allmulticast mode [ 97.842448][ T5997] tipc: Resetting bearer [ 97.878942][ T5840] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.059759][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 98.105624][ T5840] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 98.118364][ T5900] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.140850][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.162605][ T5840] usb 1-1: Product: syz [ 98.167547][ T5840] usb 1-1: Manufacturer: syz [ 98.173373][ T5840] usb 1-1: SerialNumber: syz [ 98.184914][ T5840] usb 1-1: config 0 descriptor?? [ 98.207467][ T5840] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 98.216290][ T5840] dvb-usb: bulk message failed: -22 (4/0) [ 98.224935][ T5840] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 98.308404][ T5900] usb 4-1: device descriptor read/64, error -71 [ 98.342938][ T5840] dvb-usb: bulk message failed: -22 (5/0) [ 98.349001][ T5840] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 98.374005][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.386409][ T5840] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 98.414631][ T6000] dvb-usb: bulk message failed: -22 (7/0) [ 98.432768][ T6000] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 98.450240][ T5840] usb 1-1: media controller created [ 98.484932][ T6000] ttusb2: i2c transfer failed. [ 98.522731][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.549429][ T5921] tipc: Node number set to 1634265840 [ 98.581365][ T5840] usb 1-1: selecting invalid altsetting 3 [ 98.597557][ T5900] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.605888][ T5840] ttusb2: set interface to alts=3 failed [ 98.850540][ T5840] DVB: Unable to find symbol tda10086_attach() [ 98.856790][ T5840] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 98.865012][ T5900] usb 4-1: device descriptor read/64, error -71 [ 99.002442][ T5900] usb usb4-port1: attempt power cycle [ 99.030318][ T5840] dvb-usb: bulk message failed: -22 (4/0) [ 99.036121][ T5840] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 99.059367][ T5840] dvb-usb: bulk message failed: -22 (5/0) [ 99.065766][ T5840] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 99.096031][ T5840] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 99.170044][ T5840] usb 1-1: USB disconnect, device number 2 [ 99.398232][ T5900] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.536809][ T5900] usb 4-1: device descriptor read/8, error -71 [ 99.551141][ T5840] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 99.818242][ T5900] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.895091][ T5900] usb 4-1: device descriptor read/8, error -71 [ 100.021279][ T5900] usb usb4-port1: unable to enumerate USB device [ 100.217509][ T6031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.607505][ T5997] tipc: Resetting bearer [ 100.715745][ T5997] tipc: Disabling bearer [ 101.780998][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.104262][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 102.114675][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.136191][ T9] usb 5-1: Product: syz [ 102.142602][ T9] usb 5-1: Manufacturer: syz [ 102.151782][ T9] usb 5-1: SerialNumber: syz [ 102.202997][ T9] usb 5-1: config 0 descriptor?? [ 102.248410][ T6045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.438829][ T9] hso 5-1:0.0: Failed to find BULK IN ep [ 102.515470][ T9] usb-storage 5-1:0.0: USB Mass Storage device detected [ 102.837909][ T9] usb 5-1: USB disconnect, device number 2 [ 103.378273][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.492873][ T6070] input: syz0 as /devices/virtual/input/input5 [ 103.610090][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 103.625260][ T5900] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 103.634628][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.655969][ T5900] usb 2-1: Product: syz [ 103.673627][ T5900] usb 2-1: Manufacturer: syz [ 103.691549][ T5900] usb 2-1: SerialNumber: syz [ 103.741615][ T5900] usb 2-1: config 0 descriptor?? [ 103.754842][ T5900] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 103.762612][ T5900] dvb-usb: bulk message failed: -22 (4/0) [ 103.769205][ T5900] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 103.783618][ T5900] dvb-usb: bulk message failed: -22 (5/0) [ 103.791614][ T5900] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 103.839521][ T5926] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.890855][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.938689][ T5900] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 103.947488][ T5900] usb 2-1: media controller created [ 103.966896][ T6060] dvb-usb: bulk message failed: -22 (7/0) [ 103.977599][ T6060] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 103.988316][ T6060] ttusb2: i2c transfer failed. [ 104.058591][ T5926] usb 3-1: config 0 has an invalid interface number: 72 but max is 3 [ 104.067131][ T5926] usb 3-1: config 0 has an invalid interface number: 98 but max is 3 [ 104.076290][ T5926] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 104.092778][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.213329][ T5926] usb 3-1: config 0 has no interface number 1 [ 104.228355][ T5926] usb 3-1: config 0 has no interface number 2 [ 104.247359][ T5926] usb 3-1: config 0 interface 72 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 104.588267][ T5926] usb 3-1: config 0 interface 72 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 104.608313][ T5926] usb 3-1: config 0 interface 72 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 104.618296][ T5926] usb 3-1: config 0 interface 72 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.628355][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 104.702756][ T5900] usb 2-1: selecting invalid altsetting 3 [ 104.718206][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.719602][ T5900] ttusb2: set interface to alts=3 failed [ 104.794450][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.918256][ T5926] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 105.162771][ T6079] netlink: 'syz.3.32': attribute type 21 has an invalid length. [ 105.170681][ T6079] netlink: 156 bytes leftover after parsing attributes in process `syz.3.32'. [ 105.192598][ T6079] binder: 6075:6079 ioctl 40046205 0 returned -22 [ 105.244236][ T5926] usb 3-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=13.03 [ 105.264631][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.278914][ T5900] DVB: Unable to find symbol tda10086_attach() [ 105.284328][ T5926] usb 3-1: Product: syz [ 105.309822][ T5926] usb 3-1: Manufacturer: syz [ 105.314638][ T5926] usb 3-1: SerialNumber: syz [ 105.334891][ T5900] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 105.379518][ T5900] dvb-usb: bulk message failed: -22 (4/0) [ 105.394347][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 105.427586][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 105.436687][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 105.458357][ T5900] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 105.476120][ T6090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.556457][ T6088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33'. [ 105.621128][ T5900] dvb-usb: bulk message failed: -22 (5/0) [ 105.647265][ T5900] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 105.659411][ T5926] usb 3-1: config 0 descriptor?? [ 105.701941][ T5900] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 105.720858][ T5926] s2255 3-1:0.72: Could not find bulk-in endpoint [ 105.832707][ T5926] Sensoray 2255 driver load failed: 0xfffffff4 [ 105.839157][ T5926] s2255 3-1:0.72: probe with driver s2255 failed with error -12 [ 105.852244][ T5926] s2255 3-1:0.98: Could not find bulk-in endpoint [ 105.859405][ T5926] Sensoray 2255 driver load failed: 0xfffffff4 [ 105.865619][ T5926] s2255 3-1:0.98: probe with driver s2255 failed with error -12 [ 105.880473][ T5926] s2255 3-1:0.0: Could not find bulk-in endpoint [ 105.887054][ T5926] Sensoray 2255 driver load failed: 0xfffffff4 [ 105.893574][ T5926] s2255 3-1:0.0: probe with driver s2255 failed with error -12 [ 105.906069][ T5900] usb 2-1: USB disconnect, device number 2 [ 106.100350][ T5900] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 106.471803][ T5900] usb 3-1: USB disconnect, device number 2 [ 107.193586][ T6101] loop7: detected capacity change from 0 to 16384 [ 107.361494][ T29] audit: type=1326 audit(1771715295.682:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.2.39" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f283e39c629 code=0x0 [ 107.488579][ T5921] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.700553][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.741889][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.774587][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 107.811832][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.937895][ T5921] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.982752][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.017209][ T5921] usb 5-1: config 0 descriptor?? [ 108.553355][ T5921] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 108.594686][ T6120] netlink: 64 bytes leftover after parsing attributes in process `syz.2.44'. [ 108.711680][ T5926] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.735700][ T6101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.748914][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.882044][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 108.899529][ T5926] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 109.111728][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.134445][ T5926] usb 2-1: Product: syz [ 109.257227][ T5926] usb 2-1: Manufacturer: syz [ 109.267572][ T5926] usb 2-1: SerialNumber: syz [ 109.299351][ T5926] usb 2-1: config 0 descriptor?? [ 109.378020][ T5926] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 109.398349][ T5926] dvb-usb: bulk message failed: -22 (4/0) [ 109.407498][ T5926] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 109.420642][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 109.427177][ T5926] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 109.464318][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.482327][ T5926] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 109.494845][ T5926] usb 2-1: media controller created [ 109.530418][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.596764][ T988] usb 5-1: USB disconnect, device number 3 [ 109.654598][ T5926] usb 2-1: selecting invalid altsetting 3 [ 109.667064][ T5926] ttusb2: set interface to alts=3 failed [ 109.802113][ T5926] DVB: Unable to find symbol tda10086_attach() [ 109.808633][ T5926] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 109.826750][ T5926] dvb-usb: bulk message failed: -22 (4/0) [ 109.838074][ T5926] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 109.855560][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 109.867155][ T5926] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 109.973220][ T5926] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 109.989923][ T5926] usb 2-1: USB disconnect, device number 3 [ 110.035765][ T5926] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 110.112796][ T6130] input: syz0 as /devices/virtual/input/input7 [ 110.748882][ T6141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.50'. [ 111.898435][ T5921] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.015002][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 112.078359][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 112.157586][ T5921] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 112.183047][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.208364][ T5921] usb 2-1: Product: syz [ 112.248943][ T5921] usb 2-1: Manufacturer: syz [ 112.255204][ T5921] usb 2-1: SerialNumber: syz [ 112.274452][ T5921] usb 2-1: config 0 descriptor?? [ 112.388487][ T5921] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 112.423065][ T5921] dvb-usb: bulk message failed: -22 (4/0) [ 112.441371][ T5921] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 112.511882][ T5921] dvb-usb: bulk message failed: -22 (5/0) [ 112.575267][ T5921] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 112.664004][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.696060][ T5921] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 112.763672][ T5921] usb 2-1: media controller created [ 112.799889][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.905410][ T5921] usb 2-1: selecting invalid altsetting 3 [ 112.925969][ T5921] ttusb2: set interface to alts=3 failed [ 113.025784][ T5921] DVB: Unable to find symbol tda10086_attach() [ 113.058279][ T5921] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 113.202998][ T6178] input: syz1 as /devices/virtual/input/input8 [ 113.218711][ T5921] dvb-usb: bulk message failed: -22 (4/0) [ 113.234895][ T5921] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 113.271060][ T5921] dvb-usb: bulk message failed: -22 (5/0) [ 113.285147][ T5921] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 113.308740][ T5921] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 113.419507][ T5921] usb 2-1: USB disconnect, device number 4 [ 113.635250][ T5921] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 114.741507][ T6200] input: syz0 as /devices/virtual/input/input9 [ 115.708619][ T5921] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.770882][ T29] audit: type=1326 audit(1771715304.092:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.2.79" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f283e39c629 code=0x0 [ 115.888278][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 115.964551][ T5921] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 115.974979][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.987398][ T6218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.008709][ T5921] usb 2-1: Product: syz [ 116.014790][ T5921] usb 2-1: Manufacturer: syz [ 116.019858][ T5921] usb 2-1: SerialNumber: syz [ 116.026626][ T5921] usb 2-1: config 0 descriptor?? [ 116.056481][ T5921] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 116.424885][ T5921] dvb-usb: bulk message failed: -22 (4/0) [ 116.459767][ T5921] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 116.490711][ T5921] dvb-usb: bulk message failed: -22 (5/0) [ 116.506875][ T5921] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 116.553212][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.602945][ T5921] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 116.682121][ T5921] usb 2-1: media controller created [ 116.843066][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.931679][ T5921] usb 2-1: selecting invalid altsetting 3 [ 116.960813][ T5921] ttusb2: set interface to alts=3 failed [ 117.174878][ T5921] DVB: Unable to find symbol tda10086_attach() [ 117.277955][ T5921] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 117.461614][ T6239] raw_sendmsg: syz.4.84 forgot to set AF_INET. Fix it! [ 117.472567][ T6239] netlink: 'syz.4.84': attribute type 10 has an invalid length. [ 117.499932][ T5921] dvb-usb: bulk message failed: -22 (4/0) [ 117.514946][ T5921] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 117.566490][ T6239] team0: Port device syz_tun added [ 117.649527][ T5921] dvb-usb: bulk message failed: -22 (5/0) [ 117.655660][ T5921] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 117.668797][ T5921] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 117.690756][ T5921] usb 2-1: USB disconnect, device number 5 [ 118.013014][ T5921] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 119.316477][ T6264] input: syz0 as /devices/virtual/input/input10 [ 119.418258][ T6266] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.461177][ T5840] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.528622][ T5921] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.656458][ T5840] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 119.676995][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.686276][ T5840] usb 1-1: Product: syz [ 119.690819][ T5840] usb 1-1: Manufacturer: syz [ 119.696216][ T5840] usb 1-1: SerialNumber: syz [ 119.714002][ T5840] usb 1-1: config 0 descriptor?? [ 119.882420][ T5840] hub 1-1:0.0: bad descriptor, ignoring hub [ 119.888651][ T5840] hub 1-1:0.0: probe with driver hub failed with error -5 [ 119.910935][ T6276] tipc: Started in network mode [ 119.915836][ T6276] tipc: Node identity 362a7b434b0f, cluster identity 4711 [ 119.933932][ T6276] tipc: Enabled bearer , priority 0 [ 119.957038][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 119.976284][ T5840] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 119.990214][ T5921] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 120.002888][ T6276] tipc: Resetting bearer [ 120.018967][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.039838][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.060229][ T5840] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 120.102024][ T5921] usb 3-1: Product: syz [ 120.107770][ T5840] usb 1-1: media controller created [ 120.121111][ T5921] usb 3-1: Manufacturer: syz [ 120.130332][ T6272] tipc: Disabling bearer [ 120.132278][ T5921] usb 3-1: SerialNumber: syz [ 120.166177][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.175065][ T5921] usb 3-1: config 0 descriptor?? [ 120.190960][ T5921] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 120.218429][ T5921] dvb-usb: bulk message failed: -22 (4/0) [ 120.225763][ T5921] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 120.237156][ T5921] dvb-usb: bulk message failed: -22 (5/0) [ 120.243284][ T5921] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 120.289144][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.316775][ T5921] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 120.337604][ T5921] usb 3-1: media controller created [ 120.365030][ T5840] DVB: Unable to find symbol dib7000p_attach() [ 120.380219][ T5840] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 120.392710][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.394747][ T6262] ------------[ cut here ]------------ [ 120.406975][ T6262] usb 1-1: BOGUS control dir, pipe 80000380 doesn't match bRequestType c0 [ 120.416112][ T6262] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.2.93/6262 [ 120.426504][ T6262] Modules linked in: [ 120.430676][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT(full) [ 120.440251][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.450659][ T6262] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 120.456317][ T6262] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 120.475991][ T6262] RSP: 0018:ffffc900063ef948 EFLAGS: 00010246 [ 120.482147][ T6262] RAX: 0000000000000000 RBX: ffff8880347d5d00 RCX: 0000000080000380 [ 120.490178][ T6262] RDX: ffff8880372d2640 RSI: ffffffff8c7f3960 RDI: ffffffff901f0630 [ 120.498197][ T6262] RBP: 1ffff11006d12cb8 R08: 00000000000000c0 R09: 0000000000000000 [ 120.506195][ T6262] R10: ffffc900063efa40 R11: fffff52000c7df54 R12: ffff88806bbdd100 [ 120.514666][ T6262] R13: ffff8880368965c0 R14: 0000000080000380 R15: ffff8880372d2640 [ 120.522966][ T6262] FS: 00007f283c5f66c0(0000) GS:ffff888125555000(0000) knlGS:0000000000000000 [ 120.531962][ T6262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.538659][ T6262] CR2: 000000110c274f24 CR3: 0000000076ada000 CR4: 00000000003526f0 [ 120.546654][ T6262] Call Trace: [ 120.549975][ T6262] [ 120.552925][ T6262] ? __init_swait_queue_head+0xa9/0x150 [ 120.558560][ T6262] usb_start_wait_urb+0x12b/0x510 [ 120.563673][ T6262] ? rcu_is_watching+0x15/0xb0 [ 120.568536][ T6262] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 120.574105][ T6262] ? trace_kmalloc+0x2a/0x110 [ 120.578855][ T6262] usb_control_msg+0x232/0x3e0 [ 120.583659][ T6262] dib0700_i2c_xfer+0xbb2/0xf80 [ 120.588587][ T6262] __i2c_transfer+0x79a/0x2020 [ 120.593368][ T6262] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.599220][ T6262] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 120.605051][ T6262] ? i2c_transfer+0xc8/0x2d0 [ 120.609689][ T6262] i2c_transfer+0x1cc/0x2d0 [ 120.614223][ T6262] i2cdev_ioctl_rdwr+0x460/0x740 [ 120.619647][ T6262] i2cdev_ioctl+0x6a5/0x880 [ 120.625768][ T6262] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 120.630948][ T6262] ? __fget_files+0x3a0/0x420 [ 120.635675][ T6262] ? __fget_files+0x2a/0x420 [ 120.640342][ T6262] ? bpf_lsm_file_ioctl+0x9/0x20 [ 120.645299][ T6262] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 120.651070][ T6262] __se_sys_ioctl+0xfc/0x170 [ 120.655692][ T6262] do_syscall_64+0x14d/0xf80 [ 120.660345][ T6262] ? trace_irq_disable+0x3b/0x150 [ 120.665394][ T6262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.671504][ T6262] ? clear_bhb_loop+0x40/0x90 [ 120.676204][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.682158][ T6262] RIP: 0033:0x7f283e39c629 [ 120.686599][ T6262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.706518][ T6262] RSP: 002b:00007f283c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.714983][ T6262] RAX: ffffffffffffffda RBX: 00007f283e615fa0 RCX: 00007f283e39c629 [ 120.723262][ T6262] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 120.731732][ T6262] RBP: 00007f283e432b39 R08: 0000000000000000 R09: 0000000000000000 [ 120.739973][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.747974][ T6262] R13: 00007f283e616038 R14: 00007f283e615fa0 R15: 00007fffe9c1ba18 [ 120.756095][ T6262] [ 120.759166][ T6262] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.766538][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT(full) [ 120.775653][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.785824][ T6262] Call Trace: [ 120.789139][ T6262] [ 120.792102][ T6262] vpanic+0x56c/0xa60 [ 120.796117][ T6262] ? __pfx__printk+0x10/0x10 [ 120.800729][ T6262] ? __pfx_vpanic+0x10/0x10 [ 120.805247][ T6262] ? is_bpf_text_address+0x292/0x2b0 [ 120.810562][ T6262] ? is_bpf_text_address+0x26/0x2b0 [ 120.815816][ T6262] panic+0xc5/0xd0 [ 120.819597][ T6262] ? __pfx_panic+0x10/0x10 [ 120.824070][ T6262] __warn+0x315/0x4f0 [ 120.828078][ T6262] ? usb_submit_urb+0x1052/0x18b0 [ 120.833365][ T6262] ? usb_submit_urb+0x1052/0x18b0 [ 120.838453][ T6262] __report_bug+0x29a/0x540 [ 120.843001][ T6262] ? usb_submit_urb+0x1052/0x18b0 [ 120.848068][ T6262] ? __pfx___report_bug+0x10/0x10 [ 120.853151][ T6262] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.858371][ T6262] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 120.864286][ T6262] report_bug_entry+0x19a/0x290 [ 120.869166][ T6262] ? usb_submit_urb+0x1114/0x18b0 [ 120.874216][ T6262] ? usb_submit_urb+0x1119/0x18b0 [ 120.879263][ T6262] handle_bug+0xca/0x200 [ 120.883528][ T6262] exc_invalid_op+0x1a/0x50 [ 120.888050][ T6262] asm_exc_invalid_op+0x1a/0x20 [ 120.892929][ T6262] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 120.898572][ T6262] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 120.918197][ T6262] RSP: 0018:ffffc900063ef948 EFLAGS: 00010246 [ 120.924298][ T6262] RAX: 0000000000000000 RBX: ffff8880347d5d00 RCX: 0000000080000380 [ 120.932328][ T6262] RDX: ffff8880372d2640 RSI: ffffffff8c7f3960 RDI: ffffffff901f0630 [ 120.940314][ T6262] RBP: 1ffff11006d12cb8 R08: 00000000000000c0 R09: 0000000000000000 [ 120.948299][ T6262] R10: ffffc900063efa40 R11: fffff52000c7df54 R12: ffff88806bbdd100 [ 120.956292][ T6262] R13: ffff8880368965c0 R14: 0000000080000380 R15: ffff8880372d2640 [ 120.964370][ T6262] ? usb_submit_urb+0x10a3/0x18b0 [ 120.969413][ T6262] ? __init_swait_queue_head+0xa9/0x150 [ 120.974968][ T6262] usb_start_wait_urb+0x12b/0x510 [ 120.980040][ T6262] ? rcu_is_watching+0x15/0xb0 [ 120.984895][ T6262] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 120.990467][ T6262] ? trace_kmalloc+0x2a/0x110 [ 120.995195][ T6262] usb_control_msg+0x232/0x3e0 [ 120.999980][ T6262] dib0700_i2c_xfer+0xbb2/0xf80 [ 121.004869][ T6262] __i2c_transfer+0x79a/0x2020 [ 121.009647][ T6262] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 121.015464][ T6262] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 121.021287][ T6262] ? i2c_transfer+0xc8/0x2d0 [ 121.025902][ T6262] i2c_transfer+0x1cc/0x2d0 [ 121.030451][ T6262] i2cdev_ioctl_rdwr+0x460/0x740 [ 121.035407][ T6262] i2cdev_ioctl+0x6a5/0x880 [ 121.039916][ T6262] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 121.044954][ T6262] ? __fget_files+0x3a0/0x420 [ 121.049804][ T6262] ? __fget_files+0x2a/0x420 [ 121.054429][ T6262] ? bpf_lsm_file_ioctl+0x9/0x20 [ 121.059451][ T6262] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 121.064512][ T6262] __se_sys_ioctl+0xfc/0x170 [ 121.069129][ T6262] do_syscall_64+0x14d/0xf80 [ 121.073744][ T6262] ? trace_irq_disable+0x3b/0x150 [ 121.078785][ T6262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.084888][ T6262] ? clear_bhb_loop+0x40/0x90 [ 121.089607][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.095519][ T6262] RIP: 0033:0x7f283e39c629 [ 121.099954][ T6262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.119569][ T6262] RSP: 002b:00007f283c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.128110][ T6262] RAX: ffffffffffffffda RBX: 00007f283e615fa0 RCX: 00007f283e39c629 [ 121.136116][ T6262] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 121.144105][ T6262] RBP: 00007f283e432b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.152101][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.160081][ T6262] R13: 00007f283e616038 R14: 00007f283e615fa0 R15: 00007fffe9c1ba18 [ 121.168078][ T6262] [ 121.171744][ T6262] Kernel Offset: disabled [ 121.176087][ T6262] Rebooting in 86400 seconds..