last executing test programs: 8.890209151s ago: executing program 2 (id=264): syz_io_uring_setup(0x50d1, &(0x7f00000001c0)={0x0, 0xfe50, 0x8, 0x0, 0x259}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r0 = syz_open_dev$video(&(0x7f0000000000), 0xa8384043, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0x2, 0x0, 0x55595659, 0x0, 0x0, 0x0, 0x9, 0x1}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, 0x0, 0x9b5825, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x1, 0x3f, 0xa, 0x70, 0x67}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002700)={0x2020}, 0x2020) 8.223565847s ago: executing program 3 (id=265): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x0, 0xfefffffc, 0x6a39}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0xd, 0x6) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7.880577065s ago: executing program 2 (id=268): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x4365, 0x9, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x28, 0x10001, 0x1ff, 0xe669, 0x200, 0x5aa}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xec2fa4b81eaeea5e}, {0x6, 0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10000, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x54015}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.535079203s ago: executing program 3 (id=269): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) pwritev(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000240)=0x97) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7ff}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xd497}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) 7.181618931s ago: executing program 3 (id=270): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) 7.074644174s ago: executing program 2 (id=271): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone(0x89e6600, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="d642f8a394297f4fb5c665b5e0c3eb8e7e5f1d4ec4d53d04df3bcce453312c61f15edb96b71e32d418c026caa065d7fdf4c15f8b710e1cc06fd4") openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b4d, &(0x7f00000000c0)) 6.911795378s ago: executing program 1 (id=273): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x0, 0x56, 0x0, 0x1}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 5.95501057s ago: executing program 3 (id=274): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x505043, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000003c0), 0x6, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket$inet(0x2, 0x4000000000000001, 0x0) getpid() r1 = syz_usbip_server_init(0x1) write$usbip_server(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000440)={0x7, "7973f975ca5ecc1d777a549fafbb3da4831e965cf75899b0cd90cf03718bfe6f6db40416cf1fddd007467801e8a50e168c03aeb6caf9df7127d6058129a1ffb4ec06d0c02c9d634dd7366c734f0c7e3879f045654179107f4964337161fa4b9684fcd97c11776e1f449cf6fa9f76759321b35358b04b2eeb8119377031316967654225e86434ad647c93b695454b4bf8397dbe599ba9436e19c8aadfde4d0efe6b495ef51384ca23f348460e212c03344a6cba95494979176ed8069cff9f378dfe67d6f4850bb410b0b7fb0086945236ac49c82306a29d02c050456ec67093c9926b057518369c219c6db1e635d964a11a2697e31e7d7d0ac76fac9359dbca5466f3a9a72e9427ecf17db990477f47c2abeb2a3bfa44255bc6c8d1cc1593b22f8ebd1483ff3484d1c20a21d99dca1c5f70a08d47302ff98b0683ea45cb6d7f895e15fafb9d59284b2c620986e3da897b9de103c804a0b701f0a51000102e6be7bded286ac1f5aca8860976550b639fa41c6a85fb730cb09118c1f796ff40a6b32e1aadf2cca68d114f0f48b211fe9fcdda464229c19a178ce5bcde90095b59b58adcceb0b82f32d87a5b1cac8ad4ceb270e7059eea5c71ceb818cb3ea32947951c254b6b91b7bbea07013f88c144b9d4e30402d58db9eb230757070780d5bfdae5e2f6cf91775f997cf91022a14651f520a2ac287870cb408bdc768aa97a8eb2"}) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x8000) 5.885405842s ago: executing program 2 (id=275): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) socketpair(0x15, 0x3, 0x0, &(0x7f0000000100)={0x0, 0x0}) socket$inet(0x2, 0x4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x8a, 0x0, 0x0, 0x0, 0x1) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000240)='add 2-1', 0x7) close(r1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x98f907, 0x2}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='2-1\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/usb/drivers/usbip-host/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='2-1', 0x3) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0x25, &(0x7f0000000040)='highspeed', 0x6) close(r5) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/usb/devices/2-1/usbip_sockfd\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='3', 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) 5.241802127s ago: executing program 0 (id=276): syz_io_uring_setup(0x50d1, &(0x7f00000001c0)={0x0, 0xfe50, 0x8, 0x0, 0x259}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r0 = syz_open_dev$video(&(0x7f0000000000), 0xa8384043, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0x2, 0x0, 0x55595659, 0x0, 0x0, 0x0, 0x9, 0x1}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, 0x0, 0x9b5825, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x1, 0x3f, 0xa, 0x70, 0x67}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002700)={0x2020}, 0x2020) 4.168563222s ago: executing program 0 (id=277): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x0, 0xfefffffc, 0x6a39}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0xd, 0x6) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.166456983s ago: executing program 2 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) 4.054993495s ago: executing program 0 (id=279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x4365, 0x9, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x28, 0x10001, 0x1ff, 0xe669, 0x200, 0x5aa}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xec2fa4b81eaeea5e}, {0x6, 0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10000, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x54015}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.951341747s ago: executing program 1 (id=280): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x401, 0x0, 0x8000000000000000, 0x2, 0x0, 0x0, 0x1, 0x65c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0xa, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1\x00', 0x1) 3.921777158s ago: executing program 2 (id=281): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000680)=0x1, 0x4) openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0xc0c42, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) io_setup(0x1, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') 3.545597807s ago: executing program 3 (id=282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='2', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r7, &(0x7f0000000440)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000940)='dummy_udc.0', 0xb) 3.510996338s ago: executing program 1 (id=283): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone(0x89e6600, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="d642f8a394297f4fb5c665b5e0c3eb8e7e5f1d4ec4d53d04df3bcce453312c61f15edb96b71e32d418c026caa065d7fdf4c15f8b710e1cc06fd4") openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b4d, &(0x7f00000000c0)) 3.201090376s ago: executing program 0 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r0, &(0x7f0000008880)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {0x0}], 0x2}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r4, 0x2000000) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x1f, 0x0, 0x1000000}) 2.445591913s ago: executing program 1 (id=285): syz_io_uring_setup(0x50d1, &(0x7f00000001c0)={0x0, 0xfe50, 0x8, 0x0, 0x259}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r0 = syz_open_dev$video(&(0x7f0000000000), 0xa8384043, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0x2, 0x0, 0x55595659, 0x0, 0x0, 0x0, 0x9, 0x1}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, 0x0, 0x9b5825, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x1, 0x3f, 0xa, 0x70, 0x67}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002700)={0x2020}, 0x2020) 1.616029902s ago: executing program 0 (id=286): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) socketpair(0x15, 0x3, 0x0, &(0x7f0000000100)={0x0, 0x0}) socket$inet(0x2, 0x4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x8a, 0x0, 0x0, 0x0, 0x1) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000240)='add 2-1', 0x7) close(r1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x98f907, 0x2}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='2-1\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/usb/drivers/usbip-host/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='2-1', 0x3) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0x25, &(0x7f0000000040)='highspeed', 0x6) close(r5) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/usb/devices/2-1/usbip_sockfd\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='3', 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) 659.245055ms ago: executing program 1 (id=287): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x0, 0xfefffffc, 0x6a39}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0xd, 0x6) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 562.969437ms ago: executing program 1 (id=288): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x56, 0x0, 0x1}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 238.748995ms ago: executing program 0 (id=289): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 0s ago: executing program 3 (id=290): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x505043, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000003c0), 0x6, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket$inet(0x2, 0x4000000000000001, 0x0) getpid() r1 = syz_usbip_server_init(0x1) write$usbip_server(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000440)={0x7, "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"}) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. [ 67.940420][ T5759] cgroup: Unknown subsys name 'net' [ 68.069671][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.461406][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.925128][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.928387][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.934348][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.945767][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.954688][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.962351][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.969570][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.971649][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.979041][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.993902][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.004412][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.023074][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.023585][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.043779][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.045851][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.058361][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.058898][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.066224][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.074115][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.079983][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.087374][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.101531][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.110163][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.117684][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.490903][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.497677][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.526937][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 71.590930][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 71.608304][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 71.716105][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 71.752373][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.759701][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.767501][ T5770] bridge_slave_0: entered allmulticast mode [ 71.774566][ T5770] bridge_slave_0: entered promiscuous mode [ 71.814596][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.821778][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.831232][ T5770] bridge_slave_1: entered allmulticast mode [ 71.838103][ T5770] bridge_slave_1: entered promiscuous mode [ 71.898697][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.906326][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.913801][ T5772] bridge_slave_0: entered allmulticast mode [ 71.920536][ T5772] bridge_slave_0: entered promiscuous mode [ 71.928378][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.935596][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.942949][ T5772] bridge_slave_1: entered allmulticast mode [ 71.949656][ T5772] bridge_slave_1: entered promiscuous mode [ 71.956425][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.963771][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.970933][ T5773] bridge_slave_0: entered allmulticast mode [ 71.978003][ T5773] bridge_slave_0: entered promiscuous mode [ 71.986104][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.993325][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.000480][ T5773] bridge_slave_1: entered allmulticast mode [ 72.007321][ T5773] bridge_slave_1: entered promiscuous mode [ 72.020812][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.057896][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.090748][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.118613][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.126116][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.133386][ T5771] bridge_slave_0: entered allmulticast mode [ 72.140105][ T5771] bridge_slave_0: entered promiscuous mode [ 72.149932][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.162139][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.175032][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.207382][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.215697][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.224188][ T5771] bridge_slave_1: entered allmulticast mode [ 72.230896][ T5771] bridge_slave_1: entered promiscuous mode [ 72.259612][ T5773] team0: Port device team_slave_0 added [ 72.270294][ T5770] team0: Port device team_slave_0 added [ 72.297766][ T5773] team0: Port device team_slave_1 added [ 72.315266][ T5770] team0: Port device team_slave_1 added [ 72.324429][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.336306][ T5772] team0: Port device team_slave_0 added [ 72.345134][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.373134][ T5772] team0: Port device team_slave_1 added [ 72.397622][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.404743][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.430712][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.442948][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.449914][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.476532][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.500023][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.507063][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.533023][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.552960][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.559940][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.586229][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.612763][ T5771] team0: Port device team_slave_0 added [ 72.627191][ T5771] team0: Port device team_slave_1 added [ 72.639976][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.647295][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.673395][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.727729][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.734837][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.760817][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.778086][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.787467][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.813788][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.826195][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.833275][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.859335][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.876249][ T5770] hsr_slave_0: entered promiscuous mode [ 72.883423][ T5770] hsr_slave_1: entered promiscuous mode [ 72.932918][ T5773] hsr_slave_0: entered promiscuous mode [ 72.939659][ T5773] hsr_slave_1: entered promiscuous mode [ 72.946449][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.954356][ T5773] Cannot create hsr debugfs directory [ 73.013554][ T5772] hsr_slave_0: entered promiscuous mode [ 73.021493][ T5772] hsr_slave_1: entered promiscuous mode [ 73.028156][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.036683][ T5772] Cannot create hsr debugfs directory [ 73.045806][ T5771] hsr_slave_0: entered promiscuous mode [ 73.053136][ T5771] hsr_slave_1: entered promiscuous mode [ 73.059251][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.067062][ T5771] Cannot create hsr debugfs directory [ 73.163835][ T5087] Bluetooth: hci3: command tx timeout [ 73.169500][ T5087] Bluetooth: hci1: command tx timeout [ 73.172989][ T5781] Bluetooth: hci0: command tx timeout [ 73.175749][ T5087] Bluetooth: hci2: command tx timeout [ 73.472525][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.484299][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.495205][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.506609][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.568976][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.593411][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.608971][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.620141][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.681497][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.709131][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.733304][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.752326][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.850041][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.859902][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.872742][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.883684][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.904541][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.965115][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.991445][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.017898][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.025257][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.056268][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.063403][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.102762][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.125414][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.139364][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.146552][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.202349][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.209505][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.235224][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.253531][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.260716][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.306963][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.314150][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.338662][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.401155][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.439636][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.446838][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.492538][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.499841][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.590642][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.777105][ T5773] veth0_vlan: entered promiscuous mode [ 74.812207][ T5773] veth1_vlan: entered promiscuous mode [ 74.898632][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.921211][ T5773] veth0_macvtap: entered promiscuous mode [ 74.940280][ T5773] veth1_macvtap: entered promiscuous mode [ 74.991290][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.020078][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.035601][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.072191][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.082111][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.091942][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.101082][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.124956][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.171852][ T5770] veth0_vlan: entered promiscuous mode [ 75.226705][ T5771] veth0_vlan: entered promiscuous mode [ 75.243561][ T5087] Bluetooth: hci2: command tx timeout [ 75.243958][ T51] Bluetooth: hci0: command tx timeout [ 75.248990][ T5087] Bluetooth: hci1: command tx timeout [ 75.254941][ T5781] Bluetooth: hci3: command tx timeout [ 75.265918][ T5770] veth1_vlan: entered promiscuous mode [ 75.316728][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.326250][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.342408][ T5771] veth1_vlan: entered promiscuous mode [ 75.360632][ T5772] veth0_vlan: entered promiscuous mode [ 75.407095][ T5772] veth1_vlan: entered promiscuous mode [ 75.432004][ T5770] veth0_macvtap: entered promiscuous mode [ 75.446568][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.457300][ T5770] veth1_macvtap: entered promiscuous mode [ 75.463302][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.488747][ T5772] veth0_macvtap: entered promiscuous mode [ 75.499559][ T5772] veth1_macvtap: entered promiscuous mode [ 75.539820][ T5771] veth0_macvtap: entered promiscuous mode [ 75.559092][ T5771] veth1_macvtap: entered promiscuous mode [ 75.576219][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.596640][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.608656][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.642263][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.666804][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.681135][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.692431][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.710029][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.720263][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.735139][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.753695][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.791516][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.854909][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.902598][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.945107][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.995182][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.129954][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.158011][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.208447][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.263845][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.468873][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.555977][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.585641][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.636674][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.664262][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.695246][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.720285][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.812316][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.862713][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.883021][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.893790][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.912850][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.923655][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.935243][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.964033][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.975108][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.988075][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.019231][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.118975][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.132379][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.145267][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.156391][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.323905][ T51] Bluetooth: hci2: command tx timeout [ 77.329450][ T5087] Bluetooth: hci0: command tx timeout [ 77.335652][ T5786] Bluetooth: hci3: command tx timeout [ 77.345028][ T5781] Bluetooth: hci1: command tx timeout [ 77.974541][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.988402][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.115874][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.159546][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.929228][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.981200][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.016587][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.080754][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.204110][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.215544][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.320734][ T5860] autofs4:pid:5860:autofs_fill_super: called with bogus options [ 79.378307][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.403914][ T5781] Bluetooth: hci1: command tx timeout [ 79.409535][ T5786] Bluetooth: hci3: command tx timeout [ 79.415590][ T51] Bluetooth: hci2: command tx timeout [ 79.421116][ T5087] Bluetooth: hci0: command tx timeout [ 79.488149][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.678687][ T5865] syzkaller0: entered promiscuous mode [ 80.698365][ T5865] syzkaller0: entered allmulticast mode [ 80.709434][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 80.727040][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.737952][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.762883][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.770889][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.783052][ T5872] Zero length message leads to an empty skb [ 80.942706][ T5871] Invalid ELF header magic: != ELF [ 81.103868][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.982928][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 81.998353][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 82.008254][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 82.022306][ T23] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 82.031912][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.040288][ T23] usb 2-1: Product: syz [ 82.044733][ T23] usb 2-1: Manufacturer: syz [ 82.050114][ T23] usb 2-1: SerialNumber: syz [ 82.080846][ T23] usb 2-1: config 0 descriptor?? [ 82.994000][ T23] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 84.838292][ T5839] usb 2-1: USB disconnect, device number 2 [ 85.899707][ T5896] TCP: TCP_TX_DELAY enabled [ 86.001438][ T5899] autofs4:pid:5899:autofs_fill_super: called with bogus options [ 86.237976][ T5905] syzkaller0: entered promiscuous mode [ 86.250794][ T5905] syzkaller0: entered allmulticast mode [ 86.362316][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 86.408455][ T5908] nlmon0: entered promiscuous mode [ 86.420984][ T5908] nlmon0: entered allmulticast mode [ 86.500392][ T5909] Invalid ELF header magic: != ELF [ 86.523285][ T5908] syz.3.21 (5908) used greatest stack depth: 20648 bytes left [ 87.017111][ T9] cfg80211: failed to load regulatory.db [ 88.840635][ T5933] sctp: failed to load transform for md5: -2 [ 89.768265][ T5959] autofs4:pid:5959:autofs_fill_super: called with bogus options [ 89.811830][ T5958] syzkaller0: entered promiscuous mode [ 89.873475][ T5958] syzkaller0: entered allmulticast mode [ 91.749953][ T5966] program syz.0.33 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.775204][ T5966] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 91.974756][ T5972] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 92.822441][ T5972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.977856][ T5980] Invalid ELF header magic: != ELF [ 93.910753][ T5992] syz.0.40[5992]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.990150][ T6005] autofs4:pid:6005:autofs_fill_super: called with bogus options [ 95.008024][ T6007] syzkaller0: entered promiscuous mode [ 95.039023][ T6007] syzkaller0: entered allmulticast mode [ 95.277821][ T6010] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.616195][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 96.670997][ T6022] vlan1: entered promiscuous mode [ 96.680912][ T6022] vlan1: entered allmulticast mode [ 96.706691][ T6022] veth0_vlan: entered allmulticast mode [ 98.721149][ T6052] autofs4:pid:6052:autofs_fill_super: called with bogus options [ 99.604072][ T6049] Invalid ELF header magic: != ELF [ 104.046590][ T6084] fuse: Unknown parameter 'grou00000000000000000000' [ 104.213245][ T6077] program syz.2.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.278219][ T6077] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 104.408479][ T6091] syzkaller0: entered promiscuous mode [ 104.418948][ T6091] syzkaller0: entered allmulticast mode [ 104.686953][ T6094] Invalid ELF header magic: != ELF [ 105.693885][ T6108] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 105.700811][ T6108] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.822034][ T6108] vhci_hcd vhci_hcd.0: Device attached [ 105.874455][ T6109] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 105.965598][ T4318] vhci_hcd: stop threads [ 106.112938][ T5811] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 106.548182][ T4318] vhci_hcd: release socket [ 106.652115][ T6108] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 106.660233][ T4318] vhci_hcd: disconnect device [ 108.270357][ T6134] fuse: Unknown parameter 'grou00000000000000000000' [ 108.813518][ T6139] syzkaller0: entered promiscuous mode [ 108.870163][ T6139] syzkaller0: entered allmulticast mode [ 109.729307][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 109.790235][ T6150] Invalid ELF header magic: != ELF [ 110.666811][ T6160] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 110.697226][ T6160] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 110.778488][ T6164] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 110.785145][ T6164] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.845496][ T6164] vhci_hcd vhci_hcd.0: Device attached [ 110.925700][ T6164] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 112.398173][ T6165] vhci_hcd: connection reset by peer [ 113.852710][ T49] vhci_hcd: stop threads [ 113.860352][ T49] vhci_hcd: release socket [ 113.930873][ T49] vhci_hcd: disconnect device [ 114.085013][ T5811] vhci_hcd: vhci_device speed not set [ 114.159152][ T6183] fuse: Unknown parameter 'grou00000000000000000000' [ 115.116086][ T6192] syzkaller0: entered promiscuous mode [ 115.143368][ T6192] syzkaller0: entered allmulticast mode [ 116.931345][ T6201] program syz.3.94 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.990070][ T6201] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 117.317116][ T6205] Invalid ELF header magic: != ELF [ 118.965627][ T6215] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 118.972274][ T6215] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.008712][ T6215] vhci_hcd vhci_hcd.0: Device attached [ 119.051715][ T6216] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 2 [ 119.075922][ T49] vhci_hcd: stop threads [ 119.080217][ T49] vhci_hcd: release socket [ 119.087257][ T6215] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 119.115182][ T49] vhci_hcd: disconnect device [ 119.270612][ T6215] bond1: option mode: invalid value (17) [ 121.375610][ T6234] fuse: Unknown parameter 'group_i00000000000000000000' [ 121.414395][ T6215] bond1 (unregistering): Released all slaves [ 122.538235][ T6247] syzkaller0: entered promiscuous mode [ 122.543911][ T6247] syzkaller0: entered allmulticast mode [ 123.289049][ T6253] Invalid ELF header magic: != ELF [ 123.666294][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'. [ 123.704857][ T6260] program syz.3.109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.749896][ T6260] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 125.056538][ T6259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.633026][ T6264] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.642173][ T6264] bond2: (slave team0): Enslaving as an active interface with an up link [ 125.671164][ T6267] bond2: entered promiscuous mode [ 125.782878][ T6267] team0: entered promiscuous mode [ 125.810923][ T6267] team_slave_0: entered promiscuous mode [ 125.823624][ T6267] team_slave_1: entered promiscuous mode [ 125.837520][ T6267] bond2: entered allmulticast mode [ 125.854112][ T6267] team0: entered allmulticast mode [ 125.880474][ T6273] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 125.887130][ T6273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.900445][ T6267] team_slave_0: entered allmulticast mode [ 125.920866][ T6267] team_slave_1: entered allmulticast mode [ 125.939077][ T6273] vhci_hcd vhci_hcd.0: Device attached [ 127.166401][ T5861] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 129.008701][ T6284] tty tty23: ldisc open failed (-12), clearing slot 22 [ 129.271995][ T6274] vhci_hcd: connection reset by peer [ 129.338423][ T49] vhci_hcd: stop threads [ 129.367320][ T49] vhci_hcd: release socket [ 129.371867][ T49] vhci_hcd: disconnect device [ 129.391634][ T6288] fuse: Unknown parameter 'group_i00000000000000000000' [ 132.056607][ T6306] program syz.1.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.086512][ T6306] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 133.046576][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.053005][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.063857][ T6312] Invalid ELF header magic: != ELF [ 133.198143][ T6318] syzkaller0: entered promiscuous mode [ 133.210151][ T6318] syzkaller0: entered allmulticast mode [ 133.218150][ T6323] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 133.224798][ T6323] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.236352][ T6323] vhci_hcd vhci_hcd.0: Device attached [ 133.266835][ T6324] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 2 [ 133.361481][ T3430] vhci_hcd: stop threads [ 133.398248][ T3430] vhci_hcd: release socket [ 133.426943][ T3430] vhci_hcd: disconnect device [ 133.612224][ T6323] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 133.971063][ T6323] bond1: option mode: invalid value (17) [ 134.021242][ T6323] bond1 (unregistering): Released all slaves [ 134.063041][ T5861] vhci_hcd: vhci_device speed not set [ 136.299841][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 136.430609][ T6340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.564241][ T6350] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.572139][ T6350] bond1: (slave team0): Enslaving as an active interface with an up link [ 136.795903][ T6354] bond1: entered promiscuous mode [ 136.835026][ T6354] team0: entered promiscuous mode [ 137.499204][ T6354] team_slave_0: entered promiscuous mode [ 137.538810][ T6354] team_slave_1: entered promiscuous mode [ 137.561636][ T6358] program syz.1.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.623446][ T6354] bond1: entered allmulticast mode [ 137.628618][ T6354] team0: entered allmulticast mode [ 137.668390][ T6359] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 137.692378][ T6354] team_slave_0: entered allmulticast mode [ 137.724822][ T6354] team_slave_1: entered allmulticast mode [ 139.564912][ T6375] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 139.571580][ T6375] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.043442][ T6375] vhci_hcd vhci_hcd.0: Device attached [ 140.137852][ T6382] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 140.146974][ T6374] Invalid ELF header magic: != ELF [ 140.312873][ T5861] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 140.358778][ T6382] bond1: option mode: invalid value (18) [ 140.363845][ T6377] vhci_hcd: connection reset by peer [ 140.405038][ T4318] vhci_hcd: stop threads [ 140.441224][ T4318] vhci_hcd: release socket [ 140.445272][ T6382] bond1 (unregistering): Released all slaves [ 140.446014][ T4318] vhci_hcd: disconnect device [ 140.479802][ T6381] syzkaller0: entered promiscuous mode [ 140.485870][ T6381] syzkaller0: entered allmulticast mode [ 142.231836][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 143.964953][ T6422] Invalid ELF header magic: != ELF [ 144.010203][ T6406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.186837][ T6414] bond2: (slave team0): Releasing backup interface [ 144.226916][ T6414] team0: left promiscuous mode [ 144.241889][ T6414] team_slave_0: left promiscuous mode [ 144.253099][ T6414] team_slave_1: left promiscuous mode [ 144.263442][ T6414] team0: left allmulticast mode [ 144.268348][ T6414] team_slave_0: left allmulticast mode [ 144.291593][ T6414] team_slave_1: left allmulticast mode [ 144.300825][ T6414] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.332170][ T6414] bond3: (slave team0): Enslaving as an active interface with an up link [ 144.404222][ T6416] bond3: entered promiscuous mode [ 144.409349][ T6416] team0: entered promiscuous mode [ 144.416869][ T6416] team_slave_0: entered promiscuous mode [ 144.437279][ T6416] team_slave_1: entered promiscuous mode [ 144.451943][ T6416] bond3: entered allmulticast mode [ 144.457601][ T6416] team0: entered allmulticast mode [ 144.492878][ T6416] team_slave_0: entered allmulticast mode [ 144.506461][ T6416] team_slave_1: entered allmulticast mode [ 144.831675][ T6436] syzkaller0: entered promiscuous mode [ 144.847433][ T6436] syzkaller0: entered allmulticast mode [ 144.866310][ T6447] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 144.872968][ T6447] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.920450][ T6447] vhci_hcd vhci_hcd.0: Device attached [ 144.966889][ T6447] netlink: 'syz.2.153': attribute type 1 has an invalid length. [ 145.004581][ T6447] bond4: option mode: invalid value (17) [ 145.012576][ T6447] bond4 (unregistering): Released all slaves [ 145.079587][ T6448] vhci_hcd: connection closed [ 145.082153][ T4318] vhci_hcd: stop threads [ 145.097447][ T4318] vhci_hcd: release socket [ 145.102126][ T4318] vhci_hcd: disconnect device [ 145.113473][ T5812] vhci_hcd: vhci_device speed not set [ 145.483174][ T5861] vhci_hcd: vhci_device speed not set [ 147.893014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 148.028430][ T6470] syzkaller0: entered promiscuous mode [ 148.187775][ T6470] syzkaller0: entered allmulticast mode [ 148.310493][ T6475] Invalid ELF header magic: != ELF [ 148.415516][ T6479] autofs4:pid:6479:autofs_fill_super: called with bogus options [ 149.186276][ T6487] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 149.192938][ T6487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.203219][ T6487] vhci_hcd vhci_hcd.0: Device attached [ 149.218708][ T6492] netlink: 'syz.3.165': attribute type 1 has an invalid length. [ 149.293162][ T6492] bond1: option mode: invalid value (18) [ 149.340147][ T6492] bond1 (unregistering): Released all slaves [ 149.463982][ T6488] vhci_hcd: connection closed [ 149.464421][ T49] vhci_hcd: stop threads [ 149.480918][ T5812] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 149.534915][ T49] vhci_hcd: release socket [ 149.563514][ T49] vhci_hcd: disconnect device [ 152.927912][ T6517] syzkaller0: entered promiscuous mode [ 152.933857][ T6517] syzkaller0: entered allmulticast mode [ 153.905052][ T6527] autofs4:pid:6527:autofs_fill_super: called with bogus options [ 154.772718][ T5812] vhci_hcd: vhci_device speed not set [ 155.483590][ T6524] Invalid ELF header magic: != ELF [ 156.574947][ T6541] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 156.581600][ T6541] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.679858][ T6541] vhci_hcd vhci_hcd.0: Device attached [ 156.818897][ T6541] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 156.943019][ T5815] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 157.422012][ T6543] vhci_hcd: connection reset by peer [ 157.469964][ T11] vhci_hcd: stop threads [ 157.519618][ T11] vhci_hcd: release socket [ 157.574257][ T11] vhci_hcd: disconnect device [ 157.639372][ T6541] bond4: option mode: invalid value (17) [ 157.794960][ T6541] bond4 (unregistering): Released all slaves [ 160.411871][ T6559] syzkaller0: entered promiscuous mode [ 160.417479][ T6559] syzkaller0: entered allmulticast mode [ 160.710279][ T6569] Invalid ELF header magic: != ELF [ 160.990439][ T6577] autofs4:pid:6577:autofs_fill_super: called with bogus options [ 161.191015][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 162.183880][ T5815] vhci_hcd: vhci_device speed not set [ 163.967708][ T6596] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 163.974365][ T6596] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.991503][ T6599] syzkaller0: entered promiscuous mode [ 164.001332][ T6596] vhci_hcd vhci_hcd.0: Device attached [ 164.003155][ T6599] syzkaller0: entered allmulticast mode [ 164.178999][ T6596] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 164.452880][ T5815] usb 37-1: device descriptor read/64, error -110 [ 164.926983][ T6600] vhci_hcd: connection closed [ 164.942677][ T6596] bond4: option mode: invalid value (17) [ 165.033177][ T3430] vhci_hcd: stop threads [ 165.037466][ T3430] vhci_hcd: release socket [ 165.069463][ T6596] bond4 (unregistering): Released all slaves [ 165.086712][ T3430] vhci_hcd: disconnect device [ 165.092420][ T6611] Invalid ELF header magic: != ELF [ 165.105493][ T5815] vhci_hcd: vhci_device speed not set [ 165.455835][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 165.639087][ T6624] program syz.1.200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.685082][ T6624] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 166.515201][ T6628] autofs4:pid:6628:autofs_fill_super: called with bogus options [ 169.553556][ T6641] syzkaller0: entered promiscuous mode [ 169.607496][ T6641] syzkaller0: entered allmulticast mode [ 170.273564][ T6648] Invalid ELF header magic: != ELF [ 170.634850][ T6660] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 170.641507][ T6660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.655368][ T6660] vhci_hcd vhci_hcd.0: Device attached [ 170.677583][ T6663] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 170.700928][ T6660] netlink: 'syz.0.210': attribute type 1 has an invalid length. [ 170.716845][ T3421] vhci_hcd: stop threads [ 170.721130][ T3421] vhci_hcd: release socket [ 170.746181][ T3421] vhci_hcd: disconnect device [ 170.802435][ T6660] bond2: option mode: invalid value (17) [ 170.826315][ T6660] bond2 (unregistering): Released all slaves [ 171.312885][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 172.056526][ T6683] autofs4:pid:6683:autofs_fill_super: called with bogus options [ 175.019662][ T6694] tipc: Enabling of bearer rejected, failed to enable media [ 175.228262][ T6704] syzkaller0: entered promiscuous mode [ 175.255782][ T6704] syzkaller0: entered allmulticast mode [ 175.639301][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 175.990962][ T6739] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 175.997635][ T6739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.034285][ T6739] vhci_hcd vhci_hcd.0: Device attached [ 176.560864][ T6739] netlink: 'syz.3.227': attribute type 1 has an invalid length. [ 176.943787][ T9] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 176.958364][ T6739] bond1: option mode: invalid value (17) [ 177.013096][ T6750] autofs4:pid:6750:autofs_fill_super: called with bogus options [ 177.160475][ T6741] vhci_hcd: connection reset by peer [ 177.170725][ T6739] bond1 (unregistering): Released all slaves [ 177.180382][ T3462] vhci_hcd: stop threads [ 177.192556][ T3462] vhci_hcd: release socket [ 177.198774][ T3462] vhci_hcd: disconnect device [ 177.247346][ T6756] syzkaller0: entered promiscuous mode [ 177.273534][ T6756] syzkaller0: entered allmulticast mode [ 177.457953][ T6761] tipc: Enabling of bearer rejected, failed to enable media [ 177.504314][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 180.662416][ T6801] syzkaller0: entered promiscuous mode [ 180.828719][ T6801] syzkaller0: entered allmulticast mode [ 180.914128][ T6793] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 181.657946][ T6808] autofs4:pid:6808:autofs_fill_super: called with bogus options [ 181.788241][ T6814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.822979][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 181.913730][ T6817] tipc: Enabling of bearer rejected, failed to enable media [ 181.962991][ T6819] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 181.969663][ T6819] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.983945][ T6819] vhci_hcd vhci_hcd.0: Device attached [ 181.996543][ T6821] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 1 [ 182.009139][ T6819] netlink: 'syz.2.244': attribute type 1 has an invalid length. [ 182.036090][ T3524] vhci_hcd: stop threads [ 182.040407][ T3524] vhci_hcd: release socket [ 182.054387][ T3524] vhci_hcd: disconnect device [ 182.776826][ T9] vhci_hcd: vhci_device speed not set [ 183.038646][ T6819] bond4: option mode: invalid value (17) [ 183.052140][ T6819] bond4 (unregistering): Released all slaves [ 184.386056][ T6860] syzkaller0: entered promiscuous mode [ 184.391736][ T6860] syzkaller0: entered allmulticast mode [ 184.722454][ T6866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.741433][ T6865] program syz.2.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.788289][ T6865] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 184.828800][ T6870] tipc: Enabling of bearer rejected, failed to enable media [ 185.146196][ T6881] autofs4:pid:6881:autofs_fill_super: called with bogus options [ 186.566928][ T6896] netlink: 'syz.0.259': attribute type 1 has an invalid length. [ 186.662560][ T6894] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 186.669233][ T6894] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.851525][ T6894] vhci_hcd vhci_hcd.0: Device attached [ 187.037792][ T6897] vhci_hcd: connection closed [ 187.114810][ T5861] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 187.128330][ T1330] vhci_hcd: stop threads [ 187.129135][ T6896] bond3: option mode: invalid value (18) [ 187.132607][ T1330] vhci_hcd: release socket [ 187.134147][ T1330] vhci_hcd: disconnect device [ 187.171929][ T6896] bond3 (unregistering): Released all slaves [ 188.272011][ T6918] tipc: Enabling of bearer rejected, failed to enable media [ 188.606045][ T6930] program syz.0.266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.663788][ T6932] autofs4:pid:6932:autofs_fill_super: called with bogus options [ 188.706460][ T6930] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 190.937165][ T6959] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 190.943845][ T6959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.944111][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.273'. [ 190.986779][ T6955] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.987112][ T6959] vhci_hcd vhci_hcd.0: Device attached [ 191.072928][ T6955] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.198975][ T6955] bond2: (slave team0): Enslaving as an active interface with an up link [ 191.239864][ T6968] netlink: 'syz.3.274': attribute type 1 has an invalid length. [ 191.315960][ T8] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 191.910707][ T6968] bond1: option mode: invalid value (19) [ 191.955266][ T6961] vhci_hcd: connection reset by peer [ 191.998402][ T6968] bond1 (unregistering): Released all slaves [ 192.005011][ T3462] vhci_hcd: stop threads [ 192.047942][ T3462] vhci_hcd: release socket [ 192.065161][ T3462] vhci_hcd: disconnect device [ 192.078868][ T6970] bond2: entered promiscuous mode [ 192.084430][ T6970] team0: entered promiscuous mode [ 192.089726][ T6970] team_slave_0: entered promiscuous mode [ 192.105949][ T6970] team_slave_1: entered promiscuous mode [ 192.112497][ T6970] bond2: entered allmulticast mode [ 192.119754][ T6970] team0: entered allmulticast mode [ 192.125286][ T6970] team_slave_0: entered allmulticast mode [ 192.133043][ T6970] team_slave_1: entered allmulticast mode [ 192.149667][ T6982] tipc: Enabling of bearer rejected, failed to enable media [ 192.282982][ T5861] vhci_hcd: vhci_device speed not set [ 192.403062][ T6991] program syz.1.280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.464778][ T6991] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 194.369336][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.503687][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.699783][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'. [ 195.892696][ T7021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.913581][ T5861] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 195.976469][ T7031] bond2: (slave team0): Releasing backup interface [ 195.985392][ T7031] team0: left promiscuous mode [ 195.994433][ T7031] team_slave_0: left promiscuous mode [ 196.000723][ T7031] team_slave_1: left promiscuous mode [ 196.007315][ T7031] team0: left allmulticast mode [ 196.014317][ T7031] team_slave_0: left allmulticast mode [ 196.019822][ T7031] team_slave_1: left allmulticast mode [ 196.036243][ T7031] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.062300][ T7031] bond3: (slave team0): Enslaving as an active interface with an up link [ 196.079313][ T7032] bond3: entered promiscuous mode [ 196.088349][ T7032] team0: entered promiscuous mode [ 196.101293][ T7032] team_slave_0: entered promiscuous mode [ 196.119943][ T7032] team_slave_1: entered promiscuous mode [ 196.129181][ T5861] usb 1-1: Dual-Role OTG device on HNP port [ 196.136043][ T5861] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 196.143269][ T7032] bond3: entered allmulticast mode [ 196.150192][ T7032] team0: entered allmulticast mode [ 196.157352][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.173189][ T7032] team_slave_0: entered allmulticast mode [ 196.179556][ T7032] team_slave_1: entered allmulticast mode [ 196.207748][ T5861] gspca_main: spca501-2.14.0 probing 0000:0000 [ 196.223229][ T5861] gspca_spca501: reg write: error -32 [ 196.236277][ T5861] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 196.245204][ T5861] spca501: probe of 1-1:1.0 failed with error -22 [ 196.253313][ T7037] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 196.259948][ T7037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.272998][ C1] general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] PREEMPT SMP KASAN [ 196.284743][ C1] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 196.285978][ T7037] vhci_hcd vhci_hcd.0: Device attached [ 196.293166][ C1] CPU: 1 PID: 5861 Comm: kworker/1:6 Not tainted syzkaller #0 [ 196.293188][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 196.293200][ C1] Workqueue: usb_hub_wq hub_event [ 196.321198][ C1] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 196.326860][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 196.346462][ C1] RSP: 0018:ffffc900001f0840 EFLAGS: 00010002 [ 196.352517][ C1] RAX: 00000000000000e6 RBX: ffff888030de8120 RCX: ffff888022d58000 [ 196.360475][ C1] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 196.368433][ C1] RBP: ffff888030de8100 R08: 0000000000000000 R09: 00000000eed9a316 [ 196.376404][ C1] R10: 000000005c29093d R11: 0000000000000100 R12: ffff888030de8730 [ 196.384364][ C1] R13: dffffc0000000000 R14: ffff888030de8128 R15: 0000000000000730 [ 196.392412][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 196.401327][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.407898][ C1] CR2: 00007fa7a1e07f28 CR3: 0000000060cf8000 CR4: 00000000003506e0 [ 196.415859][ C1] Call Trace: [ 196.419389][ C1] [ 196.422230][ C1] f_midi2_set_alt+0x100/0x800 [ 196.426992][ C1] composite_setup+0x1ffe/0x33a0 [ 196.431932][ C1] configfs_composite_setup+0xc7/0x100 [ 196.437381][ C1] dummy_timer+0x1309/0x3420 [ 196.441973][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 196.446990][ C1] ? lock_chain_count+0x20/0x20 [ 196.451830][ C1] ? dummy_free_streams+0x520/0x520 [ 196.457013][ C1] ? dummy_free_streams+0x520/0x520 [ 196.462203][ C1] __hrtimer_run_queues+0x525/0xc10 [ 196.467402][ C1] ? hrtimer_interrupt+0x980/0x980 [ 196.472502][ C1] ? read_tsc+0x9/0x20 [ 196.476564][ C1] hrtimer_run_softirq+0x177/0x290 [ 196.481667][ C1] handle_softirqs+0x27d/0x820 [ 196.486417][ C1] ? read_tsc+0x9/0x20 [ 196.490471][ C1] ? ktime_get+0x24b/0x280 [ 196.494877][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 196.499630][ C1] ? do_softirq+0x1a0/0x1a0 [ 196.504124][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 196.509318][ C1] __irq_exit_rcu+0xd3/0x190 [ 196.513897][ C1] ? irq_exit_rcu+0x20/0x20 [ 196.518412][ C1] irq_exit_rcu+0x9/0x20 [ 196.522642][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 196.528266][ C1] [ 196.531187][ C1] [ 196.534105][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.540077][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 196.546574][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2b 5f c6 f6 65 8b 05 9c 2d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 196.566170][ C1] RSP: 0018:ffffc9000471e880 EFLAGS: 00000206 [ 196.572223][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 13b576cddc073600 [ 196.580193][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 196.588152][ C1] RBP: ffffc9000471e910 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 196.596108][ C1] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: dffffc0000000000 [ 196.604064][ C1] R13: dffffc0000000000 R14: ffff888018f7c000 R15: 1ffff920008e3d10 [ 196.612032][ C1] ? _raw_spin_unlock+0x40/0x40 [ 196.616885][ C1] ? kobject_get+0xcc/0x120 [ 196.621387][ C1] dummy_urb_enqueue+0x587/0x780 [ 196.627188][ C1] usb_hcd_submit_urb+0x318/0x1aa0 [ 196.632295][ C1] ? __init_swait_queue_head+0xa8/0x140 [ 196.637834][ C1] usb_start_wait_urb+0x140/0x580 [ 196.642854][ C1] ? usb_api_blocking_completion+0xb0/0xb0 [ 196.648659][ C1] usb_control_msg+0x235/0x3e0 [ 196.653419][ C1] usb_set_interface+0x51f/0x13f0 [ 196.658440][ C1] snd_usb_midi_v2_create+0x62f/0x48a0 [ 196.663891][ C1] ? proc_audio_usbbus_read+0x170/0x170 [ 196.669425][ C1] ? snd_card_rw_proc_new+0x10d/0x130 [ 196.674795][ C1] ? validate_midi_out_jack+0xb0/0xb0 [ 196.680157][ C1] ? usb_ifnum_to_if+0x262/0x2e0 [ 196.685094][ C1] snd_usb_create_stream+0x262/0x5d0 [ 196.690385][ C1] usb_audio_probe+0xead/0x1f00 [ 196.695232][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 196.700253][ C1] ? snd_usb_autosuspend+0x1c0/0x1c0 [ 196.705528][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 196.711426][ C1] usb_probe_interface+0x5c2/0xaf0 [ 196.716537][ C1] ? usb_register_driver+0x3c0/0x3c0 [ 196.721812][ C1] really_probe+0x247/0xae0 [ 196.726313][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 196.731506][ C1] __driver_probe_device+0x1f5/0x390 [ 196.736789][ C1] driver_probe_device+0x4f/0x420 [ 196.741815][ C1] __device_attach_driver+0x2ca/0x510 [ 196.747183][ C1] bus_for_each_drv+0x252/0x2e0 [ 196.752048][ C1] ? coredump_store+0x90/0x90 [ 196.756717][ C1] ? bus_find_device+0x300/0x300 [ 196.761648][ C1] __device_attach+0x2c1/0x420 [ 196.766406][ C1] ? device_attach+0x20/0x20 [ 196.770991][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 196.776186][ C1] bus_probe_device+0x180/0x260 [ 196.781030][ C1] device_add+0x87c/0xc40 [ 196.785350][ C1] usb_set_configuration+0x1ad0/0x2150 [ 196.790816][ C1] usb_generic_driver_probe+0x8d/0x150 [ 196.796270][ C1] usb_probe_device+0x12a/0x260 [ 196.801112][ C1] ? usb_register_device_driver+0x230/0x230 [ 196.807001][ C1] really_probe+0x247/0xae0 [ 196.811497][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 196.816689][ C1] __driver_probe_device+0x1f5/0x390 [ 196.821968][ C1] driver_probe_device+0x4f/0x420 [ 196.826992][ C1] __device_attach_driver+0x2ca/0x510 [ 196.832384][ C1] bus_for_each_drv+0x252/0x2e0 [ 196.837233][ C1] ? coredump_store+0x90/0x90 [ 196.841906][ C1] ? bus_find_device+0x300/0x300 [ 196.846838][ C1] __device_attach+0x2c1/0x420 [ 196.851600][ C1] ? device_attach+0x20/0x20 [ 196.856185][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 196.861204][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 196.866404][ C1] bus_probe_device+0x180/0x260 [ 196.871249][ C1] device_add+0x87c/0xc40 [ 196.875595][ C1] usb_new_device+0x995/0x1550 [ 196.880357][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 196.885197][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.890388][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 196.895585][ C1] hub_event+0x29d5/0x4a80 [ 196.900007][ C1] ? hub_post_resume+0x120/0x120 [ 196.904932][ C1] ? read_lock_is_recursive+0x20/0x20 [ 196.910299][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.915491][ C1] ? process_scheduled_works+0x975/0x1600 [ 196.921202][ C1] ? process_scheduled_works+0x975/0x1600 [ 196.926925][ C1] process_scheduled_works+0xa60/0x1600 [ 196.932472][ C1] ? worker_attach_to_pool+0x370/0x370 [ 196.937924][ C1] ? assign_work+0x3cc/0x5d0 [ 196.942509][ C1] worker_thread+0xa5e/0xfe0 [ 196.947095][ C1] ? _raw_spin_unlock+0x40/0x40 [ 196.951940][ C1] ? __kthread_parkme+0x71/0x1c0 [ 196.956869][ C1] kthread+0x2fa/0x390 [ 196.960928][ C1] ? pr_cont_work+0x550/0x550 [ 196.965596][ C1] ? kthread_blkcg+0xd0/0xd0 [ 196.970174][ C1] ret_from_fork+0x48/0x80 [ 196.974586][ C1] ? kthread_blkcg+0xd0/0xd0 [ 196.979167][ C1] ret_from_fork_asm+0x11/0x20 [ 196.983936][ C1] [ 196.986950][ C1] Modules linked in: [ 196.990844][ C1] ---[ end trace 0000000000000000 ]--- [ 196.996283][ C1] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 197.001907][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 197.021501][ C1] RSP: 0018:ffffc900001f0840 EFLAGS: 00010002 [ 197.027556][ C1] RAX: 00000000000000e6 RBX: ffff888030de8120 RCX: ffff888022d58000 [ 197.035518][ C1] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 197.043478][ C1] RBP: ffff888030de8100 R08: 0000000000000000 R09: 00000000eed9a316 [ 197.051443][ C1] R10: 000000005c29093d R11: 0000000000000100 R12: ffff888030de8730 [ 197.059402][ C1] R13: dffffc0000000000 R14: ffff888030de8128 R15: 0000000000000730 [ 197.067364][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 197.076301][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.082889][ C1] CR2: 00007fa7a1e07f28 CR3: 0000000060cf8000 CR4: 00000000003506e0 [ 197.090863][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 197.098269][ C1] Kernel Offset: disabled [ 197.102580][ C1] Rebooting in 86400 seconds..