last executing test programs: 21.391320218s ago: executing program 1 (id=71): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYBLOB=',wfd', @ANYRESHEX=r0, @ANYBLOB="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"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) clock_gettime(0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(r0, 0x0, 0x10b) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000006c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)="f5", 0x1}], 0x1}}], 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000080000000"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$FIONREAD(r7, 0x541b, 0x0) 20.547676738s ago: executing program 1 (id=74): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000935000/0xf000)=nil, &(0x7f0000df1000/0x4000)=nil, &(0x7f0000f2a000/0x1000)=nil, &(0x7f00008cd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00.'], 0x74}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000140)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) ftruncate(0xffffffffffffffff, 0x800799c) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='hybla', 0x5) connect$inet(r4, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept4(r4, 0x0, 0x0, 0x0) 17.437103112s ago: executing program 1 (id=76): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x7, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 15.125106298s ago: executing program 2 (id=81): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00'}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @random="02f18a9ccbf3", 'ip6gre0\x00'}}, 0x1e) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x200200) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000000000000000, 0x12) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e000000200"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000049f1afcc80021870abf1ed000000a90000000000000000000000000000000000000000000000000ea5e4273d42ed7a98879cea00000000000000ffffffffffffffff000000000000000000000000000000000000000000800000000a000000000000000000000080400003000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c0000000000de9dfc0000000000000000000000000000000200000004030000"], 0xfc}}, 0x0) read$midi(r2, 0x0, 0x3b) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) 15.018819001s ago: executing program 1 (id=83): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x7, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = fcntl$dupfd(r0, 0x406, r0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) 13.7710206s ago: executing program 3 (id=84): semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0xfffe}], 0x1, 0x0) semop(0x0, 0x0, 0x0) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x9, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13.745978671s ago: executing program 2 (id=85): syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x80001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24000000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) close(0x3) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0x100000000) 12.51360011s ago: executing program 3 (id=86): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x7, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = fcntl$dupfd(r0, 0x406, r0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) 10.974313447s ago: executing program 0 (id=87): sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x4000811) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40800) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x10001, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 10.914215149s ago: executing program 2 (id=88): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYBLOB=',wfd', @ANYRESHEX=r0, @ANYBLOB="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"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) clock_gettime(0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(r0, 0x0, 0x10b) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000006c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)="f5", 0x1}], 0x1}}], 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000080000000"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$FIONREAD(r7, 0x541b, 0x0) 9.649001689s ago: executing program 0 (id=89): socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newtaction={0x2e04, 0x30, 0x1, 0x0, 0x2, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x3ff, 0x4, 0xe5ce, 0x8cf}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x24e8, 0x1, [@m_nat={0x1e4, 0x1a, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x200, 0x1, 0xc3, 0x7a4}, @local, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffe, 0x6, 0x1, 0x9b, 0x4}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x0, 0x0, 0xaa, 0x5}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x80000000, 0x7, 0x2, 0xe}, @multicast1, @private=0xa010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x514e, 0x5f, 0x1, 0x3, 0x6d7f}, @local, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x5, 0x8, 0x2d, 0xc}, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffffff}}]}, {0xc9, 0x6, "b55a917b1b199501e4dcd6ca3de815b70ac0b02d452dddf63ec2e6453f302bd6e6f1ecf72e9157c67cf34f00b854caa75b93797082b3abe050828dd5c53713f3d98c5da982280b27d57973d40e950ec64cefb2dfb47caabb320aa80199a12b5185e94ad5548d4823679bd2ba9b7881e0b137dd4d284a5d6b9d09aee36e52a0bb3b23e2d65514b02bb8e89f94ed6ddd4cb4d76de31f46e7445ad777c8a47b7a5dc6c7a255019ce32a73b6ca0e90ce49b2e64da2096f62d4de984e8b7d10b88b1a02f78c7a5d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x10e4, 0xe, 0x0, 0x0, {{0x7}, {0x1094, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0x93, 'nat\x00', 0x2b, 0x1, "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"}}, @TCA_IPT_TARG={0x5a, 0x6, {0x0, 'filter\x00', 0x6, 0x76b2, "09be888352e1636a6f02d65ff730c94cb88e52c5c37e0cf00fa6f57dbfd25d4cb29eafa4eb5e9385a6177fbd970e96e8"}}, @TCA_IPT_HOOK={0x8}]}, {0x2a, 0x6, "54efc6bede17512378a571f7be540951ec9929be6a33e95c9a6b2eece042d6d557d3b835f81c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x1078, 0x1f, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x7, 0x5, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x10000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x6, 0x10000000, 0x9, 0x80000001}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4a}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x9, 0x3, 0x8, 0x6}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x1, 0x5, 0x9, 0x9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xfc4, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x104, 0x20, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x3, 0x8}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffffff9, 0x1, 0x0, 0x3}, 0x27}}]}, {0x9d, 0x6, "40e6c68e7d112a02a3d120cba60409a40e24b035ca0d572e5b2606739a59121eab62f5f81a079d957c3f9bbba270c1cba5e2b1d9ccb8009a91c57909168295be023959764a2da392c5376ed636c11499f091db45bfaed5132047d7f818bfb7c6d2479e86023b317037c3bc9b1e19b61ad6bcef9b7595d974e68e6a03d8c8ad3355ef0a3febd72acc1c4bc91659b59cf5f43379dcf4d21b6e63"}, {0xc}, {0xc, 0x8, {0x3, 0x2632767e6fcd1fa4}}}}, @m_mirred={0xa0, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x73, 0x6, "d2d0fad6fe0d0b0ce81bbec3f9a387c7efd8b9fb084746d69a4764d7a90c1c8800c6f11fbf22c5da4211981c8fa5339b509a08aa01c89f2d8b346851a78f02d1f14f0f517481fd4feef51ea467c6b0c6c1fcf6986e5bbde52eab3e2d1aaf3a51d32a3cef83fea55df3732ee83d0ce4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x4}, {0x8b4, 0x1, [@m_mirred={0x40, 0x7, 0x0, 0x0, {{0xb}, {0x4}, {0x14, 0x6, "6ca70b03261bf9e3a05e030bb52b83e9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x870, 0x5, 0x0, 0x0, {{0xb}, {0x844, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}], [], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x200}], [], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x10, 0x7c, 0x8, 0x188, 0x8, 0x2, 0xb, 0x200, 0x2, 0x4, 0x6, 0x7, 0x5, 0x8001, 0x4, 0x7c127c00, 0x1, 0x7, 0x6, 0xff, 0x3, 0x8, 0x1, 0x1, 0x6, 0x9, 0x7, 0x800, 0x7fff, 0x40000000, 0x8e72, 0x2, 0x6, 0x5, 0x4d, 0xfffffffe, 0x5, 0x4, 0x9, 0x3, 0x6, 0x8000, 0x2f7, 0x2, 0x99e, 0xf, 0x7fffffff, 0x8001, 0xf119, 0xf0000000, 0x9, 0xb9, 0xfffffff7, 0x0, 0x8, 0x60, 0xfffffff7, 0x722fde33, 0x5, 0x5, 0x2, 0xe, 0xfffffffa, 0x7fff, 0x4, 0x7, 0x800, 0x800, 0x5b3, 0xfcd, 0x746, 0x8, 0x101, 0x7fffffff, 0x9, 0x1, 0xfffffffa, 0x3, 0x89, 0x3, 0x400, 0xfffffffa, 0x7, 0x8, 0x3, 0xfffffff9, 0x9, 0x6, 0x8001, 0x6, 0x800, 0x8, 0x0, 0x1ff, 0xfffffff7, 0x7f, 0x5, 0xffffffff, 0x1000, 0x2, 0x6, 0x7c5f, 0x0, 0x224928cf, 0x401, 0x2, 0x7fffffff, 0x8, 0x4, 0x7, 0x8, 0x5, 0x2ae, 0x77e8ba08, 0x2bd, 0x7, 0x5, 0x0, 0x9c6, 0xa4d, 0xde4e, 0x81, 0x3, 0x6, 0x3, 0x3, 0x3d6, 0x1, 0xffff, 0x2, 0x1, 0x98, 0x2, 0x8, 0x7fff, 0x4, 0x9, 0x400, 0x400, 0x80000001, 0xffffcef8, 0x5, 0x9, 0x80000000, 0x5, 0x8, 0x0, 0x2, 0xc620, 0x6, 0xfffffff9, 0x3, 0xfff, 0x9, 0xfffffff7, 0x3, 0x7, 0x8, 0x3, 0x7fffffff, 0x0, 0x4, 0xff, 0x7, 0xf, 0xfffffffd, 0x6, 0x10, 0x7, 0x9, 0x8, 0x7c52, 0x0, 0x0, 0x4d2, 0x401, 0x8, 0x7, 0x6, 0x62, 0x8, 0x72, 0x2, 0x1, 0x3ff, 0xf59, 0x3, 0x1000, 0xfffffffe, 0xe6e, 0x7, 0x8, 0x49f, 0xdb, 0x10000, 0x8, 0x61f, 0x3, 0x4, 0x5, 0x8, 0x995c, 0x200, 0x6, 0x5, 0x8, 0x1, 0xe8db, 0x3, 0x4, 0x0, 0x967, 0x5, 0x5, 0x3, 0x4, 0x2, 0x97, 0x101, 0xfffffff8, 0x2, 0x3, 0x4, 0x1, 0x2, 0x0, 0x9, 0x2, 0x9, 0xaa, 0x1, 0x5, 0x0, 0x5, 0xfffff450, 0x8, 0xfffffffe, 0x100, 0x4, 0x8000, 0x1, 0xb2, 0x0, 0x7f, 0x0, 0x5, 0x5, 0x3, 0x6, 0x0, 0x9, 0x1, 0x76, 0xfff, 0xfffffffa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4e23, 0x5, 0x6, 0x0, 0xd9a, 0x80, 0x23, 0x3, 0x8, 0xffff, 0x9, 0x6, 0x9, 0x4c, 0x0, 0x1, 0x3, 0x0, 0xc742, 0x70000000, 0x8, 0xfffffffa, 0x69c, 0x3d0, 0x10001, 0x7, 0x8, 0xd, 0x9, 0x78a, 0x1, 0x1, 0x7ff, 0x2, 0x1, 0x1000, 0x5, 0x10001, 0x5, 0x8, 0x3, 0x0, 0x3, 0x80, 0xed5, 0x6, 0x7, 0x4, 0xfffffffe, 0x7ff, 0x5, 0x101, 0xcb, 0x7, 0x0, 0x10, 0x0, 0x5, 0x2, 0xe, 0x1, 0xf33e, 0xb7ae, 0x61c, 0x6, 0x2, 0x6, 0x8, 0x14deb97f, 0x6, 0x6, 0xcb0, 0xf2, 0x6, 0x7f, 0xff, 0x0, 0x6, 0x4, 0x80000001, 0x2, 0x654d, 0x17c4, 0x5, 0x8, 0x8802, 0x3, 0x7f, 0x8, 0x10000, 0x2, 0x4cb7, 0x80, 0x10000, 0x3ff, 0xffff, 0x4, 0x5, 0x4, 0x1, 0xfffff001, 0x7, 0x6a, 0x8, 0x4, 0x4, 0x3, 0x7d, 0x7, 0x94a, 0x2, 0xf73, 0x5, 0x7, 0x8c, 0x5, 0x5, 0x5, 0x4, 0xd, 0x3, 0x400, 0x5, 0x3, 0xfffffffa, 0x1ff, 0x8, 0x8, 0x92bb, 0x400, 0x3, 0x2, 0x4, 0x2, 0x3, 0xee566c48, 0x4, 0x77, 0x7cb, 0x61, 0x1, 0xffff, 0x7, 0x6, 0x0, 0x4, 0x9, 0xfff, 0x3, 0x4, 0x0, 0x10000, 0x0, 0x10000, 0x80000001, 0xfffffffd, 0x1, 0x2, 0xe, 0x2, 0x2a1, 0x0, 0x3ff, 0x2048, 0xf5e8, 0x8, 0xa, 0xe34, 0x9, 0x3, 0xc8, 0x57f, 0xa, 0x6, 0x5, 0x8000, 0x6, 0x7, 0xe, 0x7, 0x6, 0x0, 0x6, 0x8, 0x2, 0x4, 0x7ff, 0x9, 0x8, 0xfff, 0x4, 0x7, 0x1f, 0x5, 0x2, 0x5, 0x1, 0xfffffffa, 0x1, 0xa, 0x3, 0x0, 0x3, 0x1, 0x3, 0x40, 0x2, 0x47, 0x6, 0x7, 0xcf, 0x200, 0x5, 0x3, 0x100, 0x499e00, 0x225e0000, 0xfe16, 0x67, 0x9, 0x0, 0x5, 0x5, 0x0, 0x8, 0x7fffffff, 0x3, 0x2, 0x9, 0x40, 0x9, 0x3, 0xc5, 0xb, 0x8, 0x3c322917, 0x7fff, 0x2, 0x1, 0x10001, 0x1, 0x6, 0x2, 0xc5, 0xfff, 0xdba, 0x3, 0x0, 0xd, 0xc, 0x81, 0xa, 0x5, 0x8d50, 0x80000000, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffff}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2e04}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) 9.385278715s ago: executing program 3 (id=90): syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x80001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24000000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) close(0x3) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0x100000000) 9.318805917s ago: executing program 0 (id=91): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3}, 0x39) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.255926922s ago: executing program 2 (id=92): socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x80001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24000000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) close(0x3) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0x100000000) 8.186190964s ago: executing program 3 (id=93): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00'}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @random="02f18a9ccbf3", 'ip6gre0\x00'}}, 0x1e) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8000000000000000, 0x12) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e000000200"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000049f1afcc80021870abf1ed000000a90000000000000000000000000000000000000000000000000ea5e4273d42ed7a98879cea00000000000000ffffffffffffffff000000000000000000000000000000000000000000800000000a000000000000000000000080400003000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c0000000000de9dfc0000000000000000000000000000000200000004030000"], 0xfc}}, 0x0) read$midi(r2, 0x0, 0x3b) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) 6.64634035s ago: executing program 1 (id=94): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x200200) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x8000000000000000, 0x12) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e000000200"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000049f1afcc80021870abf1ed000000a90000000000000000000000000000000000000000000000000ea5e4273d42ed7a98879cea00000000000000ffffffffffffffff000000000000000000000000000000000000000000800000000a000000000000000000000080400003000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c0000000000de9dfc0000000000000000000000000000000200000004030000"], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000002000000000000200000a0000a02e0000", @ANYRES32=0x0, @ANYRES32=0x0], 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0xe8902, 0x0) read$midi(r5, 0x0, 0x3b) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@o_path={&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x4000, r4}, 0x18) ioctl$SNDCTL_SEQ_RESET(r7, 0x5100) openat$sequencer(0xffffffffffffff9c, 0x0, 0xaa0941, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 6.559475303s ago: executing program 2 (id=95): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x7, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0], 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = fcntl$dupfd(r0, 0x406, r0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) 6.558893743s ago: executing program 3 (id=96): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x7, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0], 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = fcntl$dupfd(r0, 0x406, r0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) 2.695682225s ago: executing program 3 (id=97): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) sync() syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 2.679960406s ago: executing program 0 (id=98): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYBLOB=',wfd', @ANYRESHEX=r0, @ANYBLOB="2c646f6e745f61707072616973652c00f24b90d8d20f9740b1b01e2873ded21c12f4614c0b50e3e985db40b6f25d4178175991827841263de75682d28a39dad8d3f1e39ebdc7a3077c85fc6c970a5a969f964b3f50abd861f698da409744895050f831b7959a08a877ba5be4962009ad67a35799af2f408aebfa9d0e24ea75bbf0d5abf8ec523e4a8eba22c8b81d590864a7ec41800cf98131bd276e50de5d9bd31491b5d542685ed428c79c5b4c5d9e375fd169a090c24f0a9e625951c012f435de4e29fcd094e388690d3f16115ff3ae670863548db90e74d834816d2c56c12bcdc5928ac9bd5f37451972a654664f6b80b9422a9d9dc78797"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) clock_gettime(0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(r0, 0x0, 0x10b) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)="f5", 0x1}], 0x1}}], 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000080000000"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$FIONREAD(r7, 0x541b, 0x0) 2.420594842s ago: executing program 2 (id=99): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x93bdb000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/138, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) lseek(r3, 0x9, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 1.502197434s ago: executing program 0 (id=100): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r1, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000080)={0x406, r1}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1e5) socket$inet(0x2, 0x1, 0x3) fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000646000/0x4000)=nil, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r4, @ANYBLOB="010000000000ebd1dbb4f48f6306fddbdf2503000046efa050e7e0f3299000400001802c0004001400010002000000ac1475443bdad540431b00001400020002000000e000000200000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="997425bd7000fbdbdf2515000000580001800d0001007564703a73797a320000000044000400200001000a004e2300000009fe8000000000000000000000000000bb01000000200002000a004e240000000500000000000000000000ffffac14142100000800"], 0x6c}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f00000000c0)) 163.595376ms ago: executing program 0 (id=101): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000935000/0xf000)=nil, &(0x7f0000df1000/0x4000)=nil, &(0x7f0000f2a000/0x1000)=nil, &(0x7f00008cd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00.'], 0x74}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x23, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) ftruncate(0xffffffffffffffff, 0x800799c) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='hybla', 0x5) connect$inet(r4, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept4(r4, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=102): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) sync() syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)="a6d3", 0x2}], 0x1) syz_open_dev$I2C(0x0, 0x1, 0x402) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. [ 78.835517][ T5760] cgroup: Unknown subsys name 'net' [ 79.004023][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.733900][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.470425][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.490943][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.500267][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.509436][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.517163][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.526181][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.533764][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.541583][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.549141][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.558419][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.567235][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.574656][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.581793][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.595520][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.603758][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.625240][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.634015][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.641227][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.665258][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.675999][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.686294][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.699799][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.707921][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.715397][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.192508][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 83.214337][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 83.342039][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 83.437009][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.444996][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.452732][ T5774] bridge_slave_0: entered allmulticast mode [ 83.460781][ T5774] bridge_slave_0: entered promiscuous mode [ 83.474001][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.481269][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.488626][ T5774] bridge_slave_1: entered allmulticast mode [ 83.496103][ T5774] bridge_slave_1: entered promiscuous mode [ 83.503706][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.511090][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.518651][ T5772] bridge_slave_0: entered allmulticast mode [ 83.526200][ T5772] bridge_slave_0: entered promiscuous mode [ 83.557880][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 83.596755][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.603978][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.611597][ T5772] bridge_slave_1: entered allmulticast mode [ 83.619107][ T5772] bridge_slave_1: entered promiscuous mode [ 83.667027][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.700891][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.713612][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.747164][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.762510][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.770167][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.777568][ T5771] bridge_slave_0: entered allmulticast mode [ 83.785154][ T5771] bridge_slave_0: entered promiscuous mode [ 83.819506][ T5772] team0: Port device team_slave_0 added [ 83.833976][ T5772] team0: Port device team_slave_1 added [ 83.840944][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.848644][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.856200][ T5771] bridge_slave_1: entered allmulticast mode [ 83.863228][ T5771] bridge_slave_1: entered promiscuous mode [ 83.931385][ T5774] team0: Port device team_slave_0 added [ 83.940575][ T5774] team0: Port device team_slave_1 added [ 83.971006][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.983768][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.004602][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.012009][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.019857][ T5775] bridge_slave_0: entered allmulticast mode [ 84.027490][ T5775] bridge_slave_0: entered promiscuous mode [ 84.036483][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.043492][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.069944][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.105065][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.112252][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.119900][ T5775] bridge_slave_1: entered allmulticast mode [ 84.127622][ T5775] bridge_slave_1: entered promiscuous mode [ 84.143520][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.150832][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.177021][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.208764][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.215782][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.242269][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.257582][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.264703][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.290937][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.326587][ T5771] team0: Port device team_slave_0 added [ 84.335175][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.357382][ T5771] team0: Port device team_slave_1 added [ 84.396509][ T5772] hsr_slave_0: entered promiscuous mode [ 84.403540][ T5772] hsr_slave_1: entered promiscuous mode [ 84.422816][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.467560][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.474572][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.500639][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.529396][ T5775] team0: Port device team_slave_0 added [ 84.536978][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.543988][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.570352][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.612552][ T5775] team0: Port device team_slave_1 added [ 84.635967][ T5780] Bluetooth: hci1: command tx timeout [ 84.653438][ T5774] hsr_slave_0: entered promiscuous mode [ 84.660741][ T5774] hsr_slave_1: entered promiscuous mode [ 84.668833][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.676795][ T5774] Cannot create hsr debugfs directory [ 84.700932][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.708339][ T5780] Bluetooth: hci2: command tx timeout [ 84.714157][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.740291][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.785290][ T5780] Bluetooth: hci0: command tx timeout [ 84.786609][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.791319][ T5780] Bluetooth: hci3: command tx timeout [ 84.799216][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.829949][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.880060][ T5771] hsr_slave_0: entered promiscuous mode [ 84.887600][ T5771] hsr_slave_1: entered promiscuous mode [ 84.894558][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.902751][ T5771] Cannot create hsr debugfs directory [ 85.035687][ T5775] hsr_slave_0: entered promiscuous mode [ 85.042383][ T5775] hsr_slave_1: entered promiscuous mode [ 85.049150][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.056971][ T5775] Cannot create hsr debugfs directory [ 85.363501][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.405901][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.420020][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.445749][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.521146][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.532608][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.547901][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.559816][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.666020][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.679572][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.692252][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.711663][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.820068][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.832780][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.844635][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.857529][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.914174][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.979457][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.019240][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.026798][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.043810][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.051057][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.078089][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.123767][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.178627][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.190534][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.234697][ T4761] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.241932][ T4761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.254700][ T4761] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.261891][ T4761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.272310][ T4761] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.279581][ T4761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.317165][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.324349][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.429896][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.500813][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.553731][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.560990][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.617359][ T4761] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.624606][ T4761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.705579][ T5780] Bluetooth: hci1: command tx timeout [ 86.749836][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.763706][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.785260][ T5780] Bluetooth: hci2: command tx timeout [ 86.865458][ T5780] Bluetooth: hci3: command tx timeout [ 86.870953][ T5780] Bluetooth: hci0: command tx timeout [ 86.881889][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.090629][ T5772] veth0_vlan: entered promiscuous mode [ 87.143748][ T5772] veth1_vlan: entered promiscuous mode [ 87.180567][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.233416][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.298331][ T5772] veth0_macvtap: entered promiscuous mode [ 87.344144][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.378784][ T5772] veth1_macvtap: entered promiscuous mode [ 87.464588][ T5774] veth0_vlan: entered promiscuous mode [ 87.490862][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.521656][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.533543][ T5771] veth0_vlan: entered promiscuous mode [ 87.562986][ T5774] veth1_vlan: entered promiscuous mode [ 87.580021][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.590767][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.600098][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.609766][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.680148][ T5771] veth1_vlan: entered promiscuous mode [ 87.739257][ T5775] veth0_vlan: entered promiscuous mode [ 87.770089][ T5775] veth1_vlan: entered promiscuous mode [ 87.807275][ T5774] veth0_macvtap: entered promiscuous mode [ 87.828988][ T5774] veth1_macvtap: entered promiscuous mode [ 87.893678][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.906461][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.920676][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.961222][ T5775] veth0_macvtap: entered promiscuous mode [ 87.978181][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.990667][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.002641][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.039504][ T5775] veth1_macvtap: entered promiscuous mode [ 88.063839][ T5771] veth0_macvtap: entered promiscuous mode [ 88.087453][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.096967][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.106893][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.116405][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.135914][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.144141][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.164729][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.176827][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.187688][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.201313][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.212795][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.224179][ T5771] veth1_macvtap: entered promiscuous mode [ 88.250321][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.262679][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.275355][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.286697][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.299264][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.340561][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.353423][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.364040][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.373230][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.389226][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.400122][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.410275][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.422535][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.432543][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.443397][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.455571][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.488583][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.504230][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.516568][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.528033][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.538393][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.554657][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.566682][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.604479][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.613715][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.622986][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.632233][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.655533][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.669127][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.729945][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.749481][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.785832][ T5780] Bluetooth: hci1: command tx timeout [ 88.850061][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.865270][ T5780] Bluetooth: hci2: command tx timeout [ 88.894372][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.928684][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.946562][ T5084] Bluetooth: hci0: command tx timeout [ 88.949889][ T5788] Bluetooth: hci3: command tx timeout [ 88.965179][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.042576][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.064802][ T5838] 9pnet_fd: Insufficient options for proto=fd [ 89.081416][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.675009][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.683996][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.798862][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.841255][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.244669][ T5849] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 90.867414][ T5788] Bluetooth: hci1: command tx timeout [ 90.945594][ T5788] Bluetooth: hci2: command tx timeout [ 91.029685][ T5788] Bluetooth: hci3: command tx timeout [ 91.035377][ T5780] Bluetooth: hci0: command tx timeout [ 92.294689][ T10] cfg80211: failed to load regulatory.db [ 92.827911][ T5871] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.106928][ T5780] Bluetooth: hci3: command tx timeout [ 93.714944][ T5879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 93.754445][ T5879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 94.629961][ T5894] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11'. [ 94.639187][ T5894] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11'. [ 95.424215][ T5899] 9pnet_fd: Insufficient options for proto=fd [ 95.463729][ T5896] netlink: 23 bytes leftover after parsing attributes in process `syz.0.10'. [ 95.643516][ T5890] capability: warning: `syz.0.10' uses 32-bit capabilities (legacy support in use) [ 96.206020][ T5903] 9pnet_fd: Insufficient options for proto=fd [ 96.982274][ T5909] syz.0.15[5909]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.125574][ T5909] loop0: detected capacity change from 0 to 1024 [ 97.840779][ T5914] loop3: detected capacity change from 0 to 8 [ 98.402252][ T5918] loop1: detected capacity change from 0 to 8 [ 100.380966][ T5934] lo speed is unknown, defaulting to 1000 [ 100.387496][ T5934] lo speed is unknown, defaulting to 1000 [ 100.402130][ T5934] lo speed is unknown, defaulting to 1000 [ 100.435762][ T5934] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.484325][ T5934] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 101.039643][ T5934] lo speed is unknown, defaulting to 1000 [ 101.095982][ T5934] lo speed is unknown, defaulting to 1000 [ 101.121564][ T5934] lo speed is unknown, defaulting to 1000 [ 101.139001][ T5934] lo speed is unknown, defaulting to 1000 [ 101.160436][ T5937] siw: device registration error -23 [ 101.498422][ T8] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 101.576469][ T5944] ubi16: attaching mtd0 [ 101.684958][ T5944] ubi16: scanning is finished [ 101.690453][ T5944] ubi16: empty MTD device detected [ 102.106959][ T5951] netlink: 84 bytes leftover after parsing attributes in process `syz.1.26'. [ 102.125301][ T5951] netlink: 84 bytes leftover after parsing attributes in process `syz.1.26'. [ 102.162434][ T5954] netlink: 68 bytes leftover after parsing attributes in process `syz.2.25'. [ 102.561171][ T5944] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 102.730424][ T8] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 102.745093][ T8] usb 1-1: config 0 has no interface number 0 [ 102.787745][ T8] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 102.825631][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.879156][ T8] usb 1-1: Product: syz [ 102.895269][ T8] usb 1-1: Manufacturer: syz [ 102.918003][ T8] usb 1-1: SerialNumber: syz [ 102.969052][ T8] usb 1-1: config 0 descriptor?? [ 103.325033][ T5777] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.535132][ T5777] usb 4-1: Using ep0 maxpacket: 16 [ 103.549832][ T5777] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 103.564932][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.587320][ T5777] usb 4-1: Product: syz [ 103.604921][ T5777] usb 4-1: Manufacturer: syz [ 103.609608][ T5777] usb 4-1: SerialNumber: syz [ 103.651458][ T5777] usb 4-1: config 0 descriptor?? [ 103.700909][ T8] asix: probe of 1-1:0.251 failed with error -71 [ 103.790497][ T8] usb 1-1: USB disconnect, device number 2 [ 104.191156][ T5974] 9pnet_fd: Insufficient options for proto=fd [ 104.242937][ T5777] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 104.271725][ T5777] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.307317][ T5777] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 104.366157][ T5777] usb 4-1: media controller created [ 104.911342][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.017028][ T5777] zl10353_read_register: readreg error (reg=127, ret==0) [ 105.024209][ T5777] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 105.085120][ T5777] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 105.136332][ T5777] usb 4-1: USB disconnect, device number 2 [ 105.293504][ T5777] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 105.474996][ T5859] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.505222][ T56] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 105.679351][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 105.688682][ T56] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 105.703823][ T56] usb 3-1: config 0 has no interface number 0 [ 105.720916][ T5859] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 105.731231][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.740384][ T5859] usb 1-1: Product: syz [ 105.748996][ T56] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 105.763749][ T5859] usb 1-1: Manufacturer: syz [ 105.768823][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.784497][ T5859] usb 1-1: SerialNumber: syz [ 105.791389][ T56] usb 3-1: Product: syz [ 105.799122][ T5859] usb 1-1: config 0 descriptor?? [ 105.804634][ T56] usb 3-1: Manufacturer: syz [ 105.814270][ T56] usb 3-1: SerialNumber: syz [ 105.830529][ T56] usb 3-1: config 0 descriptor?? [ 105.855408][ T5817] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.045091][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 106.078608][ T5817] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 106.098612][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.112990][ T5817] usb 4-1: Product: syz [ 106.120976][ T5817] usb 4-1: Manufacturer: syz [ 106.147534][ T5817] usb 4-1: SerialNumber: syz [ 106.175871][ T5817] usb 4-1: config 0 descriptor?? [ 106.277037][ T5859] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 106.307985][ T5859] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.331487][ T5859] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 106.340239][ T5859] usb 1-1: media controller created [ 106.371649][ T56] asix: probe of 3-1:0.251 failed with error -71 [ 106.386394][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.411754][ T56] usb 3-1: USB disconnect, device number 2 [ 106.495893][ T5859] zl10353_read_register: readreg error (reg=127, ret==0) [ 106.511457][ T5859] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 106.521039][ T5859] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 106.539464][ T5859] usb 1-1: USB disconnect, device number 3 [ 106.637149][ T5859] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 106.646718][ T5817] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 106.672065][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.689486][ T5817] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 106.699464][ T5817] usb 4-1: media controller created [ 106.749697][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.857360][ T5817] zl10353_read_register: readreg error (reg=127, ret==0) [ 106.895803][ T5817] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 106.907599][ T5817] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 106.970770][ T5817] usb 4-1: USB disconnect, device number 3 [ 107.064375][ T5817] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 108.951718][ T5999] ubi16: attaching mtd0 [ 108.974777][ T5999] ubi16: scanning is finished [ 109.588703][ T5999] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 109.603912][ T5999] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 109.632206][ T5999] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 109.660613][ T5999] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 109.690523][ T5999] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 109.719656][ T5999] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 109.762407][ T5777] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.776341][ T5999] ubi16: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3591426276 [ 109.831216][ T5999] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 109.884961][ T6015] ubi16: background thread "ubi_bgt16d" started, PID 6015 [ 110.015171][ T5777] usb 3-1: Using ep0 maxpacket: 32 [ 110.023444][ T5777] usb 3-1: config 11 has an invalid interface number: 161 but max is 0 [ 110.033462][ T5777] usb 3-1: config 11 has no interface number 0 [ 110.040221][ T5777] usb 3-1: config 11 interface 161 has no altsetting 0 [ 110.047416][ T6019] 9pnet_fd: Insufficient options for proto=fd [ 110.059788][ T5777] usb 3-1: New USB device found, idVendor=10d2, idProduct=81d2, bcdDevice=11.e5 [ 110.071233][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.079745][ T5777] usb 3-1: Product: syz [ 110.084065][ T5777] usb 3-1: Manufacturer: syz [ 110.091408][ T5777] usb 3-1: SerialNumber: syz [ 110.125226][ T27] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 110.368924][ T27] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 110.378609][ T27] usb 4-1: config 0 has no interface number 0 [ 110.404454][ T27] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 110.414794][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.423058][ T27] usb 4-1: Product: syz [ 110.428033][ T27] usb 4-1: Manufacturer: syz [ 110.432802][ T27] usb 4-1: SerialNumber: syz [ 110.464785][ T27] usb 4-1: config 0 descriptor?? [ 111.894903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.910394][ T5777] usblcd 3-1:11.161: USBLCD model not supported. [ 111.918716][ T5777] usb 3-1: USB disconnect, device number 3 [ 112.211894][ T27] asix: probe of 4-1:0.251 failed with error -71 [ 112.244698][ T27] usb 4-1: USB disconnect, device number 4 [ 112.665051][ T56] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.694531][ T6027] loop2: detected capacity change from 0 to 32768 [ 112.734414][ T6027] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 112.743064][ T6027] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 112.805517][ T6027] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 112.830061][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 112.837331][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 112.867699][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 112.892182][ T56] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 112.922047][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.942331][ T56] usb 1-1: Product: syz [ 112.948432][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 111ms [ 112.961272][ T56] usb 1-1: Manufacturer: syz [ 112.967764][ T56] usb 1-1: SerialNumber: syz [ 112.986157][ T56] usb 1-1: config 0 descriptor?? [ 112.997600][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 113.003865][ T6027] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 113.477751][ T6036] loop3: detected capacity change from 0 to 1024 [ 113.497913][ T56] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 113.558858][ T56] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.605743][ T56] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 113.649026][ T56] usb 1-1: media controller created [ 113.744402][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.837576][ T56] zl10353_read_register: readreg error (reg=127, ret==0) [ 113.844756][ T56] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 113.876862][ T56] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 113.901666][ T56] usb 1-1: USB disconnect, device number 4 [ 114.784800][ T56] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 115.970986][ T6053] loop1: detected capacity change from 0 to 8 [ 116.024904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 116.844933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.219040][ T6046] sched: RT throttling activated [ 118.114508][ T6066] ubi: mtd0 is already attached to ubi16 [ 118.255312][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.465030][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 118.473017][ T27] usb 3-1: config 11 has an invalid interface number: 161 but max is 0 [ 118.495810][ T27] usb 3-1: config 11 has no interface number 0 [ 118.513366][ T27] usb 3-1: config 11 interface 161 has no altsetting 0 [ 118.534461][ T27] usb 3-1: New USB device found, idVendor=10d2, idProduct=81d2, bcdDevice=11.e5 [ 118.554974][ T5816] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.562573][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.571835][ T27] usb 3-1: Product: syz [ 118.584080][ T27] usb 3-1: Manufacturer: syz [ 118.603533][ T27] usb 3-1: SerialNumber: syz [ 118.784944][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 118.806370][ T5816] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 118.823321][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.834124][ T5816] usb 1-1: Product: syz [ 118.850894][ T5816] usb 1-1: Manufacturer: syz [ 118.866507][ T5816] usb 1-1: SerialNumber: syz [ 119.514880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.344887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.704877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.724874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.754311][ T5816] usb 1-1: config 0 descriptor?? [ 122.062921][ T27] usblcd 3-1:11.161: USBLCD model not supported. [ 122.349888][ T27] usb 3-1: USB disconnect, device number 4 [ 122.435418][ T5816] usb 1-1: can't set config #0, error -71 [ 122.443375][ T5816] usb 1-1: USB disconnect, device number 5 [ 122.992641][ T6083] ubi: mtd0 is already attached to ubi16 [ 123.605891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 123.857512][ T6096] random: crng reseeded on system resumption [ 125.476974][ T6110] ubi: mtd0 is already attached to ubi16 [ 126.007749][ T6111] ubi: mtd0 is already attached to ubi16 [ 126.203481][ T6119] 9pnet_fd: Insufficient options for proto=fd [ 126.395157][ T27] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 126.692893][ T27] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 126.701394][ T27] usb 4-1: config 0 has no interface number 0 [ 126.839484][ T27] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 126.849091][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.857202][ T27] usb 4-1: Product: syz [ 126.861570][ T27] usb 4-1: Manufacturer: syz [ 126.871571][ T27] usb 4-1: SerialNumber: syz [ 126.899238][ T27] usb 4-1: config 0 descriptor?? [ 127.233645][ T6122] Zero length message leads to an empty skb [ 127.504147][ T27] asix: probe of 4-1:0.251 failed with error -71 [ 127.647424][ T6132] loop2: detected capacity change from 0 to 1024 [ 127.793692][ T6134] 9pnet_fd: Insufficient options for proto=fd [ 128.515480][ T27] usb 4-1: USB disconnect, device number 5 [ 128.646523][ T6137] 9pnet_fd: Insufficient options for proto=fd [ 129.468802][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.661918][ T6151] loop3: detected capacity change from 0 to 1024 [ 129.675035][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 130.985807][ T8] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 132.420731][ T6151] hfsplus: xattr searching failed [ 132.426282][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.434331][ T8] usb 1-1: Product: syz [ 132.452878][ T8] usb 1-1: Manufacturer: syz [ 132.468018][ T8] usb 1-1: SerialNumber: syz [ 132.616269][ T8] usb 1-1: config 0 descriptor?? [ 132.665125][ T8] usb 1-1: can't set config #0, error -71 [ 132.920894][ T8] usb 1-1: USB disconnect, device number 6 [ 133.132407][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.545255][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.928441][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.79'. [ 133.937712][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.79'. [ 135.155694][ T6184] netlink: 156 bytes leftover after parsing attributes in process `syz.3.82'. [ 137.555971][ T6205] loop2: detected capacity change from 0 to 1024 [ 138.417316][ T6205] hfsplus: xattr searching failed [ 140.617105][ T6221] 9pnet_fd: Insufficient options for proto=fd [ 141.240652][ T6226] loop3: detected capacity change from 0 to 1024 [ 142.180372][ T6237] loop2: detected capacity change from 0 to 1024 [ 143.594975][ T6241] netlink: 68 bytes leftover after parsing attributes in process `syz.1.94'. [ 144.184880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 145.004914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 147.593888][ T6261] 9pnet_fd: Insufficient options for proto=fd [ 148.305086][ T5816] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.495405][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 148.513694][ T5816] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 148.529440][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.588531][ T5816] usb 4-1: Product: syz [ 148.630319][ T5816] usb 4-1: Manufacturer: syz [ 148.672776][ T5816] usb 4-1: SerialNumber: syz [ 148.700113][ T5816] usb 4-1: config 0 descriptor?? [ 149.145617][ T6271] ubi: mtd0 is already attached to ubi16 [ 149.708831][ T5816] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 149.726025][ T5816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.746563][ T5816] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 149.791705][ T5816] usb 4-1: media controller created [ 149.942986][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.951870][ T6259] ------------[ cut here ]------------ [ 149.958164][ T6259] usb 4-1: BOGUS control dir, pipe 80000680 doesn't match bRequestType c0 [ 150.003291][ T6259] WARNING: CPU: 0 PID: 6259 at drivers/usb/core/urb.c:413 usb_submit_urb+0x108d/0x17a0 [ 150.013828][ T6259] Modules linked in: [ 150.017958][ T6259] CPU: 0 PID: 6259 Comm: syz.3.97 Not tainted syzkaller #0 [ 150.025691][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.036220][ T6259] RIP: 0010:usb_submit_urb+0x108d/0x17a0 [ 150.041974][ T6259] Code: fc ff df 41 0f b6 44 05 00 84 c0 0f 85 18 06 00 00 45 0f b6 07 48 c7 c7 40 d8 6b 8b 48 8b 34 24 4c 89 e2 89 e9 e8 73 ae e7 fa <0f> 0b 48 bd 00 00 00 00 00 fc ff df e9 91 f4 ff ff 44 89 f1 80 e1 [ 150.061874][ T6259] RSP: 0018:ffffc9000464f5b8 EFLAGS: 00010246 [ 150.068301][ T6259] RAX: 0466e0d5bf4ba400 RBX: ffff88802f2cce00 RCX: 0000000000080000 [ 150.076549][ T6259] RDX: ffffc9000cc6a000 RSI: 0000000000005f8b RDI: 0000000000005f8c [ 150.084576][ T6259] RBP: 0000000080000680 R08: ffffc9000464f1c7 R09: 1ffff920008c9e38 [ 150.092672][ T6259] R10: dffffc0000000000 R11: fffff520008c9e39 R12: ffff888145aa7460 [ 150.100789][ T6259] R13: 1ffff110032d412c R14: ffff88803097f0f8 R15: ffff8880196a0960 [ 150.108882][ T6259] FS: 00007f6a0b3f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 150.118218][ T6259] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.125443][ T6259] CR2: 0000001b2dc18ff8 CR3: 000000005d23d000 CR4: 00000000003506f0 [ 150.133530][ T6259] Call Trace: [ 150.136973][ T6259] [ 150.139964][ T6259] ? __init_swait_queue_head+0xa8/0x140 [ 150.145677][ T6259] usb_start_wait_urb+0x140/0x580 [ 150.150786][ T6259] ? usb_api_blocking_completion+0xb0/0xb0 [ 150.156746][ T6259] usb_control_msg+0x235/0x3e0 [ 150.161585][ T6259] dtv5100_i2c_msg+0x231/0x2f0 [ 150.166421][ T6259] dtv5100_i2c_xfer+0x1a5/0x610 [ 150.171343][ T6259] ? rt_mutex_slowlock+0x367/0x610 [ 150.176615][ T6259] ? dtv5100_tuner_attach+0x100/0x100 [ 150.182038][ T6259] __i2c_transfer+0x891/0x2090 [ 150.187002][ T6259] ? i2c_cmd+0x110/0x110 [ 150.191297][ T6259] ? i2c_transfer+0x11b/0x3a0 [ 150.196086][ T6259] i2c_transfer+0x261/0x3a0 [ 150.200718][ T6259] ? __i2c_transfer+0x2090/0x2090 [ 150.205860][ T6259] ? __might_fault+0xaa/0x120 [ 150.210635][ T6259] i2c_transfer_buffer_flags+0x10e/0x1a0 [ 150.216338][ T6259] ? i2c_transfer+0x3a0/0x3a0 [ 150.221085][ T6259] ? __might_fault+0xc6/0x120 [ 150.226289][ T6259] ? _copy_from_user+0xa5/0xe0 [ 150.231127][ T6259] i2cdev_write+0x8b/0x120 [ 150.235969][ T6259] do_iter_write+0x4e5/0xc50 [ 150.240614][ T6259] ? i2cdev_read+0x180/0x180 [ 150.245391][ T6259] ? vfs_iter_write+0xa0/0xa0 [ 150.250136][ T6259] ? __import_iovec+0x5f2/0x850 [ 150.255115][ T6259] ? import_iovec+0x73/0xa0 [ 150.259722][ T6259] do_writev+0x27f/0x480 [ 150.264037][ T6259] ? do_readv+0x460/0x460 [ 150.268582][ T6259] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 150.274634][ T6259] ? lock_chain_count+0x20/0x20 [ 150.279637][ T6259] ? lockdep_hardirqs_on+0x98/0x150 [ 150.285010][ T6259] do_syscall_64+0x55/0xb0 [ 150.289499][ T6259] ? clear_bhb_loop+0x40/0x90 [ 150.294257][ T6259] ? clear_bhb_loop+0x40/0x90 [ 150.299041][ T6259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.305110][ T6259] RIP: 0033:0x7f6a0d19de59 [ 150.309631][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.329619][ T6259] RSP: 002b:00007f6a0b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 150.338409][ T6259] RAX: ffffffffffffffda RBX: 00007f6a0d425fa0 RCX: 00007f6a0d19de59 [ 150.346589][ T6259] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 150.354632][ T6259] RBP: 00007f6a0d233e6f R08: 0000000000000000 R09: 0000000000000000 [ 150.362854][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.370951][ T6259] R13: 00007f6a0d426038 R14: 00007f6a0d425fa0 R15: 00007ffed4620f68 [ 150.379129][ T6259] [ 150.382201][ T6259] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 150.389570][ T6259] CPU: 0 PID: 6259 Comm: syz.3.97 Not tainted syzkaller #0 [ 150.396810][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.406915][ T6259] Call Trace: [ 150.410245][ T6259] [ 150.413254][ T6259] dump_stack_lvl+0x18c/0x250 [ 150.417986][ T6259] ? show_regs_print_info+0x20/0x20 [ 150.423234][ T6259] ? load_image+0x420/0x420 [ 150.427778][ T6259] panic+0x2ca/0x720 [ 150.431721][ T6259] ? bpf_jit_dump+0xd0/0xd0 [ 150.436395][ T6259] __warn+0x2e0/0x470 [ 150.440413][ T6259] ? usb_submit_urb+0x108d/0x17a0 [ 150.445465][ T6259] ? usb_submit_urb+0x108d/0x17a0 [ 150.450514][ T6259] report_bug+0x2be/0x4f0 [ 150.454882][ T6259] ? usb_submit_urb+0x108d/0x17a0 [ 150.459976][ T6259] ? usb_submit_urb+0x108d/0x17a0 [ 150.465047][ T6259] ? usb_submit_urb+0x108f/0x17a0 [ 150.470133][ T6259] handle_bug+0xcf/0x120 [ 150.474426][ T6259] exc_invalid_op+0x1a/0x50 [ 150.478950][ T6259] asm_exc_invalid_op+0x1a/0x20 [ 150.483833][ T6259] RIP: 0010:usb_submit_urb+0x108d/0x17a0 [ 150.489531][ T6259] Code: fc ff df 41 0f b6 44 05 00 84 c0 0f 85 18 06 00 00 45 0f b6 07 48 c7 c7 40 d8 6b 8b 48 8b 34 24 4c 89 e2 89 e9 e8 73 ae e7 fa <0f> 0b 48 bd 00 00 00 00 00 fc ff df e9 91 f4 ff ff 44 89 f1 80 e1 [ 150.509171][ T6259] RSP: 0018:ffffc9000464f5b8 EFLAGS: 00010246 [ 150.515292][ T6259] RAX: 0466e0d5bf4ba400 RBX: ffff88802f2cce00 RCX: 0000000000080000 [ 150.523276][ T6259] RDX: ffffc9000cc6a000 RSI: 0000000000005f8b RDI: 0000000000005f8c [ 150.531262][ T6259] RBP: 0000000080000680 R08: ffffc9000464f1c7 R09: 1ffff920008c9e38 [ 150.539287][ T6259] R10: dffffc0000000000 R11: fffff520008c9e39 R12: ffff888145aa7460 [ 150.547277][ T6259] R13: 1ffff110032d412c R14: ffff88803097f0f8 R15: ffff8880196a0960 [ 150.555285][ T6259] ? usb_submit_urb+0x108d/0x17a0 [ 150.560336][ T6259] ? __init_swait_queue_head+0xa8/0x140 [ 150.565903][ T6259] usb_start_wait_urb+0x140/0x580 [ 150.570953][ T6259] ? usb_api_blocking_completion+0xb0/0xb0 [ 150.576787][ T6259] usb_control_msg+0x235/0x3e0 [ 150.581573][ T6259] dtv5100_i2c_msg+0x231/0x2f0 [ 150.586367][ T6259] dtv5100_i2c_xfer+0x1a5/0x610 [ 150.591252][ T6259] ? rt_mutex_slowlock+0x367/0x610 [ 150.596386][ T6259] ? dtv5100_tuner_attach+0x100/0x100 [ 150.601870][ T6259] __i2c_transfer+0x891/0x2090 [ 150.606674][ T6259] ? i2c_cmd+0x110/0x110 [ 150.610944][ T6259] ? i2c_transfer+0x11b/0x3a0 [ 150.615641][ T6259] i2c_transfer+0x261/0x3a0 [ 150.620195][ T6259] ? __i2c_transfer+0x2090/0x2090 [ 150.625255][ T6259] ? __might_fault+0xaa/0x120 [ 150.629968][ T6259] i2c_transfer_buffer_flags+0x10e/0x1a0 [ 150.635626][ T6259] ? i2c_transfer+0x3a0/0x3a0 [ 150.640361][ T6259] ? __might_fault+0xc6/0x120 [ 150.645066][ T6259] ? _copy_from_user+0xa5/0xe0 [ 150.649875][ T6259] i2cdev_write+0x8b/0x120 [ 150.654310][ T6259] do_iter_write+0x4e5/0xc50 [ 150.659101][ T6259] ? i2cdev_read+0x180/0x180 [ 150.663724][ T6259] ? vfs_iter_write+0xa0/0xa0 [ 150.668420][ T6259] ? __import_iovec+0x5f2/0x850 [ 150.673297][ T6259] ? import_iovec+0x73/0xa0 [ 150.677821][ T6259] do_writev+0x27f/0x480 [ 150.682093][ T6259] ? do_readv+0x460/0x460 [ 150.686460][ T6259] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 150.692462][ T6259] ? lock_chain_count+0x20/0x20 [ 150.697349][ T6259] ? lockdep_hardirqs_on+0x98/0x150 [ 150.702665][ T6259] do_syscall_64+0x55/0xb0 [ 150.707111][ T6259] ? clear_bhb_loop+0x40/0x90 [ 150.711848][ T6259] ? clear_bhb_loop+0x40/0x90 [ 150.716567][ T6259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.722501][ T6259] RIP: 0033:0x7f6a0d19de59 [ 150.726930][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.746555][ T6259] RSP: 002b:00007f6a0b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 150.755000][ T6259] RAX: ffffffffffffffda RBX: 00007f6a0d425fa0 RCX: 00007f6a0d19de59 [ 150.762993][ T6259] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 150.770976][ T6259] RBP: 00007f6a0d233e6f R08: 0000000000000000 R09: 0000000000000000 [ 150.778961][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.786943][ T6259] R13: 00007f6a0d426038 R14: 00007f6a0d425fa0 R15: 00007ffed4620f68 [ 150.794955][ T6259] [ 150.798178][ T6259] Kernel Offset: disabled [ 150.802578][ T6259] Rebooting in 86400 seconds..