last executing test programs: 26.589384701s ago: executing program 3 (id=31): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x400000, 0x0, 0x4}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x2000008, 0x50, 0xffffffffffffffff, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001540)) ioctl$VHOST_NET_SET_BACKEND(r7, 0xaf02, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 22.260624789s ago: executing program 0 (id=35): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x3, 0x1, 0x1, 0x0, 0x1, 0xffffffff, 0x7, r6}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000300)={r6}, &(0x7f0000000440)=0x8) socket$inet6(0xa, 0x800000000000002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="86000615200000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) read$midi(r7, &(0x7f00000001c0)=""/70, 0xffffffd8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 22.18814633s ago: executing program 3 (id=36): getpgrp(0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() lseek(0xffffffffffffffff, 0x1fd, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) msgget$private(0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0x304b, 0x1000, 0x6, 0x10030e}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 20.629902009s ago: executing program 3 (id=37): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cdf3dec83502"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/133}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r0, r4}) sendmmsg$inet(r5, 0x0, 0x0, 0x40) 19.290850082s ago: executing program 2 (id=38): openat$sndseq(0xffffffffffffff9c, 0x0, 0x191000) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007240), 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140), 0x5, 0xbc5, &(0x7f0000002380)="$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") symlink(0x0, 0x0) r3 = mq_open(&(0x7f0000000540)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v\xf8\xff\xff\xff\xff\xff\xff\xffr\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xb9f\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb2F\xdf\xcc\xae', 0x40, 0xa8, 0x0) io_uring_enter(r2, 0x4d98, 0xe1d1, 0x31, &(0x7f0000000040)={[0xf23]}, 0x8) lseek(r3, 0x50, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1855415, 0x0, 0x40, 0x0, &(0x7f0000000140)) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/stat\x00') getdents(r4, 0x0, 0x0) 17.495788757s ago: executing program 2 (id=39): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000400000000600000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xa, 0x8440) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000280)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, &(0x7f0000000700), 0x0) 15.196529864s ago: executing program 2 (id=41): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000045c0)) r0 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000100)=0x4, 0x80000000) 14.442913682s ago: executing program 3 (id=42): io_setup(0xc, &(0x7f0000000100)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgsnd(0x0, &(0x7f0000000a00)={0x2, "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"}, 0xfc3, 0x800) r5 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/eem.usb0\x00', 0x1ed) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "bebf6373389a0bd2d940e7e6b82dc811", 0x2}}}, 0x1a) read(0xffffffffffffffff, &(0x7f00000002c0)=""/128, 0x80) sendmmsg$inet6(r5, &(0x7f0000003cc0), 0x0, 0x4001c00) read(0xffffffffffffffff, &(0x7f0000000080)=""/10, 0xa) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0), 0x4) io_destroy(r0) 13.051811537s ago: executing program 0 (id=43): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1bf) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003f00), 0x2, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) dup(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x24) write$uinput_user_dev(r4, &(0x7f0000002600)={'syz0\x00', {0x6, 0x101, 0x4, 0xf3e3}, 0x1, [0x6, 0x0, 0xfffffffc, 0x7f, 0x9d, 0x180000, 0xc5e, 0xe44, 0x652, 0x4, 0x5, 0x8, 0x10000, 0x8, 0x5, 0x7fff, 0x5, 0x3, 0x14f800, 0x7, 0x5, 0x3, 0xd, 0xfffffffe, 0x7, 0xd6, 0x3, 0x4, 0x1, 0x9, 0x5, 0xfffffffc, 0x6b, 0x692082d4, 0x3, 0x101, 0x1, 0xffffffff, 0xd, 0x5, 0xd, 0x0, 0x3, 0x7, 0x3, 0x7, 0x8000, 0x7, 0x4, 0x0, 0x10, 0x80000001, 0x4, 0x7, 0x5, 0x6b, 0xede1, 0x2, 0xfffffffc, 0xdc, 0x9aed, 0x7, 0x7], [0x7, 0x9, 0x2, 0x6, 0x6, 0x7, 0x0, 0xa19, 0x37e78d1b, 0x1, 0x2, 0x6, 0x1, 0x479c, 0x80000001, 0x3, 0x0, 0x8, 0x400, 0x3, 0x18000000, 0x0, 0x1ff, 0x8, 0x7, 0x1, 0x400, 0xffff0770, 0x2, 0x8, 0xffb9, 0x7ff, 0xa0, 0x3, 0x4, 0xffffffff, 0x8, 0x2, 0xd, 0xb, 0x7, 0x9e6, 0x9, 0xa, 0x9, 0x9, 0x3, 0x9, 0x0, 0xb, 0x1, 0x78, 0xff, 0x9, 0x4, 0x81, 0x80000000, 0x2b46, 0x5, 0x80000001, 0x5, 0xce, 0x8001, 0x131f], [0x7, 0x9, 0x3, 0x8, 0x6, 0xc, 0x9, 0x0, 0x8, 0x400, 0xc0000000, 0x4, 0x3, 0x0, 0x1be0, 0x1, 0x0, 0x98f, 0x7, 0x8, 0x0, 0x0, 0xffffff81, 0x7, 0x6, 0xd2, 0x8, 0x0, 0x8, 0x61, 0x2, 0x8, 0x1000, 0x2, 0xfffffff5, 0xfc, 0x6c, 0x6, 0xe1, 0xfffffffb, 0x8001, 0x4, 0x61c4, 0x7fffffff, 0x7, 0x7, 0xfffffffb, 0x1, 0x927c, 0x5, 0x80, 0x7, 0x7, 0x40, 0x3, 0x40000000, 0x8001, 0x8204, 0xffff, 0x5, 0x4, 0x66314d45, 0x7, 0x3], [0x8000, 0x2, 0x8, 0x0, 0x7fff, 0x0, 0xfffffffc, 0x2, 0x4e, 0x5, 0x3, 0x7, 0x6, 0xf0b1, 0x6, 0x1, 0x54, 0x4, 0x5, 0x6, 0x81, 0x9, 0x8, 0xfff, 0x2, 0x2, 0x729e, 0xa51, 0xffffffff, 0x4, 0x9, 0x3ff, 0x3ff, 0x10, 0x0, 0x0, 0x9, 0x4, 0x1, 0x21, 0x4, 0x4, 0x5, 0x3a1, 0x0, 0x1, 0x2, 0x0, 0x4, 0x800, 0x884f, 0x1000, 0xffff, 0x0, 0x9, 0x100, 0x5db8, 0x759ee974, 0x3, 0x5d8, 0xfffffff7, 0xc, 0x4, 0x9]}, 0x45c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0b0) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 12.877408101s ago: executing program 1 (id=44): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x300, 0x1000000}, 0x6, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24040094) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="4700000001003f", 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x10022, 0x0) socket$kcm(0x21, 0x2, 0x2) 12.731246125s ago: executing program 0 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)='\v', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000380)="3c805dd29b8c50ae7c6e3f97a1ec", 0xe}, {&(0x7f0000002380)="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", 0xff1}], 0x2}}], 0x2, 0x4000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) gettid() socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0xe0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) 11.69401179s ago: executing program 1 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x172) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff05, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x10c062) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x10000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @private1, 0x3}], 0x1c) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 10.443783642s ago: executing program 0 (id=47): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0x70b, 0x80000000, 0x0, {0x2, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x5, 0xc}, {0x6, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6, 0xffffffffffffffff}, 0x4) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80080000) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') read$FUSE(r8, &(0x7f0000003680)={0x2020}, 0x2020) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000094000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) msync(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) 9.397018558s ago: executing program 1 (id=48): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) unshare(0x22020400) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='//(\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) bind$tipc(r0, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xffffffff}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000080)='}%{/\x00', 0x1c5a00, &(0x7f0000000180)={@align=0x4, {0xff, 0x6, 0xac5e, 0x1ffffffffffffffe}}, 0x1000, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f00000002c0)=0x8}) 7.738801819s ago: executing program 1 (id=49): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="8500080000000002"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) unlink(&(0x7f0000000300)='./config\x00') 5.959617612s ago: executing program 0 (id=50): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xffffffffffffffff, 0x2000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f00000000c0), 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 5.835952266s ago: executing program 3 (id=51): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x3, 0xa02) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xff7ffffe, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffe, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x4}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x6e, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019a80)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r6, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r6, &(0x7f00000005c0)={0x1, {&(0x7f0000000400)=""/140, 0x8c, 0x0, 0x3, 0x2}}, 0x48) connect$inet6(r5, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 5.776570577s ago: executing program 2 (id=52): r0 = syz_io_uring_setup(0x1413, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000700)={0x4900, 0x80, 0xe}, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x39d7, 0x1, 0x1, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x100, 0x2, 0x1, 0x10, 0x4, 0x5, 0x8000, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x3, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0x4000, 0x7, 0x485, 0x7, 0xfffffffd, 0x101, 0x10000001, 0x0, 0x3, 0x5, 0x6, 0xffffffff, 0xfffffff8]}) r5 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2842, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) splice(r5, 0x0, r7, 0x0, 0x40000004, 0xb) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000b80)={0x8, 0x0, &(0x7f0000001080)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r12 = syz_io_uring_setup(0x479a, &(0x7f00000005c0)={0x0, 0xcd9f, 0x100, 0x3, 0x328, 0x0, r10}, &(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x80000) fcntl$setstatus(r14, 0x4, 0x42c00) syz_io_uring_submit$UBLK(r1, r13, r3, &(0x7f0000001840)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r6, 0xc0207508, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x70, &(0x7f0000000880)={0x70, 0x0, {0x4, 0x9, 0x0, 0xff, 0x8, 0xa, 0x7, 0x9aa, 0x8}, {0x4, 0x17, 0xda1, 0x1ff, 0x2}, {0x8, 0x52, 0x7, 0x8}, {0x9, 0x8}}}}) ioctl$COMEDI_SETRSUBD(r4, 0x6410) 3.911673433s ago: executing program 2 (id=53): syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f50a0102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da"], 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1a4, &(0x7f0000000700)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r6], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.288052254s ago: executing program 3 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) close(0x3) 2.266149224s ago: executing program 1 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)='\v', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000380)="3c805dd29b8c50ae7c6e3f97a1ec", 0xe}, {&(0x7f0000002380)="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", 0xff1}], 0x2}}], 0x2, 0x4000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 259.563884ms ago: executing program 1 (id=55): socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x8, r0, 0xfffffffd}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socketpair(0x29, 0x800, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xb) iopl(0x3) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = getpgrp(0x0) r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x80) setns(0xc9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 58.823949ms ago: executing program 0 (id=56): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1b) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) 0s ago: executing program 2 (id=57): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xffffffffffffffff, 0x2000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff06a660001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 77.289437][ T5761] cgroup: Unknown subsys name 'net' [ 77.427727][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.235081][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.843054][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.851835][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.860776][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.868304][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.877267][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.884750][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.893273][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.902923][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.911404][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.919630][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.928122][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.934449][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.936958][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.942811][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.950760][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.957334][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.964591][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.971928][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.986753][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.995155][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.005965][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.018861][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.030766][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.038260][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.538696][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 81.549009][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 81.559173][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 81.696600][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 81.816885][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.824326][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.832059][ T5786] bridge_slave_0: entered allmulticast mode [ 81.839183][ T5786] bridge_slave_0: entered promiscuous mode [ 81.847413][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.854829][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.862115][ T5778] bridge_slave_0: entered allmulticast mode [ 81.868932][ T5778] bridge_slave_0: entered promiscuous mode [ 81.877262][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.884493][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.892573][ T5778] bridge_slave_1: entered allmulticast mode [ 81.899566][ T5778] bridge_slave_1: entered promiscuous mode [ 81.906916][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.916818][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.924307][ T5783] bridge_slave_0: entered allmulticast mode [ 81.934214][ T5783] bridge_slave_0: entered promiscuous mode [ 81.954690][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.962034][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.969510][ T5786] bridge_slave_1: entered allmulticast mode [ 81.976897][ T5786] bridge_slave_1: entered promiscuous mode [ 82.014614][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.021800][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.029047][ T5783] bridge_slave_1: entered allmulticast mode [ 82.036272][ T5783] bridge_slave_1: entered promiscuous mode [ 82.076367][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.088535][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.101167][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.126465][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.148931][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.171277][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.191831][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.199123][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.207154][ T5773] bridge_slave_0: entered allmulticast mode [ 82.214770][ T5773] bridge_slave_0: entered promiscuous mode [ 82.268153][ T5783] team0: Port device team_slave_0 added [ 82.275649][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.283196][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.290894][ T5773] bridge_slave_1: entered allmulticast mode [ 82.298026][ T5773] bridge_slave_1: entered promiscuous mode [ 82.310779][ T5778] team0: Port device team_slave_0 added [ 82.319267][ T5786] team0: Port device team_slave_0 added [ 82.328938][ T5783] team0: Port device team_slave_1 added [ 82.347595][ T5778] team0: Port device team_slave_1 added [ 82.355983][ T5786] team0: Port device team_slave_1 added [ 82.405655][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.457825][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.465286][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.491704][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.505845][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.515666][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.523055][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.549451][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.563375][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.571144][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.597180][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.609233][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.616561][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.643100][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.656493][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.666193][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.693368][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.743716][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.751034][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.777401][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.819284][ T5773] team0: Port device team_slave_0 added [ 82.835217][ T5783] hsr_slave_0: entered promiscuous mode [ 82.842049][ T5783] hsr_slave_1: entered promiscuous mode [ 82.854902][ T5773] team0: Port device team_slave_1 added [ 82.935364][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.943184][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.969554][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.983331][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.990396][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.017078][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.030935][ T5085] Bluetooth: hci2: command tx timeout [ 83.052408][ T5778] hsr_slave_0: entered promiscuous mode [ 83.059007][ T5778] hsr_slave_1: entered promiscuous mode [ 83.066207][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.074793][ T5778] Cannot create hsr debugfs directory [ 83.087101][ T5786] hsr_slave_0: entered promiscuous mode [ 83.094014][ T5786] hsr_slave_1: entered promiscuous mode [ 83.100201][ T5788] Bluetooth: hci1: command tx timeout [ 83.106075][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.106320][ T5785] Bluetooth: hci0: command tx timeout [ 83.113845][ T5786] Cannot create hsr debugfs directory [ 83.125479][ T5085] Bluetooth: hci3: command tx timeout [ 83.185260][ T5773] hsr_slave_0: entered promiscuous mode [ 83.193176][ T5773] hsr_slave_1: entered promiscuous mode [ 83.199518][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.207312][ T5773] Cannot create hsr debugfs directory [ 83.600644][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.628170][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.646152][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.655957][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.703965][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.721822][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.734300][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.753496][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.832343][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.856715][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.866930][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.878574][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.981034][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.992228][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.005959][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.016790][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.094972][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.171284][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.195697][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.224411][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.231960][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.252663][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.260082][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.293916][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.311047][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.327947][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.335142][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.376727][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.401790][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.408902][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.428606][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.448770][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.489118][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.496362][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.517301][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.548981][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.556446][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.576779][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.584071][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.637540][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.646141][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.036409][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.111519][ T5785] Bluetooth: hci2: command tx timeout [ 85.180865][ T5785] Bluetooth: hci0: command tx timeout [ 85.187423][ T5785] Bluetooth: hci3: command tx timeout [ 85.191134][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.193720][ T5085] Bluetooth: hci1: command tx timeout [ 85.217805][ T5783] veth0_vlan: entered promiscuous mode [ 85.258659][ T5783] veth1_vlan: entered promiscuous mode [ 85.337626][ T5783] veth0_macvtap: entered promiscuous mode [ 85.349477][ T5783] veth1_macvtap: entered promiscuous mode [ 85.369387][ T5786] veth0_vlan: entered promiscuous mode [ 85.378336][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.407731][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.418978][ T5786] veth1_vlan: entered promiscuous mode [ 85.452223][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.477284][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.499614][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.516583][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.526530][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.535604][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.598398][ T5786] veth0_macvtap: entered promiscuous mode [ 85.614733][ T5778] veth0_vlan: entered promiscuous mode [ 85.647381][ T5786] veth1_macvtap: entered promiscuous mode [ 85.698250][ T5778] veth1_vlan: entered promiscuous mode [ 85.707327][ T5773] veth0_vlan: entered promiscuous mode [ 85.745871][ T5773] veth1_vlan: entered promiscuous mode [ 85.757531][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.769154][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.781766][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.810591][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.828293][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.841936][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.855576][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.867224][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.899522][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.908950][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.918439][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.928010][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.949145][ T5778] veth0_macvtap: entered promiscuous mode [ 85.983580][ T5778] veth1_macvtap: entered promiscuous mode [ 86.014183][ T5773] veth0_macvtap: entered promiscuous mode [ 86.023348][ T4499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.038410][ T4499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.073228][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.084951][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.095861][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.107227][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.119736][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.133576][ T5773] veth1_macvtap: entered promiscuous mode [ 86.152837][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.163882][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.175806][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.187879][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.200973][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.229624][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.250972][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.263394][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.273824][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.309234][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.326703][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.338249][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.371305][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.401600][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.428007][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.443335][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.508501][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.537184][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.595682][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.630091][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.640674][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.652347][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.663373][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.675621][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.688339][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.180275][ T5785] Bluetooth: hci2: command tx timeout [ 87.307678][ T5785] Bluetooth: hci3: command tx timeout [ 87.313583][ T5085] Bluetooth: hci1: command tx timeout [ 87.319215][ T5788] Bluetooth: hci0: command tx timeout [ 87.356548][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.400703][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.411787][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.435228][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.452430][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.463111][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.694667][ T4499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.708211][ T4499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.850970][ T5845] block device autoloading is deprecated and will be removed. [ 87.896479][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.913005][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.723002][ T5785] Bluetooth: hci2: command tx timeout [ 89.728746][ T5785] Bluetooth: hci3: command tx timeout [ 89.734511][ T5085] Bluetooth: hci1: command tx timeout [ 89.740033][ T5788] Bluetooth: hci0: command tx timeout [ 89.868485][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.898462][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.987858][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.038798][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.062769][ T5844] md/raid10:md0: not clean -- starting background reconstruction [ 90.120769][ T5844] md/raid10:md0: active with 1 out of 2 devices [ 90.143085][ T5844] md0: detected capacity change from 0 to 2048 [ 90.317082][ T5858] md: resync of RAID array md0 [ 90.393005][ T5858] md/raid10:md0: resync fails [ 90.397777][ T5858] md: md0: resync done. [ 90.548291][ T5862] md: recovery of RAID array md0 [ 90.699060][ T5863] capability: warning: `syz.1.2' uses 32-bit capabilities (legacy support in use) [ 90.934510][ T5865] ======================================================= [ 90.934510][ T5865] WARNING: The mand mount option has been deprecated and [ 90.934510][ T5865] and is ignored by this kernel. Remove the mand [ 90.934510][ T5865] option from the mount to silence this warning. [ 90.934510][ T5865] ======================================================= [ 90.970499][ T5865] 9pnet_fd: Insufficient options for proto=fd [ 91.333180][ T5862] md: md0: recovery done. [ 92.862892][ T9] cfg80211: failed to load regulatory.db [ 93.191996][ T5869] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.533370][ T5876] syz.0.7[5876]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.609347][ T5876] loop0: detected capacity change from 0 to 1024 [ 95.187668][ T5881] binder: 5880:5881 ioctl c00c6211 0 returned -14 [ 95.285700][ T5884] gadgetfs: bound to dummy_udc driver [ 96.093967][ T5883] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 98.726508][ T5908] md: couldn't update array info. -22 [ 98.749806][ T5908] md: could not open device unknown-block(1,1). [ 98.776319][ T5908] md: md_import_device returned -16 [ 98.795323][ T5911] md: couldn't update array info. -22 [ 98.802933][ T5911] md: could not open device unknown-block(1,1). [ 98.814464][ T5911] md: md_import_device returned -16 [ 98.824216][ T5908] md: could not open device unknown-block(1,2). [ 98.835831][ T5908] md: md_import_device returned -16 [ 98.846268][ T5911] md: could not open device unknown-block(1,2). [ 98.864106][ T5911] md: md_import_device returned -16 [ 100.423420][ T5918] tty tty4: ldisc open failed (-12), clearing slot 3 [ 101.152869][ T5930] loop3: detected capacity change from 0 to 128 [ 101.220199][ T5930] FAT-fs (loop3): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 101.320397][ T5929] netlink: 'syz.2.22': attribute type 11 has an invalid length. [ 103.000352][ T5774] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.119092][ T5929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.197266][ T5929] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 103.207489][ T5929] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 103.210272][ T5774] usb 1-1: Using ep0 maxpacket: 32 [ 103.234199][ T5935] netlink: 'syz.2.22': attribute type 1 has an invalid length. [ 103.246539][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 103.251146][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 103.284564][ T5774] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 103.361032][ T5774] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 103.406048][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.422700][ T5774] usb 1-1: Product: syz [ 103.427480][ T5774] usb 1-1: Manufacturer: syz [ 103.449998][ T5774] usb 1-1: SerialNumber: syz [ 103.483468][ T5774] usb 1-1: config 0 descriptor?? [ 103.524372][ T5774] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 103.682908][ T5774] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 103.738604][ T5932] loop0: detected capacity change from 0 to 8 [ 103.878404][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.667657][ T5835] usb 1-1: USB disconnect, device number 2 [ 106.434620][ T27] audit: type=1804 audit(1787917122.470:2): pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.20" name="/newroot/3/file0" dev="fuse" ino=1 res=1 errno=0 [ 109.940004][ T5974] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 110.950256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.623181][ T5835] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.056755][ T5990] loop2: detected capacity change from 0 to 4096 [ 115.592939][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.799474][ T5990] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 16: comm syz.2.38: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=8, size=4096 fake=1 [ 116.421566][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.536157][ T5996] Zero length message leads to an empty skb [ 118.630039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 120.713802][ T6013] binder: 6012:6013 ioctl 4018620d 0 returned -22 [ 120.952546][ T6020] Bluetooth: MGMT ver 1.22 [ 121.017567][ T27] audit: type=1800 audit(1787917137.120:3): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.43" name="c_srate" dev="configfs" ino=8039 res=0 errno=0 [ 126.187437][ T6040] loop2: detected capacity change from 0 to 512 [ 126.290157][ T6040] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 126.340162][ T6040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.953324][ T6040] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 128.000584][ T6040] EXT4-fs (loop2): 1 truncate cleaned up [ 128.022689][ T6040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.139342][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.148929][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 129.833851][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -22 [ 130.340408][ T177] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.568726][ T177] usb 3-1: Using ep0 maxpacket: 32 [ 131.462134][ T177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 131.579074][ T177] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 131.593661][ T177] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 131.620029][ T177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.628282][ T177] usb 3-1: Product: syz [ 131.640066][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.975352][ T177] usb 3-1: Manufacturer: syz [ 131.982222][ T177] usb 3-1: SerialNumber: syz [ 131.989692][ T177] usb 3-1: config 0 descriptor?? [ 132.002147][ T177] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 132.080654][ T177] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 132.162644][ T9] usb 1-1: Dual-Role OTG device on HNP port [ 133.604602][ T9] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 133.613763][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.624869][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.635449][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.732710][ T6075] udevd[6075]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 133.831467][ T5835] usb 3-1: USB disconnect, device number 2 [ 133.895234][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 133.922862][ T9] gspca_spca501: reg write: error -32 [ 133.939865][ T9] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 133.960332][ T9] spca501: probe of 1-1:1.0 failed with error -22 [ 133.996792][ C0] general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] PREEMPT SMP KASAN [ 134.008941][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 134.017479][ C0] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 134.024714][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.034807][ C0] Workqueue: usb_hub_wq hub_event [ 134.039887][ C0] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 134.045569][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ff fb 08 fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 b1 [ 134.065565][ C0] RSP: 0018:ffffc90000007820 EFLAGS: 00010002 [ 134.071706][ C0] RAX: 00000000000000e6 RBX: ffff88807c048120 RCX: ffff88801b658000 [ 134.079880][ C0] RDX: 0000000000000100 RSI: ffffffff8b1d3340 RDI: ffffffff8b1d3300 [ 134.088349][ C0] RBP: ffff88807c048100 R08: 0000000000000000 R09: 000000002549877f [ 134.096911][ C0] R10: 00000000663105c1 R11: 0000000000000100 R12: ffff88807c048730 [ 134.105294][ C0] R13: dffffc0000000000 R14: ffff88807c048128 R15: 0000000000000730 [ 134.113572][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 134.122541][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.129157][ C0] CR2: 0000001b2dd1fff8 CR3: 000000002f381000 CR4: 00000000003506f0 [ 134.137168][ C0] Call Trace: [ 134.140476][ C0] [ 134.143350][ C0] f_midi2_set_alt+0x100/0x800 [ 134.148166][ C0] composite_setup+0x1ffe/0x33a0 [ 134.153359][ C0] configfs_composite_setup+0xc7/0x100 [ 134.158862][ C0] dummy_timer+0x1324/0x34e0 [ 134.163588][ C0] ? mark_lock+0x94/0x320 [ 134.168229][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 134.173289][ C0] ? lock_chain_count+0x20/0x20 [ 134.178233][ C0] ? dummy_free_streams+0x520/0x520 [ 134.183468][ C0] ? dummy_free_streams+0x520/0x520 [ 134.188695][ C0] __hrtimer_run_queues+0x525/0xc10 [ 134.193955][ C0] ? hrtimer_interrupt+0x980/0x980 [ 134.199129][ C0] ? read_tsc+0x9/0x20 [ 134.203720][ C0] hrtimer_run_softirq+0x177/0x290 [ 134.208949][ C0] handle_softirqs+0x27d/0x820 [ 134.213845][ C0] ? read_tsc+0x9/0x20 [ 134.217954][ C0] ? ktime_get+0x24b/0x280 [ 134.222525][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 134.227513][ C0] ? do_softirq+0x1a0/0x1a0 [ 134.232268][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 134.237598][ C0] __irq_exit_rcu+0xd3/0x190 [ 134.242320][ C0] ? irq_exit_rcu+0x20/0x20 [ 134.246958][ C0] irq_exit_rcu+0x9/0x20 [ 134.251322][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 134.257088][ C0] [ 134.260233][ C0] [ 134.263194][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 134.269224][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 134.276120][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 1b 98 c3 f6 65 8b 05 3c 66 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 134.296025][ C0] RSP: 0018:ffffc900000e6880 EFLAGS: 00000206 [ 134.302401][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 7822e43db0214e00 [ 134.310779][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 134.319232][ C0] RBP: ffffc900000e6910 R08: ffffffff911ef577 R09: 1ffffffff223deae [ 134.327260][ C0] R10: dffffc0000000000 R11: fffffbfff223deaf R12: dffffc0000000000 [ 134.335541][ C0] R13: dffffc0000000000 R14: ffff888142398000 R15: 1ffff9200001cd10 [ 134.343739][ C0] ? _raw_spin_unlock+0x40/0x40 [ 134.348674][ C0] ? kobject_get+0xcc/0x120 [ 134.353327][ C0] dummy_urb_enqueue+0x587/0x780 [ 134.358342][ C0] usb_hcd_submit_urb+0x318/0x1aa0 [ 134.363590][ C0] ? __init_swait_queue_head+0xa8/0x140 [ 134.369366][ C0] usb_start_wait_urb+0x140/0x580 [ 134.374435][ C0] ? usb_api_blocking_completion+0xb0/0xb0 [ 134.380376][ C0] usb_control_msg+0x235/0x3e0 [ 134.385307][ C0] usb_set_interface+0x51f/0x13f0 [ 134.390380][ C0] snd_usb_midi_v2_create+0x62f/0x48a0 [ 134.395886][ C0] ? proc_audio_usbbus_read+0x170/0x170 [ 134.401567][ C0] ? snd_card_rw_proc_new+0x10d/0x130 [ 134.406983][ C0] ? validate_midi_out_jack+0xb0/0xb0 [ 134.412566][ C0] ? usb_ifnum_to_if+0x262/0x2e0 [ 134.417553][ C0] snd_usb_create_stream+0x262/0x5d0 [ 134.422886][ C0] usb_audio_probe+0xead/0x1f00 [ 134.427968][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 134.433208][ C0] ? snd_usb_autosuspend+0x1c0/0x1c0 [ 134.438611][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 134.444550][ C0] usb_probe_interface+0x5c2/0xaf0 [ 134.449721][ C0] ? usb_register_driver+0x3c0/0x3c0 [ 134.455141][ C0] really_probe+0x247/0xae0 [ 134.459687][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 134.465018][ C0] __driver_probe_device+0x1f5/0x390 [ 134.470875][ C0] driver_probe_device+0x4f/0x420 [ 134.475934][ C0] __device_attach_driver+0x2ca/0x510 [ 134.481362][ C0] bus_for_each_drv+0x252/0x2e0 [ 134.486248][ C0] ? coredump_store+0x90/0x90 [ 134.491016][ C0] ? bus_find_device+0x300/0x300 [ 134.496568][ C0] __device_attach+0x2c1/0x420 [ 134.501453][ C0] ? device_attach+0x20/0x20 [ 134.506092][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 134.511473][ C0] bus_probe_device+0x180/0x260 [ 134.516347][ C0] device_add+0x87c/0xc40 [ 134.520720][ C0] usb_set_configuration+0x1ad0/0x2150 [ 134.526289][ C0] usb_generic_driver_probe+0x8d/0x150 [ 134.531856][ C0] usb_probe_device+0x12a/0x260 [ 134.536825][ C0] ? usb_register_device_driver+0x230/0x230 [ 134.542819][ C0] really_probe+0x247/0xae0 [ 134.547776][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 134.553588][ C0] __driver_probe_device+0x1f5/0x390 [ 134.558893][ C0] driver_probe_device+0x4f/0x420 [ 134.563941][ C0] __device_attach_driver+0x2ca/0x510 [ 134.569411][ C0] bus_for_each_drv+0x252/0x2e0 [ 134.574270][ C0] ? coredump_store+0x90/0x90 [ 134.579228][ C0] ? bus_find_device+0x300/0x300 [ 134.584201][ C0] __device_attach+0x2c1/0x420 [ 134.589070][ C0] ? device_attach+0x20/0x20 [ 134.593924][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 134.598976][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 134.604180][ C0] bus_probe_device+0x180/0x260 [ 134.609318][ C0] device_add+0x87c/0xc40 [ 134.613641][ C0] usb_new_device+0x995/0x1550 [ 134.618423][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 134.623262][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.628487][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 134.633704][ C0] hub_event+0x29d5/0x4a80 [ 134.638156][ C0] ? hub_post_resume+0x120/0x120 [ 134.643284][ C0] ? read_lock_is_recursive+0x20/0x20 [ 134.648763][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.654294][ C0] ? process_scheduled_works+0x975/0x1600 [ 134.660410][ C0] ? process_scheduled_works+0x975/0x1600 [ 134.666404][ C0] process_scheduled_works+0xa60/0x1600 [ 134.671966][ C0] ? worker_attach_to_pool+0x370/0x370 [ 134.677607][ C0] ? assign_work+0x3cc/0x5d0 [ 134.682380][ C0] worker_thread+0xa5e/0xfe0 [ 134.687009][ C0] ? _raw_spin_unlock+0x40/0x40 [ 134.691958][ C0] ? __kthread_parkme+0x71/0x1c0 [ 134.697059][ C0] kthread+0x2fa/0x390 [ 134.701596][ C0] ? pr_cont_work+0x550/0x550 [ 134.706300][ C0] ? kthread_blkcg+0xd0/0xd0 [ 134.711096][ C0] ret_from_fork+0x48/0x80 [ 134.715532][ C0] ? kthread_blkcg+0xd0/0xd0 [ 134.720227][ C0] ret_from_fork_asm+0x11/0x20 [ 134.725347][ C0] [ 134.728365][ C0] Modules linked in: [ 134.732357][ C0] ---[ end trace 0000000000000000 ]--- [ 134.737817][ C0] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 134.743551][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ff fb 08 fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 b1 [ 134.763602][ C0] RSP: 0018:ffffc90000007820 EFLAGS: 00010002 [ 134.769851][ C0] RAX: 00000000000000e6 RBX: ffff88807c048120 RCX: ffff88801b658000 [ 134.778006][ C0] RDX: 0000000000000100 RSI: ffffffff8b1d3340 RDI: ffffffff8b1d3300 [ 134.787018][ C0] RBP: ffff88807c048100 R08: 0000000000000000 R09: 000000002549877f [ 134.795507][ C0] R10: 00000000663105c1 R11: 0000000000000100 R12: ffff88807c048730 [ 134.803671][ C0] R13: dffffc0000000000 R14: ffff88807c048128 R15: 0000000000000730 [ 134.812339][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 134.821363][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.827946][ C0] CR2: 0000001b2dd1fff8 CR3: 000000002f381000 CR4: 00000000003506f0 [ 134.835943][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 134.843876][ C0] Kernel Offset: disabled [ 134.848237][ C0] Rebooting in 86400 seconds..