last executing test programs: 8.549204589s ago: executing program 2 (id=394): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x401, 0x0, 0x8000000000000000, 0x2, 0x0, 0x0, 0x1, 0x65c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0xa, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f00000001c0)='1\x00', 0x1) 7.560474972s ago: executing program 1 (id=396): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdp', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 7.504030833s ago: executing program 2 (id=397): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r1, r0, 0x1, [0x0, 0xf7df]}, {r1, r2, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x800, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{@gid}]}) 7.469328364s ago: executing program 0 (id=399): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) syz_open_dev$mouse(0x0, 0x0, 0x2042) mq_open(&(0x7f0000000340)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bL\x10\x00\x00\x00\x04\x00\x00\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdc\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x1d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x40, 0xa4, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x8000000000000001}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0xc, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 7.437520335s ago: executing program 1 (id=400): ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000080)={0x0, 0x0, 0x7fff}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) r1 = syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r3, 0x13}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x30, @mcast1, 0x4}}}, 0x90) writev(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r4, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) io_setup(0x9, 0x0) 6.040021238s ago: executing program 0 (id=401): syz_io_uring_setup(0x50d1, &(0x7f00000001c0)={0x0, 0xfe50, 0x8, 0x0, 0x259}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r0 = syz_open_dev$video(&(0x7f0000000000), 0xa8384043, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0x2, 0x0, 0x55595659, 0x0, 0x0, 0x0, 0x9, 0x1}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x1, 0x3f, 0xa, 0x70, 0x67}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002700)={0x2020}, 0x2020) 5.967952389s ago: executing program 1 (id=403): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, 0x0, 0xfffffffffffffeab, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) 4.996827092s ago: executing program 0 (id=404): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff080000080000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 4.868519075s ago: executing program 1 (id=406): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x0, 0x56, 0x0, 0x1}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 3.953601917s ago: executing program 3 (id=407): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x1407, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x8008) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, '/'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0x7, @mcast1}]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='sockfs\x00', 0x203100d, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0x0) sendfile(r6, r6, 0x0, 0x6) accept4(r5, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) 3.81992571s ago: executing program 0 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdp', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 3.80122771s ago: executing program 0 (id=409): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='2', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r7, &(0x7f0000000440)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000940)='dummy_udc.0', 0xb) 3.773653561s ago: executing program 2 (id=410): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) syz_open_dev$mouse(0x0, 0x0, 0x2042) mq_open(&(0x7f0000000340)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bL\x10\x00\x00\x00\x04\x00\x00\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdc\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x1d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x40, 0xa4, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x8000000000000001}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0xc, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 3.723630252s ago: executing program 3 (id=411): ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000080)={0x0, 0x0, 0x7fff}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) r1 = syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r3, 0x13}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x30, @mcast1, 0x4}}}, 0x90) writev(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r4, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) io_setup(0x9, 0x0) 1.972142964s ago: executing program 3 (id=412): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x300, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1f, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 1.952347774s ago: executing program 2 (id=413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e1050000008906ffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.792281528s ago: executing program 1 (id=414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r2, @ANYRESOCT=0x0, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0xfffffffffffffeab, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) 1.724009739s ago: executing program 3 (id=415): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x401, 0x0, 0x8000000000000000, 0x2, 0x0, 0x0, 0x1, 0x65c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0xa, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, 0x0, 0x0) 630.167085ms ago: executing program 3 (id=416): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff080000080000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 382.027021ms ago: executing program 2 (id=417): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdp', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 255.327774ms ago: executing program 3 (id=418): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r1, r0, 0x1, [0x0, 0xf7df]}, {r1, r2, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x800, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{@gid}]}) 169.271546ms ago: executing program 0 (id=419): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x1407, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x8008) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, '/'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0x7, @mcast1}]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='sockfs\x00', 0x203100d, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0x0) sendfile(r6, r6, 0x0, 0x6) accept4(r5, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000002440)=0xd) 166.472996ms ago: executing program 2 (id=420): ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000080)={0x0, 0x0, 0x7fff}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) r1 = syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r3, 0x13}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x30, @mcast1, 0x4}}}, 0x90) writev(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r4, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) io_setup(0x9, 0x0) 0s ago: executing program 1 (id=421): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) syz_open_dev$mouse(0x0, 0x0, 0x2042) mq_open(&(0x7f0000000340)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bL\x10\x00\x00\x00\x04\x00\x00\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdc\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x1d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x40, 0xa4, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x8000000000000001}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0xc, 0x15, 0x80000006, 0x8}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. [ 66.549156][ T5758] cgroup: Unknown subsys name 'net' [ 66.679268][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.078062][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.496461][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.505343][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.514162][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.523220][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.530940][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.538782][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.547474][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.551122][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.555848][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.562524][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.569460][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.576663][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.584706][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.590378][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.598065][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.604693][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.619565][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.627076][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.638037][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.646570][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.655418][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.665246][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.673282][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.681620][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.032600][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 70.056140][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 70.196650][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 70.219262][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.227071][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.234519][ T5771] bridge_slave_0: entered allmulticast mode [ 70.241277][ T5771] bridge_slave_0: entered promiscuous mode [ 70.273778][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.280973][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.289534][ T5771] bridge_slave_1: entered allmulticast mode [ 70.296981][ T5771] bridge_slave_1: entered promiscuous mode [ 70.317891][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.325216][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.332511][ T5770] bridge_slave_0: entered allmulticast mode [ 70.339329][ T5770] bridge_slave_0: entered promiscuous mode [ 70.346980][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.354249][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.361429][ T5770] bridge_slave_1: entered allmulticast mode [ 70.368489][ T5770] bridge_slave_1: entered promiscuous mode [ 70.416504][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.437356][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.468931][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.493769][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.535723][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.543133][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.550291][ T5773] bridge_slave_0: entered allmulticast mode [ 70.558091][ T5773] bridge_slave_0: entered promiscuous mode [ 70.568575][ T5771] team0: Port device team_slave_0 added [ 70.581264][ T5771] team0: Port device team_slave_1 added [ 70.600458][ T5770] team0: Port device team_slave_0 added [ 70.608961][ T5770] team0: Port device team_slave_1 added [ 70.615413][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.622761][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.629899][ T5773] bridge_slave_1: entered allmulticast mode [ 70.636904][ T5773] bridge_slave_1: entered promiscuous mode [ 70.650194][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 70.712597][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.722823][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.729789][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.756477][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.768745][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.777980][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.804199][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.831386][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.841192][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.848248][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.874718][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.892408][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.901248][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.929608][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.967330][ T5773] team0: Port device team_slave_0 added [ 70.976922][ T5773] team0: Port device team_slave_1 added [ 71.071098][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.078388][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.086030][ T5772] bridge_slave_0: entered allmulticast mode [ 71.093361][ T5772] bridge_slave_0: entered promiscuous mode [ 71.101088][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.108267][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.136747][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.152988][ T5771] hsr_slave_0: entered promiscuous mode [ 71.159343][ T5771] hsr_slave_1: entered promiscuous mode [ 71.179653][ T5770] hsr_slave_0: entered promiscuous mode [ 71.186044][ T5770] hsr_slave_1: entered promiscuous mode [ 71.192606][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.200348][ T5770] Cannot create hsr debugfs directory [ 71.217856][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.227238][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.234874][ T5772] bridge_slave_1: entered allmulticast mode [ 71.241569][ T5772] bridge_slave_1: entered promiscuous mode [ 71.259443][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.266819][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.293182][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.347424][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.396012][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.434667][ T5773] hsr_slave_0: entered promiscuous mode [ 71.441087][ T5773] hsr_slave_1: entered promiscuous mode [ 71.447458][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.455700][ T5773] Cannot create hsr debugfs directory [ 71.477338][ T5772] team0: Port device team_slave_0 added [ 71.490880][ T5772] team0: Port device team_slave_1 added [ 71.558871][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.569707][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.570359][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.580284][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.603391][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.642992][ T5780] Bluetooth: hci1: command tx timeout [ 71.649283][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.656401][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.682403][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.722239][ T5780] Bluetooth: hci2: command tx timeout [ 71.722255][ T5775] Bluetooth: hci3: command tx timeout [ 71.722483][ T5775] Bluetooth: hci0: command tx timeout [ 71.819745][ T5772] hsr_slave_0: entered promiscuous mode [ 71.826088][ T5772] hsr_slave_1: entered promiscuous mode [ 71.832909][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.840484][ T5772] Cannot create hsr debugfs directory [ 71.969876][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.998115][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.008641][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.022496][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.107328][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.119366][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.128952][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.141102][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.232990][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.243203][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.266291][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.277730][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.357329][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.369183][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.380764][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.391453][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.481357][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.508548][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.535087][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.548171][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.555495][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.589918][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.597233][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.616269][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.644647][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.651775][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.661619][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.669119][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.704757][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.744143][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.791940][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.810535][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.850263][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.857749][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.869975][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.894505][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.901677][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.918384][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.925615][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.968544][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.975846][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.184168][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.297028][ T5771] veth0_vlan: entered promiscuous mode [ 73.339180][ T5771] veth1_vlan: entered promiscuous mode [ 73.394460][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.433838][ T5771] veth0_macvtap: entered promiscuous mode [ 73.460758][ T5771] veth1_macvtap: entered promiscuous mode [ 73.499308][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.524803][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.541280][ T5770] veth0_vlan: entered promiscuous mode [ 73.556571][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.570593][ T5770] veth1_vlan: entered promiscuous mode [ 73.590806][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.605893][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.617078][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.625886][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.636267][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.723553][ T5775] Bluetooth: hci1: command tx timeout [ 73.739851][ T5770] veth0_macvtap: entered promiscuous mode [ 73.767083][ T5773] veth0_vlan: entered promiscuous mode [ 73.776697][ T5770] veth1_macvtap: entered promiscuous mode [ 73.800220][ T5772] veth0_vlan: entered promiscuous mode [ 73.806482][ T5775] Bluetooth: hci2: command tx timeout [ 73.806523][ T5086] Bluetooth: hci3: command tx timeout [ 73.819616][ T5775] Bluetooth: hci0: command tx timeout [ 73.831524][ T5773] veth1_vlan: entered promiscuous mode [ 73.842936][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.853703][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.868523][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.879396][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.890353][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.901840][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.938377][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.949674][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.959943][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.961391][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.971313][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.992767][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.009594][ T5772] veth1_vlan: entered promiscuous mode [ 74.079104][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.089070][ T5773] veth0_macvtap: entered promiscuous mode [ 74.096764][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.099658][ T5772] veth0_macvtap: entered promiscuous mode [ 74.118823][ T5772] veth1_macvtap: entered promiscuous mode [ 74.158725][ T5773] veth1_macvtap: entered promiscuous mode [ 74.193698][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.208679][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.219987][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.232459][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.243569][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.284164][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.284993][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.312983][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.314579][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.357580][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.369808][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.386755][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.394879][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.408735][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.419427][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.430332][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.446020][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.456789][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.475967][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.497923][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.508765][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.519334][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.530260][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.542060][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.552588][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.563982][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.584951][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.593951][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.603958][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.612899][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.658344][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.667380][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.692051][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.707027][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.731173][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.745653][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.895084][ T5838] Zero length message leads to an empty skb [ 74.939346][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.960871][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.038228][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.061836][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.189848][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.206761][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.215023][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.219824][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.303558][ T5846] program syz.0.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.320496][ T5846] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 75.383412][ T2133] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.596556][ T2133] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.860786][ T5853] tipc: Started in network mode [ 75.877733][ T5775] Bluetooth: hci1: command tx timeout [ 75.885100][ T5775] Bluetooth: hci0: command tx timeout [ 75.890636][ T5775] Bluetooth: hci2: command tx timeout [ 75.898738][ T5775] Bluetooth: hci3: command tx timeout [ 75.936332][ T5853] tipc: Node identity 76cb84fd574f, cluster identity 4711 [ 76.011618][ T5853] tipc: Enabled bearer , priority 0 [ 76.385974][ T2133] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 76.395702][ T2133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 76.403922][ T2133] usb 2-1: Product: syz [ 76.408262][ T2133] usb 2-1: Manufacturer: syz [ 76.426148][ T5850] tipc: Disabling bearer [ 76.426828][ T2133] usb_debug 2-1:1.0: debug converter detected [ 76.453186][ T2133] usb 2-1: debug converter now attached to ttyUSB0 [ 76.672093][ T5811] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.784244][ T2133] usb 2-1: USB disconnect, device number 2 [ 76.854581][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 76.952739][ T2133] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 77.058750][ T2133] usb_debug 2-1:1.0: device disconnected [ 77.621765][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 77.631947][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 77.652915][ T5811] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 77.663080][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.671287][ T5811] usb 3-1: Product: syz [ 77.677071][ T5811] usb 3-1: Manufacturer: syz [ 77.681779][ T5811] usb 3-1: SerialNumber: syz [ 77.694814][ T5811] usb 3-1: config 0 descriptor?? [ 77.920559][ T5875] autofs4:pid:5875:autofs_fill_super: called with bogus options [ 77.962465][ T5086] Bluetooth: hci3: command tx timeout [ 77.967957][ T5775] Bluetooth: hci2: command tx timeout [ 77.973431][ T5775] Bluetooth: hci0: command tx timeout [ 77.978881][ T5775] Bluetooth: hci1: command tx timeout [ 77.992446][ T5811] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 79.309232][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 79.587710][ T5895] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 80.071786][ T5858] usb 3-1: USB disconnect, device number 2 [ 80.339665][ T5906] program syz.2.28 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.350533][ T5906] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 80.570428][ T5915] autofs4:pid:5915:autofs_fill_super: called with bogus options [ 80.662152][ T5156] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.722312][ T5774] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.904379][ T5156] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.917010][ T5774] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.933658][ T5156] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 80.946335][ T5156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 80.955104][ T5156] usb 4-1: Product: syz [ 80.959804][ T5156] usb 4-1: Manufacturer: syz [ 80.969536][ T5774] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 80.995928][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 81.009866][ T5156] usb_debug 4-1:1.0: debug converter detected [ 81.027483][ T5774] usb 1-1: Product: syz [ 81.036733][ T5156] usb 4-1: debug converter now attached to ttyUSB0 [ 81.044900][ T5774] usb 1-1: Manufacturer: syz [ 81.069961][ T5774] usb_debug 1-1:1.0: debug converter detected [ 81.095281][ T5774] usb 1-1: debug converter now attached to ttyUSB1 [ 81.219894][ T5858] usb 4-1: USB disconnect, device number 2 [ 81.240510][ T5858] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 81.252514][ T5858] usb_debug 4-1:1.0: device disconnected [ 81.286432][ T5156] usb 1-1: USB disconnect, device number 2 [ 81.317174][ T5156] debug ttyUSB1: debug converter now disconnected from ttyUSB1 [ 81.352958][ T5156] usb_debug 1-1:1.0: device disconnected [ 81.489314][ T5930] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 82.045808][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 82.572409][ T5941] program syz.1.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.584868][ T5941] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 82.786898][ T5949] autofs4:pid:5949:autofs_fill_super: called with bogus options [ 83.332115][ T2133] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.539962][ T2133] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.554204][ T2133] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 83.569449][ T2133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 83.580862][ T2133] usb 3-1: Product: syz [ 83.590808][ T2133] usb 3-1: Manufacturer: syz [ 83.604459][ T2133] usb_debug 3-1:1.0: debug converter detected [ 83.621944][ T2133] usb 3-1: debug converter now attached to ttyUSB0 [ 83.867578][ T5156] usb 3-1: USB disconnect, device number 3 [ 83.934287][ T5156] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 83.947032][ T5156] usb_debug 3-1:1.0: device disconnected [ 84.010711][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 84.020768][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.028306][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.052186][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.068051][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.216970][ T5965] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 84.332072][ T5811] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.164092][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.928390][ T5975] fuse: Bad value for 'group_id' [ 85.947016][ T5972] program syz.0.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.958260][ T5972] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 85.990150][ T5811] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 86.001020][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 86.026081][ T5811] usb 2-1: Product: syz [ 86.030359][ T5811] usb 2-1: Manufacturer: syz [ 86.071859][ T5811] usb_debug 2-1:1.0: debug converter detected [ 86.082683][ T5811] usb 2-1: debug converter now attached to ttyUSB0 [ 86.271755][ T27] usb 2-1: USB disconnect, device number 3 [ 86.280505][ T27] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 86.308038][ T27] usb_debug 2-1:1.0: device disconnected [ 87.357570][ T23] cfg80211: failed to load regulatory.db [ 87.936469][ T5985] autofs4:pid:5985:autofs_fill_super: called with bogus options [ 88.002960][ T5989] syzkaller0: entered promiscuous mode [ 88.032212][ T5989] syzkaller0: entered allmulticast mode [ 88.079599][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 88.278135][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.286293][ T5996] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 88.570320][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.681133][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 88.761210][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 88.850204][ T27] usb 2-1: Product: syz [ 88.902376][ T27] usb 2-1: Manufacturer: syz [ 89.044524][ T27] usb_debug 2-1:1.0: debug converter detected [ 89.093154][ T27] usb 2-1: debug converter now attached to ttyUSB0 [ 90.040288][ T6004] program syz.3.61 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.053801][ T6004] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 90.106643][ T5156] usb 2-1: USB disconnect, device number 4 [ 90.154595][ T5156] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 90.164755][ T5156] usb_debug 2-1:1.0: device disconnected [ 90.262875][ T6008] fuse: Bad value for 'group_id' [ 90.281519][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'. [ 90.309977][ T6009] veth1_virt_wifi: entered promiscuous mode [ 90.316416][ T6009] veth1_virt_wifi: entered allmulticast mode [ 90.781544][ T6021] autofs4:pid:6021:autofs_fill_super: called with bogus options [ 91.942196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 92.154029][ T6023] syzkaller0: entered promiscuous mode [ 92.224689][ T6023] syzkaller0: entered allmulticast mode [ 92.548995][ T6028] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 94.306291][ T6041] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 94.385234][ T6044] tipc: Started in network mode [ 94.421568][ T6044] tipc: Node identity 8674704217e1, cluster identity 4711 [ 94.632237][ T6044] tipc: Enabled bearer , priority 0 [ 95.101818][ T6043] tipc: Disabling bearer [ 95.271230][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'. [ 95.394164][ T6054] veth0_vlan: entered allmulticast mode [ 95.536145][ T6054] syz.1.77 (6054) used greatest stack depth: 19880 bytes left [ 95.672039][ T6065] autofs4:pid:6065:autofs_fill_super: called with bogus options [ 99.377571][ T6079] program syz.0.83 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.396484][ T6079] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 99.585641][ T6085] syzkaller0: entered promiscuous mode [ 99.601520][ T6085] syzkaller0: entered allmulticast mode [ 99.632772][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 99.653025][ T6092] tipc: Enabled bearer , priority 0 [ 99.696536][ T6087] macvlan1: entered promiscuous mode [ 99.702445][ T6087] macvlan1: entered allmulticast mode [ 99.808287][ T6088] tipc: Disabling bearer [ 100.051295][ T6106] autofs4:pid:6106:autofs_fill_super: called with bogus options [ 102.196013][ T6114] program syz.3.96 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.210186][ T6114] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 103.331262][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.100'. [ 103.374144][ T6130] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 103.381559][ T6130] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 103.401192][ T6132] syzkaller0: entered promiscuous mode [ 103.425718][ T6132] syzkaller0: entered allmulticast mode [ 103.862147][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.647205][ T6147] TCP: TCP_TX_DELAY enabled [ 104.667027][ T6154] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.747357][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.767184][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 104.810834][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 104.822028][ T27] usb 4-1: Product: syz [ 104.826243][ T27] usb 4-1: Manufacturer: syz [ 104.841496][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 104.863358][ T27] usb_debug 4-1:1.0: debug converter detected [ 104.879853][ T27] usb 4-1: debug converter now attached to ttyUSB0 [ 106.557146][ T2133] usb 4-1: USB disconnect, device number 3 [ 106.563834][ T6160] Invalid ELF header magic: != ELF [ 106.572267][ T2133] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 106.580492][ T2133] usb_debug 4-1:1.0: device disconnected [ 107.897329][ T6173] autofs4:pid:6173:autofs_fill_super: called with bogus options [ 112.012698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.422222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 112.685433][ T6183] syzkaller0: entered promiscuous mode [ 112.690960][ T6183] syzkaller0: entered allmulticast mode [ 112.995424][ T6200] netlink: 'syz.0.118': attribute type 1 has an invalid length. [ 113.077258][ T5828] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 113.126833][ T6200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.221147][ T55] device offline error, dev sda, sector 737590 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 113.233419][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 92198) [ 113.247907][ T55] Buffer I/O error on device sda1, logical block 92160 [ 113.255910][ T55] device offline error, dev sda, sector 745734 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 113.267056][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 93216) [ 113.280123][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 93217) [ 113.280133][ T1122] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2028, error -5) [ 113.294152][ T55] Buffer I/O error on device sda1, logical block 93179 [ 113.312806][ T55] Buffer I/O error on device sda1, logical block 93180 [ 113.319789][ T55] Buffer I/O error on device sda1, logical block 93181 [ 113.321836][ T6206] bond1: (slave ip6erspan0): making interface the new active one [ 113.326886][ T55] Buffer I/O error on device sda1, logical block 93182 [ 113.326911][ T55] Buffer I/O error on device sda1, logical block 93183 [ 113.349364][ T55] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 113.354538][ T2997] device offline error, dev sda, sector 733494 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 113.359923][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 96294) [ 113.382175][ T55] Buffer I/O error on device sda1, logical block 96256 [ 113.389100][ T55] device offline error, dev sda, sector 778478 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2 [ 113.399691][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 97309) [ 113.411550][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 97313) [ 113.423132][ T55] Buffer I/O error on device sda1, logical block 97275 [ 113.425145][ T6206] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 113.429993][ T55] Buffer I/O error on device sda1, logical block 97276 [ 113.430025][ T55] Buffer I/O error on device sda1, logical block 97277 [ 113.452307][ T1122] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2033, error -5) [ 113.453637][ T55] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 113.475744][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2036 starting block 100390) [ 113.487553][ T55] device offline error, dev sda, sector 811270 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 113.498391][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2036 starting block 101408) [ 113.510186][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2036 starting block 101409) [ 113.514223][ T2997] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 91686) [ 113.527334][ T55] device offline error, dev sda, sector 721206 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 113.543867][ T55] device offline error, dev sda, sector 729398 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 113.557334][ T1122] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2036, error -5) [ 113.558729][ T2997] device offline error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 113.593130][ T1122] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2027, error -5) [ 113.605998][ T1122] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2032, error -5) [ 113.620025][ T1122] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2030, error -5) [ 113.634224][ T1122] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2029, error -5) [ 113.650869][ T5103] Aborting journal on device sda1-8. [ 113.656577][ T1122] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2028; err -30 [ 113.675470][ T5758] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal [ 113.677408][ T96] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 113.697056][ T5103] JBD2: I/O error when updating journal superblock for sda1-8. [ 113.708049][ T96] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 113.716769][ T5758] EXT4-fs (sda1): I/O error while writing superblock [ 113.724424][ T5758] EXT4-fs (sda1): Remounting filesystem read-only [ 116.502936][ T6205] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 116.577528][ T6238] syz.1.124[6238]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 118.224002][ T6252] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 118.230960][ T6252] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.266004][ T6252] vhci_hcd vhci_hcd.0: Device attached [ 119.261999][ C1] sched: RT throttling activated [ 119.692584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.059790][ T6253] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 121.068995][ T6252] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 121.108787][ T1129] vhci_hcd: stop threads [ 121.119194][ T1129] vhci_hcd: release socket [ 121.127889][ T1129] vhci_hcd: disconnect device [ 121.267113][ T5785] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 121.275019][ T5785] usb 37-1: enqueue for inactive port 0 [ 121.291174][ T6252] bond1: option mode: invalid value (18) [ 121.329676][ T6252] bond1 (unregistering): Released all slaves [ 121.365235][ T5785] vhci_hcd: vhci_device speed not set [ 121.584947][ T6265] Invalid ELF header magic: != ELF [ 122.009233][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 123.962203][ T5785] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 124.812752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.482891][ T6301] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 126.489579][ T6301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.559260][ T6301] vhci_hcd vhci_hcd.0: Device attached [ 126.862085][ T5811] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 126.987164][ T6305] syz.2.139: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 127.032060][ T6305] CPU: 0 PID: 6305 Comm: syz.2.139 Not tainted syzkaller #0 [ 127.039421][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.049547][ T6305] Call Trace: [ 127.052852][ T6305] [ 127.055802][ T6305] dump_stack_lvl+0x18c/0x250 [ 127.060530][ T6305] ? show_regs_print_info+0x20/0x20 [ 127.065761][ T6305] ? load_image+0x420/0x420 [ 127.070306][ T6305] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 127.076792][ T6305] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 127.083341][ T6305] warn_alloc+0x246/0x340 [ 127.087709][ T6305] ? zone_watermark_ok_safe+0x230/0x230 [ 127.093295][ T6305] ? _raw_spin_unlock+0x28/0x40 [ 127.098188][ T6305] __vmalloc_node_range+0x661/0x1320 [ 127.103487][ T6305] ? __asan_memset+0x22/0x40 [ 127.108098][ T6305] ? free_vm_area+0x50/0x50 [ 127.112609][ T6305] ? rcu_is_watching+0x15/0xb0 [ 127.117395][ T6305] ? kvmalloc_node+0x70/0x180 [ 127.122095][ T6305] ? trace_kmalloc+0x1f/0xa0 [ 127.126690][ T6305] kvmalloc_node+0x13f/0x180 [ 127.131285][ T6305] ? xp_create_and_assign_umem+0x173/0xbf0 [ 127.137178][ T6305] xp_create_and_assign_umem+0x173/0xbf0 [ 127.142850][ T6305] ? dev_get_by_index+0x22/0x2d0 [ 127.147792][ T6305] xsk_bind+0x30f/0xc50 [ 127.151958][ T6305] __sys_bind+0x2f0/0x3f0 [ 127.156296][ T6305] ? __ia32_sys_socketpair+0xb0/0xb0 [ 127.161582][ T6305] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 127.167507][ T6305] __x64_sys_bind+0x7a/0x90 [ 127.172028][ T6305] do_syscall_64+0x55/0xb0 [ 127.176464][ T6305] ? clear_bhb_loop+0x40/0x90 [ 127.181151][ T6305] ? clear_bhb_loop+0x40/0x90 [ 127.185834][ T6305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.191741][ T6305] RIP: 0033:0x7f455839de99 [ 127.196161][ T6305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.215769][ T6305] RSP: 002b:00007f45591ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 127.224189][ T6305] RAX: ffffffffffffffda RBX: 00007f4558626270 RCX: 00007f455839de99 [ 127.232166][ T6305] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 127.240142][ T6305] RBP: 00007f4558433eaf R08: 0000000000000000 R09: 0000000000000000 [ 127.248114][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.256112][ T6305] R13: 00007f4558626308 R14: 00007f4558626270 R15: 00007ffc4c475b58 [ 127.264097][ T6305] [ 127.278384][ T6305] Mem-Info: [ 127.281602][ T6305] active_anon:10158 inactive_anon:0 isolated_anon:0 [ 127.281602][ T6305] active_file:16657 inactive_file:38630 isolated_file:0 [ 127.281602][ T6305] unevictable:0 dirty:37 writeback:0 [ 127.281602][ T6305] slab_reclaimable:10338 slab_unreclaimable:90831 [ 127.281602][ T6305] mapped:27644 shmem:4258 pagetables:549 [ 127.281602][ T6305] sec_pagetables:0 bounce:0 [ 127.281602][ T6305] kernel_misc_reclaimable:0 [ 127.281602][ T6305] free:1342258 free_pcp:10641 free_cma:0 [ 127.326764][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.333712][ T6302] vhci_hcd: connection reset by peer [ 127.340743][ T1129] vhci_hcd: stop threads [ 127.345572][ T1129] vhci_hcd: release socket [ 127.352990][ T1129] vhci_hcd: disconnect device [ 127.357116][ T6305] Node 0 active_anon:31296kB inactive_anon:0kB active_file:66628kB inactive_file:154388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110576kB dirty:148kB writeback:0kB shmem:7696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10724kB pagetables:2196kB sec_pagetables:0kB all_unreclaimable? no [ 127.389658][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.401013][ T6305] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 127.431269][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.460842][ T6305] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.487999][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.497364][ T6305] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 127.507325][ T6305] Node 0 DMA32 free:1481308kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27660kB inactive_anon:0kB active_file:66628kB inactive_file:153572kB unevictable:0kB writepending:148kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:9980kB local_pcp:912kB free_cma:0kB [ 127.537418][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.544472][ T6305] lowmem_reserve[]: 0 0 0 0 0 [ 127.549429][ T6305] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 127.579805][ T6305] lowmem_reserve[]: 0 0 0 0 0 [ 127.597154][ T6305] Node 1 Normal free:3895300kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23076kB local_pcp:12504kB free_cma:0kB [ 127.629636][ T6305] lowmem_reserve[]: 0 0 0 0 0 [ 127.635990][ T6305] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.651924][ T6305] Node 0 DMA32: 1001*4kB (ME) 619*8kB (UME) 620*16kB (UME) 639*32kB (UME) 481*64kB (UME) 43*128kB (UM) 17*256kB (M) 27*512kB (UME) 21*1024kB (UME) 9*2048kB (UME) 329*4096kB (M) = 1481308kB [ 127.674894][ T6305] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 127.689657][ T6305] Node 1 Normal: 259*4kB (UME) 69*8kB (UME) 49*16kB (UME) 46*32kB (UME) 20*64kB (UME) 6*128kB (UE) 1*256kB (U) 2*512kB (ME) 1*1024kB (U) 2*2048kB (UE) 948*4096kB (M) = 3895300kB [ 127.721128][ T6305] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.731342][ T6305] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.772150][ T6305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.789547][ T6305] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.803125][ T6305] 56670 total pagecache pages [ 127.808052][ T6305] 0 pages in swap cache [ 127.816258][ T6305] Free swap = 124996kB [ 127.820602][ T6305] Total swap = 124996kB [ 127.825314][ T6305] 2097051 pages RAM [ 127.829310][ T6305] 0 pages HighMem/MovableOnly [ 127.837529][ T6305] 416955 pages reserved [ 127.841900][ T6305] 0 pages cma reserved [ 127.951426][ T6301] netlink: 'syz.1.143': attribute type 1 has an invalid length. [ 127.971221][ T6301] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 128.048013][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 128.116640][ T8] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 129.932652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 130.342323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 132.132453][ T5811] vhci_hcd: vhci_device speed not set [ 132.268210][ T6340] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 132.583482][ T6346] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 132.590167][ T6346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.659285][ T6346] vhci_hcd vhci_hcd.0: Device attached [ 132.693609][ T6350] netlink: 'syz.1.155': attribute type 1 has an invalid length. [ 132.763255][ T6350] bond1: option mode: invalid value (18) [ 132.798616][ T6350] bond1 (unregistering): Released all slaves [ 132.912519][ T6348] vhci_hcd: connection closed [ 132.915202][ T49] vhci_hcd: stop threads [ 132.945955][ T49] vhci_hcd: release socket [ 132.951526][ T49] vhci_hcd: disconnect device [ 133.006614][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.008938][ T5811] usb 35-1: device descriptor read/64, error -110 [ 133.013204][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.242157][ T5811] vhci_hcd: vhci_device speed not set [ 136.063004][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 136.238337][ T6379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.259411][ T6379] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.276031][ T6379] bond1: (slave team0): Enslaving as an active interface with an up link [ 136.309566][ T6379] bond1: entered promiscuous mode [ 136.337485][ T6379] team0: entered promiscuous mode [ 136.385180][ T6379] team_slave_0: entered promiscuous mode [ 136.405905][ T6379] team_slave_1: entered promiscuous mode [ 136.413745][ T6379] bond1: entered allmulticast mode [ 136.419112][ T6379] team0: entered allmulticast mode [ 136.427632][ T6379] team_slave_0: entered allmulticast mode [ 136.434617][ T6379] team_slave_1: entered allmulticast mode [ 137.612685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 138.052063][ T6406] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 138.058723][ T6406] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 138.088764][ T6406] vhci_hcd vhci_hcd.0: Device attached [ 138.108051][ T6407] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 138.128693][ T1122] vhci_hcd: stop threads [ 138.129499][ T6406] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 138.138500][ T1122] vhci_hcd: release socket [ 138.154142][ T1122] vhci_hcd: disconnect device [ 138.200307][ T6406] bond1: option mode: invalid value (17) [ 138.229811][ T6406] bond1 (unregistering): Released all slaves [ 142.534585][ T6435] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 142.615754][ T6438] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 142.649845][ T6438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.213028][ T6445] syzkaller0: entered promiscuous mode [ 144.218563][ T6445] syzkaller0: entered allmulticast mode [ 144.731600][ T6451] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 144.738519][ T6451] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.772230][ T6451] vhci_hcd vhci_hcd.0: Device attached [ 144.813452][ T6454] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 144.843134][ T42] vhci_hcd: stop threads [ 144.843147][ T42] vhci_hcd: release socket [ 144.843163][ T42] vhci_hcd: disconnect device [ 144.880402][ T6458] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 144.980241][ T6458] bond1: option mode: invalid value (17) [ 145.024083][ T6458] bond1 (unregistering): Released all slaves [ 148.190761][ T6469] warn_alloc: 1 callbacks suppressed [ 148.190771][ T6469] syz.0.177: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 149.079775][ T6469] CPU: 0 PID: 6469 Comm: syz.0.177 Not tainted syzkaller #0 [ 149.087238][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 149.097345][ T6469] Call Trace: [ 149.100651][ T6469] [ 149.103600][ T6469] dump_stack_lvl+0x18c/0x250 [ 149.108314][ T6469] ? show_regs_print_info+0x20/0x20 [ 149.113553][ T6469] ? load_image+0x420/0x420 [ 149.118101][ T6469] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 149.124556][ T6469] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 149.131088][ T6469] warn_alloc+0x246/0x340 [ 149.135445][ T6469] ? zone_watermark_ok_safe+0x230/0x230 [ 149.141019][ T6469] ? _raw_spin_unlock+0x28/0x40 [ 149.145914][ T6469] __vmalloc_node_range+0x661/0x1320 [ 149.151262][ T6469] ? free_vm_area+0x50/0x50 [ 149.155833][ T6469] ? rcu_is_watching+0x15/0xb0 [ 149.160625][ T6469] ? kvmalloc_node+0x70/0x180 [ 149.165354][ T6469] ? trace_kmalloc+0x1f/0xa0 [ 149.169982][ T6469] kvmalloc_node+0x13f/0x180 [ 149.174609][ T6469] ? xp_create_and_assign_umem+0x173/0xbf0 [ 149.180453][ T6469] xp_create_and_assign_umem+0x173/0xbf0 [ 149.186133][ T6469] ? dev_get_by_index+0x22/0x2d0 [ 149.191133][ T6469] xsk_bind+0x30f/0xc50 [ 149.195339][ T6469] __sys_bind+0x2f0/0x3f0 [ 149.199702][ T6469] ? __ia32_sys_socketpair+0xb0/0xb0 [ 149.205010][ T6469] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 149.210955][ T6469] __x64_sys_bind+0x7a/0x90 [ 149.215490][ T6469] do_syscall_64+0x55/0xb0 [ 149.219928][ T6469] ? clear_bhb_loop+0x40/0x90 [ 149.224623][ T6469] ? clear_bhb_loop+0x40/0x90 [ 149.229327][ T6469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.235244][ T6469] RIP: 0033:0x7fa77e39de99 [ 149.239683][ T6469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.259326][ T6469] RSP: 002b:00007fa77f1a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 149.267775][ T6469] RAX: ffffffffffffffda RBX: 00007fa77e626270 RCX: 00007fa77e39de99 [ 149.275775][ T6469] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 149.283771][ T6469] RBP: 00007fa77e433eaf R08: 0000000000000000 R09: 0000000000000000 [ 149.291766][ T6469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.299758][ T6469] R13: 00007fa77e626308 R14: 00007fa77e626270 R15: 00007ffde627e0f8 [ 149.307770][ T6469] [ 149.310900][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.328325][ T6469] Mem-Info: [ 149.331585][ T6469] active_anon:29347 inactive_anon:0 isolated_anon:0 [ 149.331585][ T6469] active_file:16657 inactive_file:38631 isolated_file:0 [ 149.331585][ T6469] unevictable:0 dirty:54 writeback:0 [ 149.331585][ T6469] slab_reclaimable:10671 slab_unreclaimable:89966 [ 149.331585][ T6469] mapped:27660 shmem:23444 pagetables:573 [ 149.331585][ T6469] sec_pagetables:0 bounce:0 [ 149.331585][ T6469] kernel_misc_reclaimable:0 [ 149.331585][ T6469] free:1319786 free_pcp:13200 free_cma:0 [ 149.376754][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.387066][ T6469] Node 0 active_anon:105552kB inactive_anon:0kB active_file:66628kB inactive_file:154392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110640kB dirty:216kB writeback:0kB shmem:81940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10672kB pagetables:2292kB sec_pagetables:0kB all_unreclaimable? no [ 149.419353][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.432134][ T6469] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 149.462325][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.468981][ T6469] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.496106][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.504984][ T6469] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 149.510850][ T6469] Node 0 DMA32 free:1396280kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:90416kB inactive_anon:0kB active_file:66628kB inactive_file:153576kB unevictable:0kB writepending:216kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:27540kB local_pcp:9764kB free_cma:0kB [ 149.541198][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.548316][ T6469] lowmem_reserve[]: 0 0 0 0 0 [ 149.553438][ T6469] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 149.580248][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.590515][ T6469] lowmem_reserve[]: 0 0 0 0 0 [ 149.597798][ T6469] Node 1 Normal free:3895804kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22800kB local_pcp:10768kB free_cma:0kB [ 149.627378][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.636204][ T6469] lowmem_reserve[]: 0 0 0 0 0 [ 149.641272][ T6469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 149.656874][ T6469] Node 0 DMA32: 1130*4kB (UME) 173*8kB (ME) 583*16kB (ME) 515*32kB (M) 450*64kB (UME) 15*128kB (M) 7*256kB (M) 26*512kB (UM) 11*1024kB (UM) 6*2048kB (UME) 322*4096kB (M) = 1420000kB [ 149.680576][ T6469] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 149.697823][ T6469] Node 1 Normal: 259*4kB (UME) 70*8kB (UME) 48*16kB (UME) 52*32kB (UME) 19*64kB (UME) 7*128kB (UE) 2*256kB (U) 2*512kB (ME) 1*1024kB (U) 2*2048kB (UE) 948*4096kB (M) = 3895804kB [ 149.719885][ T6469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.730439][ T6469] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.743403][ T6469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.754503][ T6469] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.766448][ T6469] 62707 total pagecache pages [ 149.771151][ T6469] 0 pages in swap cache [ 149.776932][ T6469] Free swap = 124996kB [ 149.781116][ T6469] Total swap = 124996kB [ 149.790498][ T6469] 2097051 pages RAM [ 149.794790][ T6469] 0 pages HighMem/MovableOnly [ 149.801047][ T6469] 416955 pages reserved [ 149.807459][ T6469] 0 pages cma reserved [ 149.912235][ T6478] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 149.920610][ T6478] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 149.963166][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 150.042998][ T6488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.064164][ T6488] bond1: (slave team0): Releasing backup interface [ 150.161556][ T6488] team0: left promiscuous mode [ 150.175381][ T6494] autofs4:pid:6494:autofs_fill_super: called with bogus options [ 150.188874][ T6488] team_slave_0: left promiscuous mode [ 150.245353][ T6488] team_slave_1: left promiscuous mode [ 150.299725][ T6488] team0: left allmulticast mode [ 150.379885][ T6488] team_slave_0: left allmulticast mode [ 150.476348][ T6488] team_slave_1: left allmulticast mode [ 150.700724][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.909490][ T6488] bond2: (slave team0): Enslaving as an active interface with an up link [ 150.937467][ T6493] bond2: entered promiscuous mode [ 150.949603][ T6493] team0: entered promiscuous mode [ 150.962060][ T6493] team_slave_0: entered promiscuous mode [ 150.988991][ T6493] team_slave_1: entered promiscuous mode [ 151.007029][ T6493] bond2: entered allmulticast mode [ 151.012369][ T6493] team0: entered allmulticast mode [ 151.017517][ T6493] team_slave_0: entered allmulticast mode [ 151.023732][ T6493] team_slave_1: entered allmulticast mode [ 154.261964][ T6519] autofs4:pid:6519:autofs_fill_super: called with bogus options [ 155.403175][ T6525] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 156.785924][ T6536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.200'. [ 158.545131][ T6551] autofs4:pid:6551:autofs_fill_super: called with bogus options [ 161.062221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 161.760315][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 162.003116][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 164.169488][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 164.263390][ T6592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.323686][ T6593] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.353516][ T6593] bond2: (slave team0): Enslaving as an active interface with an up link [ 164.499663][ T6591] bond2: entered promiscuous mode [ 164.557694][ T6591] team0: entered promiscuous mode [ 164.609733][ T6591] team_slave_0: entered promiscuous mode [ 164.675683][ T6591] team_slave_1: entered promiscuous mode [ 165.226343][ T6591] bond2: entered allmulticast mode [ 165.231507][ T6591] team0: entered allmulticast mode [ 165.259303][ T6591] team_slave_0: entered allmulticast mode [ 165.265892][ T6591] team_slave_1: entered allmulticast mode [ 165.339835][ T6605] autofs4:pid:6605:autofs_fill_super: called with bogus options [ 166.731455][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 166.779879][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.228'. [ 171.302211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 171.890271][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.241'. [ 172.208702][ T6654] syzkaller0: entered promiscuous mode [ 172.222103][ T6654] syzkaller0: entered allmulticast mode [ 172.519481][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 174.459170][ T6671] autofs4:pid:6671:autofs_fill_super: called with bogus options [ 175.783392][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.251'. [ 178.447494][ T6709] autofs4:pid:6709:autofs_fill_super: called with bogus options [ 181.460386][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.262'. [ 181.674536][ T6718] fuse: Unknown parameter 'group_i00000000000000000000' [ 184.041376][ T6736] tipc: Started in network mode [ 184.058308][ T6736] tipc: Node identity 7e0e8b2d80cb, cluster identity 4711 [ 184.079911][ T6736] tipc: Enabled bearer , priority 0 [ 184.142372][ T6735] tipc: Disabling bearer [ 184.231504][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 184.372276][ T6745] autofs4:pid:6745:autofs_fill_super: called with bogus options [ 186.334403][ T6756] fuse: Unknown parameter 'group_id00000000000000000000' [ 187.702332][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 188.734960][ T6784] autofs4:pid:6784:autofs_fill_super: called with bogus options [ 191.148588][ T6797] fuse: Unknown parameter 'group_id00000000000000000000' [ 191.276241][ T6801] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 192.205185][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 193.152895][ T6818] tipc: Enabled bearer , priority 0 [ 193.280431][ T6817] tipc: Disabling bearer [ 193.496106][ T5828] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 194.467416][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.478577][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.591790][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'. [ 194.617858][ T6839] fuse: Unknown parameter 'group_id00000000000000000000' [ 194.659838][ T6833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.694385][ T6840] bond2: (slave team0): Releasing backup interface [ 194.733007][ T6840] team0: left promiscuous mode [ 194.737826][ T6840] team_slave_0: left promiscuous mode [ 194.783580][ T6840] team_slave_1: left promiscuous mode [ 194.819592][ T6840] team0: left allmulticast mode [ 194.849434][ T6845] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 194.872604][ T6840] team_slave_0: left allmulticast mode [ 194.946534][ T6840] team_slave_1: left allmulticast mode [ 195.150199][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.299980][ T6840] bond3: (slave team0): Enslaving as an active interface with an up link [ 195.380157][ T6833] bond3: entered promiscuous mode [ 195.484253][ T6833] team0: entered promiscuous mode [ 195.612153][ T6833] team_slave_0: entered promiscuous mode [ 195.618125][ T6833] team_slave_1: entered promiscuous mode [ 195.694510][ T6833] bond3: entered allmulticast mode [ 195.699696][ T6833] team0: entered allmulticast mode [ 195.783326][ T6833] team_slave_0: entered allmulticast mode [ 195.790399][ T6833] team_slave_1: entered allmulticast mode [ 195.827788][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 195.890768][ T6847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.018692][ T6851] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 196.523975][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 196.530160][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 196.538107][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.548417][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 196.885693][ T8] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 199.427157][ T6878] tipc: Started in network mode [ 199.432401][ T6878] tipc: Node identity 922ce5d50ca1, cluster identity 4711 [ 199.439763][ T6878] tipc: Enabled bearer , priority 0 [ 199.467398][ T6875] tipc: Disabling bearer [ 199.786236][ T6881] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 200.791914][ T6888] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 200.835739][ T6883] fuse: Bad value for 'user_id' [ 201.538731][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'. [ 201.578374][ T5828] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 201.667915][ T6891] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.692300][ T6893] bond3: (slave team0): Releasing backup interface [ 202.911694][ T6893] team0: left promiscuous mode [ 202.917130][ T6893] team_slave_0: left promiscuous mode [ 202.932277][ T6893] team_slave_1: left promiscuous mode [ 202.938087][ T6893] team0: left allmulticast mode [ 202.965256][ T6893] team_slave_0: left allmulticast mode [ 202.970803][ T6893] team_slave_1: left allmulticast mode [ 202.994056][ T6893] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.009527][ T6893] bond4: (slave team0): Enslaving as an active interface with an up link [ 203.032626][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 203.093199][ T6900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.127474][ T6891] bond4: entered promiscuous mode [ 203.137998][ T6891] team0: entered promiscuous mode [ 203.143314][ T6891] team_slave_0: entered promiscuous mode [ 203.150656][ T6891] team_slave_1: entered promiscuous mode [ 203.168560][ T6891] bond4: entered allmulticast mode [ 203.212508][ T6891] team0: entered allmulticast mode [ 203.270237][ T6891] team_slave_0: entered allmulticast mode [ 203.347414][ T6891] team_slave_1: entered allmulticast mode [ 203.974404][ T6913] tipc: Enabling of bearer rejected, failed to enable media [ 204.284344][ T6926] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 205.945419][ T6933] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 206.307886][ T6944] fuse: Bad value for 'user_id' [ 206.557974][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 206.815395][ T6952] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.525948][ T6958] tipc: Enabling of bearer rejected, failed to enable media [ 207.633971][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'. [ 207.708250][ T6960] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.716016][ T6977] netlink: 'syz.3.335': attribute type 1 has an invalid length. [ 208.260560][ T6986] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 208.667337][ T6977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.720896][ T6960] bond4: (slave team0): Releasing backup interface [ 208.735525][ T6960] team0: left promiscuous mode [ 208.740355][ T6960] team_slave_0: left promiscuous mode [ 208.768276][ T6960] team_slave_1: left promiscuous mode [ 208.808271][ T6960] team0: left allmulticast mode [ 208.816371][ T6960] team_slave_0: left allmulticast mode [ 208.821942][ T6960] team_slave_1: left allmulticast mode [ 208.877404][ T6991] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 208.907420][ T6960] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.069221][ T6960] bond5: (slave team0): Enslaving as an active interface with an up link [ 209.343077][ T6982] bond2: (slave ip6erspan0): making interface the new active one [ 209.406822][ T6982] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 209.477895][ T6979] bond5: entered promiscuous mode [ 209.525428][ T6979] team0: entered promiscuous mode [ 209.576239][ T6979] team_slave_0: entered promiscuous mode [ 209.632711][ T6979] team_slave_1: entered promiscuous mode [ 209.638800][ T6979] bond5: entered allmulticast mode [ 209.684143][ T6995] fuse: Bad value for 'user_id' [ 209.689697][ T6979] team0: entered allmulticast mode [ 209.696459][ T6979] team_slave_0: entered allmulticast mode [ 209.708538][ T6979] team_slave_1: entered allmulticast mode [ 210.866649][ T7008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.064541][ T7019] tipc: Enabling of bearer rejected, failed to enable media [ 211.240603][ T7029] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 212.196374][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 212.280803][ T7032] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.053960][ T7032] bond5: (slave team0): Releasing backup interface [ 213.261530][ T7032] team0: left promiscuous mode [ 213.291400][ T7047] fuse: Bad value for 'fd' [ 213.296708][ T7032] team_slave_0: left promiscuous mode [ 213.321207][ T7032] team_slave_1: left promiscuous mode [ 213.354485][ T7032] team0: left allmulticast mode [ 213.359422][ T7032] team_slave_0: left allmulticast mode [ 213.365132][ T7032] team_slave_1: left allmulticast mode [ 213.373185][ T7032] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.382908][ T7032] bond6: (slave team0): Enslaving as an active interface with an up link [ 213.393692][ T7045] bond6: entered promiscuous mode [ 213.398919][ T7045] team0: entered promiscuous mode [ 213.409850][ T7045] team_slave_0: entered promiscuous mode [ 213.416232][ T7045] team_slave_1: entered promiscuous mode [ 213.425344][ T7045] bond6: entered allmulticast mode [ 213.430464][ T7045] team0: entered allmulticast mode [ 213.435875][ T7045] team_slave_0: entered allmulticast mode [ 213.441634][ T7045] team_slave_1: entered allmulticast mode [ 213.452130][ T7051] netlink: 'syz.3.356': attribute type 1 has an invalid length. [ 213.507760][ T7051] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.641088][ T7062] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 213.680372][ T7055] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.459275][ T7064] tipc: Enabling of bearer rejected, failed to enable media [ 214.660767][ T7079] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 215.804425][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 216.452435][ T7096] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.584223][ T7099] netlink: 'syz.1.368': attribute type 1 has an invalid length. [ 216.696199][ T7099] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 216.725426][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.868068][ T7109] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 216.917159][ T7091] bond4: (slave team0): Enslaving as an active interface with an up link [ 217.121306][ T7102] bond4: entered promiscuous mode [ 217.148729][ T7102] team0: entered promiscuous mode [ 217.201155][ T7102] team_slave_0: entered promiscuous mode [ 217.240911][ T7102] team_slave_1: entered promiscuous mode [ 217.297079][ T7102] bond4: entered allmulticast mode [ 217.336129][ T7102] team0: entered allmulticast mode [ 217.370688][ T7102] team_slave_0: entered allmulticast mode [ 217.415058][ T7102] team_slave_1: entered allmulticast mode [ 217.805002][ T7114] fuse: Bad value for 'fd' [ 217.838535][ T7111] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.035980][ T7127] Invalid ELF header magic: != ELF [ 221.122964][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'. [ 221.311159][ T7150] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 221.673029][ T7140] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.109903][ T7148] bond4: (slave team0): Releasing backup interface [ 222.148093][ T7148] team0: left promiscuous mode [ 222.153376][ T7148] team_slave_0: left promiscuous mode [ 222.159128][ T7148] team_slave_1: left promiscuous mode [ 222.165669][ T7148] team0: left allmulticast mode [ 222.170764][ T7148] team_slave_0: left allmulticast mode [ 222.176687][ T7148] team_slave_1: left allmulticast mode [ 222.177336][ T7156] fuse: Bad value for 'fd' [ 222.185061][ T7148] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.199952][ T7148] bond6: (slave team0): Enslaving as an active interface with an up link [ 222.219299][ T7138] bond6: entered promiscuous mode [ 222.227238][ T7138] team0: entered promiscuous mode [ 222.235945][ T7138] team_slave_0: entered promiscuous mode [ 222.241885][ T7138] team_slave_1: entered promiscuous mode [ 222.249839][ T7138] bond6: entered allmulticast mode [ 222.255854][ T7138] team0: entered allmulticast mode [ 222.261153][ T7138] team_slave_0: entered allmulticast mode [ 222.267246][ T7138] team_slave_1: entered allmulticast mode [ 222.345852][ T7153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.355298][ T7178] Invalid ELF header magic: != ELF [ 226.154299][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 226.194005][ T7186] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.245055][ T7186] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.284302][ T7186] bond6: (slave team0): Enslaving as an active interface with an up link [ 226.340156][ T7193] bond6: entered promiscuous mode [ 226.373717][ T7193] team0: entered promiscuous mode [ 226.429227][ T7193] team_slave_0: entered promiscuous mode [ 226.507552][ T7193] team_slave_1: entered promiscuous mode [ 226.590405][ T7193] bond6: entered allmulticast mode [ 226.656299][ T7193] team0: entered allmulticast mode [ 226.724985][ T7193] team_slave_0: entered allmulticast mode [ 226.796465][ T7193] team_slave_1: entered allmulticast mode [ 229.320894][ T7218] Invalid ELF header magic: != ELF [ 230.821767][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 230.836709][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 230.953943][ T7235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.051423][ T7231] bond2: (slave team0): Releasing backup interface [ 231.068900][ T7231] team0: left promiscuous mode [ 231.081031][ T7231] team_slave_0: left promiscuous mode [ 231.092250][ T7231] team_slave_1: left promiscuous mode [ 231.222446][ T7231] team0: left allmulticast mode [ 231.227519][ T7231] team_slave_0: left allmulticast mode [ 231.253050][ T7231] team_slave_1: left allmulticast mode [ 232.623313][ T7231] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.647943][ T7231] bond4: (slave team0): Enslaving as an active interface with an up link [ 232.674843][ T7242] bond4: entered promiscuous mode [ 232.702142][ T7242] team0: entered promiscuous mode [ 232.722116][ T7242] team_slave_0: entered promiscuous mode [ 232.727936][ T7242] team_slave_1: entered promiscuous mode [ 232.784501][ T7242] bond4: entered allmulticast mode [ 232.806291][ T7242] team0: entered allmulticast mode [ 232.811485][ T7242] team_slave_0: entered allmulticast mode [ 232.839562][ T7242] team_slave_1: entered allmulticast mode [ 232.885678][ T7257] syzkaller0: entered promiscuous mode [ 232.893719][ T7257] syzkaller0: entered allmulticast mode [ 232.922808][ T7257] netlink: 44 bytes leftover after parsing attributes in process `syz.2.413'. [ 234.281909][ T7264] Invalid ELF header magic: != ELF [ 234.361000][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 234.364714][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 234.572146][ T23] usb 1-1: Dual-Role OTG device on HNP port [ 234.582135][ T23] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 234.591834][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.651254][ T23] gspca_main: spca501-2.14.0 probing 0000:0000 [ 234.672368][ T23] gspca_spca501: reg write: error -32 [ 234.677803][ T23] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 234.705799][ T23] spca501: probe of 1-1:1.0 failed with error -22 [ 234.753061][ C1] general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] PREEMPT SMP KASAN [ 234.764850][ C1] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 234.773276][ C1] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 234.780608][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 234.790716][ C1] Workqueue: usb_hub_wq hub_event [ 234.795796][ C1] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 234.801454][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 234.821103][ C1] RSP: 0018:ffffc900001f0840 EFLAGS: 00010002 [ 234.827182][ C1] RAX: 00000000000000e6 RBX: ffff88802ebbc120 RCX: ffff88801be7da00 [ 234.835253][ C1] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 234.843322][ C1] RBP: ffff88802ebbc100 R08: 0000000000000000 R09: 00000000eed9a316 [ 234.851319][ C1] R10: 000000005c29093d R11: 0000000000000100 R12: ffff88802ebbc730 [ 234.859311][ C1] R13: dffffc0000000000 R14: ffff88802ebbc128 R15: 0000000000000730 [ 234.867384][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 234.876510][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.883089][ C1] CR2: 0000000000000000 CR3: 000000001a2cd000 CR4: 00000000003506e0 [ 234.891055][ C1] Call Trace: [ 234.894328][ C1] [ 234.897165][ C1] f_midi2_set_alt+0x100/0x800 [ 234.901929][ C1] composite_setup+0x1ffe/0x33a0 [ 234.906874][ C1] configfs_composite_setup+0xc7/0x100 [ 234.912330][ C1] dummy_timer+0x1309/0x3420 [ 234.916925][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 234.921943][ C1] ? lock_chain_count+0x20/0x20 [ 234.926789][ C1] ? dummy_free_streams+0x520/0x520 [ 234.932003][ C1] ? dummy_free_streams+0x520/0x520 [ 234.937204][ C1] __hrtimer_run_queues+0x525/0xc10 [ 234.942417][ C1] ? hrtimer_interrupt+0x980/0x980 [ 234.947522][ C1] ? read_tsc+0x9/0x20 [ 234.951595][ C1] hrtimer_run_softirq+0x177/0x290 [ 234.956738][ C1] handle_softirqs+0x27d/0x820 [ 234.961500][ C1] ? read_tsc+0x9/0x20 [ 234.965561][ C1] ? ktime_get+0x24b/0x280 [ 234.969970][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 234.974726][ C1] ? do_softirq+0x1a0/0x1a0 [ 234.979220][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 234.984418][ C1] __irq_exit_rcu+0xd3/0x190 [ 234.988999][ C1] ? irq_exit_rcu+0x20/0x20 [ 234.993517][ C1] irq_exit_rcu+0x9/0x20 [ 234.997776][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 235.003416][ C1] [ 235.006338][ C1] [ 235.009277][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.015273][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 235.021916][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2b 5f c6 f6 65 8b 05 9c 2d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 235.041528][ C1] RSP: 0018:ffffc900001d6880 EFLAGS: 00000206 [ 235.047590][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: f7397b9ac0d37900 [ 235.055572][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 235.063623][ C1] RBP: ffffc900001d6910 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 235.071588][ C1] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: dffffc0000000000 [ 235.079576][ C1] R13: dffffc0000000000 R14: ffff888022dd4000 R15: 1ffff9200003ad10 [ 235.087552][ C1] ? _raw_spin_unlock+0x40/0x40 [ 235.092412][ C1] ? kobject_get+0xcc/0x120 [ 235.096934][ C1] dummy_urb_enqueue+0x587/0x780 [ 235.101876][ C1] usb_hcd_submit_urb+0x318/0x1aa0 [ 235.106986][ C1] ? __init_swait_queue_head+0xa8/0x140 [ 235.112566][ C1] usb_start_wait_urb+0x140/0x580 [ 235.117592][ C1] ? usb_api_blocking_completion+0xb0/0xb0 [ 235.123427][ C1] usb_control_msg+0x235/0x3e0 [ 235.128186][ C1] usb_set_interface+0x51f/0x13f0 [ 235.133212][ C1] snd_usb_midi_v2_create+0x62f/0x48a0 [ 235.138688][ C1] ? validate_midi_out_jack+0xb0/0xb0 [ 235.144071][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 235.149704][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 235.154909][ C1] ? usb_ifnum_to_if+0x262/0x2e0 [ 235.159845][ C1] snd_usb_create_stream+0x262/0x5d0 [ 235.165128][ C1] usb_audio_probe+0xead/0x1f00 [ 235.169977][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 235.174997][ C1] ? snd_usb_autosuspend+0x1c0/0x1c0 [ 235.180278][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 235.186176][ C1] usb_probe_interface+0x5c2/0xaf0 [ 235.191309][ C1] ? usb_register_driver+0x3c0/0x3c0 [ 235.196611][ C1] really_probe+0x247/0xae0 [ 235.201124][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 235.206419][ C1] __driver_probe_device+0x1f5/0x390 [ 235.211707][ C1] driver_probe_device+0x4f/0x420 [ 235.216824][ C1] __device_attach_driver+0x2ca/0x510 [ 235.222229][ C1] bus_for_each_drv+0x252/0x2e0 [ 235.227164][ C1] ? coredump_store+0x90/0x90 [ 235.231841][ C1] ? bus_find_device+0x300/0x300 [ 235.236788][ C1] __device_attach+0x2c1/0x420 [ 235.241570][ C1] ? device_attach+0x20/0x20 [ 235.246244][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 235.251439][ C1] bus_probe_device+0x180/0x260 [ 235.256333][ C1] device_add+0x87c/0xc40 [ 235.260849][ C1] usb_set_configuration+0x1ad0/0x2150 [ 235.266342][ C1] usb_generic_driver_probe+0x8d/0x150 [ 235.271807][ C1] usb_probe_device+0x12a/0x260 [ 235.276683][ C1] ? usb_register_device_driver+0x230/0x230 [ 235.282584][ C1] really_probe+0x247/0xae0 [ 235.287088][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 235.292298][ C1] __driver_probe_device+0x1f5/0x390 [ 235.297581][ C1] driver_probe_device+0x4f/0x420 [ 235.302630][ C1] __device_attach_driver+0x2ca/0x510 [ 235.308010][ C1] bus_for_each_drv+0x252/0x2e0 [ 235.312862][ C1] ? coredump_store+0x90/0x90 [ 235.317539][ C1] ? bus_find_device+0x300/0x300 [ 235.322477][ C1] __device_attach+0x2c1/0x420 [ 235.327253][ C1] ? device_attach+0x20/0x20 [ 235.331850][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 235.336959][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 235.342157][ C1] bus_probe_device+0x180/0x260 [ 235.347035][ C1] device_add+0x87c/0xc40 [ 235.351376][ C1] usb_new_device+0x995/0x1550 [ 235.356158][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 235.361044][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.366252][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 235.371455][ C1] hub_event+0x29d5/0x4a80 [ 235.375884][ C1] ? hub_post_resume+0x120/0x120 [ 235.380810][ C1] ? read_lock_is_recursive+0x20/0x20 [ 235.386265][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.391463][ C1] ? process_scheduled_works+0x975/0x1600 [ 235.397180][ C1] ? process_scheduled_works+0x975/0x1600 [ 235.402908][ C1] process_scheduled_works+0xa60/0x1600 [ 235.408544][ C1] ? worker_attach_to_pool+0x370/0x370 [ 235.414457][ C1] ? assign_work+0x3cc/0x5d0 [ 235.419058][ C1] worker_thread+0xa5e/0xfe0 [ 235.423669][ C1] kthread+0x2fa/0x390 [ 235.427755][ C1] ? pr_cont_work+0x550/0x550 [ 235.432463][ C1] ? kthread_blkcg+0xd0/0xd0 [ 235.437047][ C1] ret_from_fork+0x48/0x80 [ 235.441458][ C1] ? kthread_blkcg+0xd0/0xd0 [ 235.446041][ C1] ret_from_fork_asm+0x11/0x20 [ 235.450808][ C1] [ 235.453833][ C1] Modules linked in: [ 235.457732][ C1] ---[ end trace 0000000000000000 ]--- [ 235.463280][ C1] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 235.468948][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 235.488555][ C1] RSP: 0018:ffffc900001f0840 EFLAGS: 00010002 [ 235.494617][ C1] RAX: 00000000000000e6 RBX: ffff88802ebbc120 RCX: ffff88801be7da00 [ 235.502582][ C1] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 235.510545][ C1] RBP: ffff88802ebbc100 R08: 0000000000000000 R09: 00000000eed9a316 [ 235.518537][ C1] R10: 000000005c29093d R11: 0000000000000100 R12: ffff88802ebbc730 [ 235.526528][ C1] R13: dffffc0000000000 R14: ffff88802ebbc128 R15: 0000000000000730 [ 235.534578][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 235.543503][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.550075][ C1] CR2: 0000000000000000 CR3: 000000001a2cd000 CR4: 00000000003506e0 [ 235.558041][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 235.565460][ C1] Kernel Offset: disabled [ 235.569783][ C1] Rebooting in 86400 seconds..