last executing test programs: 2.643675193s ago: executing program 2 (id=31): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000003240)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) 2.527321994s ago: executing program 0 (id=32): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.423789833s ago: executing program 2 (id=33): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x3e, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x5, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x3, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.667537074s ago: executing program 0 (id=36): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2) openat$full(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) 1.667347272s ago: executing program 1 (id=38): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x1, 0x0, [{0xd000, 0x5f, &(0x7f0000000140)=""/95}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), &(0x7f0000020000), &(0x7f0000018000)}) write(r1, &(0x7f0000010000)="000002000000000080", 0x9) write(r1, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) 1.66719347s ago: executing program 3 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.629116179s ago: executing program 3 (id=40): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @local}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 1.599713337s ago: executing program 1 (id=42): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r1, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x16, 0xd, 0x1, 0x10001}]}) close_range(r1, r1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1, 0x3, [{{0xa, 0x4e21, 0x1c000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e23, 0x9, @local, 0x81}}, {{0xa, 0x4e23, 0x3, @private1, 0x7}}]}, 0x20c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @random="4910075ad2b9", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x20, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4, 0x8}, @fastopen={0x22, 0x7, "074f0c3aad"}]}}}}}}}}, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000038f000/0x1000)=nil) 1.572888187s ago: executing program 3 (id=43): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2c41, 0xe4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) 1.405877997s ago: executing program 2 (id=44): write$eventfd(0xffffffffffffffff, &(0x7f0000000100)=0x400, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.388739872s ago: executing program 1 (id=46): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0xe, 0x8, 0x2, "ff00f70000e5020052c4f21c7f000000002000"}) r3 = syz_open_pts(r1, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) io_uring_setup(0x2fac, &(0x7f0000000500)={0x0, 0x9d1d, 0x40, 0x3, 0x27}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x400008, 0x1ffffffe, 0x0, 0x3, 0x19, "680c1acfa4a5000000070000faffffff000800"}) close_range(r0, 0xffffffffffffffff, 0x0) 1.137793579s ago: executing program 1 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) read$FUSE(r2, &(0x7f0000004780)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) unshare(0x42000000) 1.131070504s ago: executing program 0 (id=55): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0xe, 0x8, 0x2, "ff00f70000e5020052c4f21c7f000000002000"}) r3 = syz_open_pts(r1, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) io_uring_setup(0x2fac, &(0x7f0000000500)={0x0, 0x9d1d, 0x40, 0x3, 0x27}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x400008, 0x1ffffffe, 0x0, 0x3, 0x19, "680c1acfa4a5000000070000faffffff000800"}) close_range(r0, 0xffffffffffffffff, 0x0) 1.129253406s ago: executing program 3 (id=56): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f", 0x2}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000006c0)="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", 0xfe7c}, {&(0x7f0000000000)="87", 0x1}, {&(0x7f0000003300)="9a", 0x1}], 0x3}}], 0x4000000000002e4, 0x40003e8) 978.179187ms ago: executing program 1 (id=48): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000003240)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) 976.207913ms ago: executing program 3 (id=58): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2) openat$full(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) 747.674195ms ago: executing program 1 (id=49): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90d, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5524, 0x4, 0x3, 0x1ce}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0x1, 0x8004, 0x0, 0x0}}, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r8, &(0x7f0000000440)={0x2, 0x0, {&(0x7f00000004c0)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 746.086795ms ago: executing program 0 (id=60): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000003240)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) 624.090524ms ago: executing program 2 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='dummy_udc.0', 0xb) 379.90712ms ago: executing program 2 (id=51): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x1, {}, 0xfd}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 379.720351ms ago: executing program 3 (id=52): syz_usb_connect(0x0, 0x3b, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r1, &(0x7f0000000240)=0x2, 0x12) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f00000005c0)) close_range(r0, 0xffffffffffffffff, 0x0) 375.678666ms ago: executing program 0 (id=63): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000003240)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) 207.679502ms ago: executing program 2 (id=53): syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000183000/0x1000)=nil, &(0x7f000035a000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000850000/0x4000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000297000/0x800000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00001ea000/0x2000)=nil, 0x0}, 0x64) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1000000000000000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 0s ago: executing program 0 (id=54): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x3e, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x5, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x3, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:32897' (ED25519) to the list of known hosts. [ 42.550398][ T5722] cgroup: Unknown subsys name 'net' [ 42.720722][ T5722] cgroup: Unknown subsys name 'cpuset' [ 42.724820][ T5722] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.750295][ T5722] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.573103][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.575928][ T5737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.577127][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.577792][ T5737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.577979][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.578368][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.579121][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.579603][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.579783][ T5737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.579844][ T5737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.580247][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.580296][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.581805][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.581904][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.582560][ T5737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.582888][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.583203][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.585006][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.586263][ T5092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.606423][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.207203][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.208386][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.208454][ T5733] bridge_slave_0: entered allmulticast mode [ 48.209179][ T5733] bridge_slave_0: entered promiscuous mode [ 48.211387][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.211427][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.211481][ T5733] bridge_slave_1: entered allmulticast mode [ 48.212398][ T5733] bridge_slave_1: entered promiscuous mode [ 48.247163][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.247395][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.247498][ T5734] bridge_slave_0: entered allmulticast mode [ 48.248645][ T5734] bridge_slave_0: entered promiscuous mode [ 48.276534][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.276685][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.276787][ T5734] bridge_slave_1: entered allmulticast mode [ 48.277976][ T5734] bridge_slave_1: entered promiscuous mode [ 48.290338][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.290554][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.290642][ T5741] bridge_slave_0: entered allmulticast mode [ 48.291352][ T5741] bridge_slave_0: entered promiscuous mode [ 48.301193][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.303798][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.315385][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.315464][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.315549][ T5741] bridge_slave_1: entered allmulticast mode [ 48.316819][ T5741] bridge_slave_1: entered promiscuous mode [ 48.350617][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.350701][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.350776][ T5742] bridge_slave_0: entered allmulticast mode [ 48.351500][ T5742] bridge_slave_0: entered promiscuous mode [ 48.352638][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.353194][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.353716][ T5742] bridge_slave_1: entered allmulticast mode [ 48.354510][ T5742] bridge_slave_1: entered promiscuous mode [ 48.359091][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.360911][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.362410][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.364872][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.373265][ T5733] team0: Port device team_slave_0 added [ 48.394641][ T5733] team0: Port device team_slave_1 added [ 48.410300][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.429016][ T5734] team0: Port device team_slave_0 added [ 48.430702][ T5734] team0: Port device team_slave_1 added [ 48.431940][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.438961][ T5741] team0: Port device team_slave_0 added [ 48.444025][ T5741] team0: Port device team_slave_1 added [ 48.469824][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.472166][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.477393][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.478960][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.478969][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.478982][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.485621][ T5742] team0: Port device team_slave_0 added [ 48.487900][ T5742] team0: Port device team_slave_1 added [ 48.497619][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.497629][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.497642][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.503461][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.503476][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.503496][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.510854][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.510864][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.510876][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.511353][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.511362][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.511375][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.511826][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.511833][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.511845][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.516211][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.516218][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.516231][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.564753][ T5734] hsr_slave_0: entered promiscuous mode [ 48.565951][ T5734] hsr_slave_1: entered promiscuous mode [ 48.577632][ T5733] hsr_slave_0: entered promiscuous mode [ 48.578044][ T5733] hsr_slave_1: entered promiscuous mode [ 48.578349][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 48.578396][ T5733] Cannot create hsr debugfs directory [ 48.599080][ T5742] hsr_slave_0: entered promiscuous mode [ 48.599583][ T5742] hsr_slave_1: entered promiscuous mode [ 48.599918][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 48.599929][ T5742] Cannot create hsr debugfs directory [ 48.610181][ T5741] hsr_slave_0: entered promiscuous mode [ 48.610711][ T5741] hsr_slave_1: entered promiscuous mode [ 48.611030][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 48.611042][ T5741] Cannot create hsr debugfs directory [ 48.859317][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.865822][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.866478][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.870625][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.871213][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.874693][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.875157][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.879091][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.925864][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.926003][ T5742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.926386][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.926469][ T5742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.934605][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.939301][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.943621][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.948649][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.967187][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.974115][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.980313][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.984523][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.025849][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.032372][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.033130][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.039032][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.039970][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.043545][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.049295][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.053995][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.064730][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.064852][ T5733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.065199][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.065293][ T5733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.108812][ T5734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.114858][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.120007][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.123144][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.126286][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.141218][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.144018][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.169463][ T5734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.174770][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.175645][ T5734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.180027][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.181020][ T5734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.184574][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.223730][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.232521][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.232623][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.241779][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.241870][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.270614][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.300893][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.307195][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.307717][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.314344][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.314415][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.345105][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.368061][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.389187][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.394461][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.398495][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.398633][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.403662][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.404137][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.415135][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.415271][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.421654][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.421743][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.649051][ T5738] Bluetooth: hci0: command tx timeout [ 49.649248][ T5738] Bluetooth: hci3: command tx timeout [ 49.649318][ T5738] Bluetooth: hci2: command tx timeout [ 49.649422][ T5747] Bluetooth: hci1: command tx timeout [ 49.675736][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.705141][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.715069][ T5742] veth0_vlan: entered promiscuous mode [ 49.722940][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.728720][ T5742] veth1_vlan: entered promiscuous mode [ 49.751959][ T5741] veth0_vlan: entered promiscuous mode [ 49.756472][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.763901][ T5741] veth1_vlan: entered promiscuous mode [ 49.783136][ T5742] veth0_macvtap: entered promiscuous mode [ 49.786917][ T5742] veth1_macvtap: entered promiscuous mode [ 49.810880][ T5734] veth0_vlan: entered promiscuous mode [ 49.832882][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.842465][ T5733] veth0_vlan: entered promiscuous mode [ 49.844358][ T5741] veth0_macvtap: entered promiscuous mode [ 49.846663][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.849682][ T5734] veth1_vlan: entered promiscuous mode [ 49.855450][ T5741] veth1_macvtap: entered promiscuous mode [ 49.865166][ T5733] veth1_vlan: entered promiscuous mode [ 49.882952][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.885207][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.918603][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.918926][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.918983][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.919025][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.928597][ T5734] veth0_macvtap: entered promiscuous mode [ 49.944410][ T5733] veth0_macvtap: entered promiscuous mode [ 49.945368][ T5734] veth1_macvtap: entered promiscuous mode [ 49.954045][ T5733] veth1_macvtap: entered promiscuous mode [ 49.970945][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.971150][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.971165][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.993320][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.998588][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.006434][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.010162][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.010228][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.045530][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.045560][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.053295][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.053338][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.125876][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.125923][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.128581][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.143290][ T5742] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.148079][ T5742] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.153193][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.153235][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.153256][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.153278][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.153310][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.153340][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.153371][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.153402][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.153434][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.157542][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.160939][ T5742] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.163112][ T5742] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.167740][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.169290][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.169308][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.183695][ T5742] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.212817][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.212883][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.234556][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.234620][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.329595][ T5885] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.642580][ T5908] process 'syz.1.8' launched './file0' with NULL argv: empty string added [ 50.659021][ T5908] FAULT_INJECTION: forcing a failure. [ 50.659021][ T5908] name failslab, interval 1, probability 0, space 0, times 1 [ 50.659077][ T5908] CPU: 2 UID: 0 PID: 5908 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT(full) [ 50.659102][ T5908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.659111][ T5908] Call Trace: [ 50.659115][ T5908] [ 50.659121][ T5908] dump_stack_lvl+0x100/0x190 [ 50.659155][ T5908] should_fail_ex.cold+0x5/0xa [ 50.659171][ T5908] should_failslab+0xc2/0x120 [ 50.659190][ T5908] kmem_cache_alloc_noprof+0x92/0x6a0 [ 50.659205][ T5908] ? seq_open+0x55/0x170 [ 50.659222][ T5908] ? __pfx_proc_setgroups_show+0x10/0x10 [ 50.659247][ T5908] seq_open+0x55/0x170 [ 50.659264][ T5908] ? __pfx_proc_setgroups_show+0x10/0x10 [ 50.659281][ T5908] single_open+0xfc/0x1d0 [ 50.659300][ T5908] proc_setgroups_open+0x35a/0x7e0 [ 50.659314][ T5908] do_dentry_open+0x6ab/0x14d0 [ 50.659327][ T5908] ? __pfx_proc_setgroups_open+0x10/0x10 [ 50.659342][ T5908] vfs_open+0x82/0x3f0 [ 50.659359][ T5908] path_openat+0x19fa/0x2440 [ 50.659375][ T5908] ? __pfx_path_openat+0x10/0x10 [ 50.659392][ T5908] do_file_open+0x20e/0x430 [ 50.659409][ T5908] ? __pfx_do_file_open+0x10/0x10 [ 50.659427][ T5908] ? __pfx_kfree_link+0x10/0x10 [ 50.659442][ T5908] ? _raw_spin_unlock+0x28/0x50 [ 50.659458][ T5908] ? alloc_fd+0x471/0x7a0 [ 50.659475][ T5908] do_sys_openat2+0x10f/0x1e0 [ 50.659490][ T5908] ? __pfx_do_sys_openat2+0x10/0x10 [ 50.659505][ T5908] ? find_held_lock+0x2b/0x80 [ 50.659518][ T5908] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 50.659533][ T5908] __ia32_compat_sys_openat+0x12d/0x210 [ 50.659550][ T5908] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 50.659573][ T5908] do_int80_emulation+0x166/0x650 [ 50.659606][ T5908] asm_int80_emulation+0x1a/0x20 [ 50.659618][ T5908] RIP: 0023:0xf71475ab [ 50.659628][ T5908] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 50.659639][ T5908] RSP: 002b:00000000f54063cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 50.659650][ T5908] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5406490 [ 50.659657][ T5908] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.659664][ T5908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.659671][ T5908] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.659697][ T5908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.659713][ T5908] [ 51.446476][ T5925] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET) [ 51.559036][ T5929] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.604470][ T5932] input: syz1 as /devices/virtual/input/input5 [ 51.727418][ T67] Bluetooth: hci1: command tx timeout [ 51.727476][ T67] Bluetooth: hci2: command tx timeout [ 51.727513][ T67] Bluetooth: hci3: command tx timeout [ 51.727539][ T67] Bluetooth: hci0: command tx timeout [ 52.569680][ T5966] input: syz1 as /devices/virtual/input/input6 [ 52.869889][ T43] audit: type=1804 audit(1788664259.650:2): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.37" name="/newroot/11/file0" dev="tmpfs" ino=77 res=1 errno=0 [ 52.871108][ T5973] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -780, delta: 1 [ 52.871123][ T5973] ref_ctr increment failed for inode: 0x4d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888024c8d940 [ 52.873327][ T5972] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -780, delta: -1 [ 52.873343][ T5972] ref_ctr decrement failed for inode: 0x4d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888024c8d940 [ 52.873371][ T5972] uprobe: syz.0.37:5972 failed to unregister, leaking uprobe [ 53.468128][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41'. [ 53.807481][ T67] Bluetooth: hci3: command tx timeout [ 53.807528][ T67] Bluetooth: hci2: command tx timeout [ 53.807563][ T67] Bluetooth: hci1: command tx timeout [ 53.807786][ T5738] Bluetooth: hci0: command tx timeout [ 53.943428][ T5998] kvm: pic: single mode not supported [ 53.944680][ T5998] kvm: pic: single mode not supported [ 53.945207][ T5998] kvm: pic: single mode not supported [ 54.014074][ T5998] kvm: pic: single mode not supported [ 54.017672][ T5998] kvm: pic: single mode not supported [ 54.022277][ T5998] kvm: pic: single mode not supported [ 54.026497][ T5998] kvm: pic: single mode not supported [ 54.031284][ T5998] kvm: pic: single mode not supported [ 54.032918][ T5998] kvm: pic: single mode not supported [ 54.034458][ T5998] kvm: pic: single mode not supported [ 54.493839][ T6014] netlink: 'syz.3.40': attribute type 4 has an invalid length. [ 54.501654][ T6014] netlink: 'syz.3.40': attribute type 4 has an invalid length. [ 54.748585][ T6023] bridge_slave_0: left allmulticast mode [ 54.748666][ T6023] bridge_slave_0: left promiscuous mode [ 54.748857][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.760023][ T6018] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 54.767440][ T6023] bridge_slave_1: left allmulticast mode [ 54.767481][ T6023] bridge_slave_1: left promiscuous mode [ 54.767615][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.779500][ T6023] bond0: (slave bond_slave_0): Releasing backup interface [ 54.784582][ T6023] bond0: (slave bond_slave_1): Releasing backup interface [ 54.791941][ T6023] team0: Port device team_slave_0 removed [ 54.801486][ T6023] team0: Port device team_slave_1 removed [ 54.802025][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.802038][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.805695][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.805709][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.812829][ T6023] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 55.760619][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 55.887777][ T5738] Bluetooth: hci0: command tx timeout [ 55.887861][ T5738] Bluetooth: hci1: command tx timeout [ 55.887919][ T5738] Bluetooth: hci2: command tx timeout [ 55.887951][ T5738] Bluetooth: hci3: command tx timeout [ 55.927336][ T5880] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.107592][ T5880] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 56.117973][ T5880] usb 5-1: Dual-Role OTG device on HNP port [ 56.120969][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.135750][ T5880] gspca_main: spca501-2.14.0 probing 0000:0000 [ 56.139081][ T5880] gspca_spca501: reg write: error -32 [ 56.147630][ T5880] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 56.150317][ T5880] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 56.158137][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 56.161896][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 56.164864][ C0] CPU: 0 UID: 0 PID: 5880 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 56.167907][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.171344][ C0] Workqueue: usb_hub_wq hub_event [ 56.173156][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 56.175261][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 56.181389][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010002 [ 56.183421][ C0] RAX: dffffc0000000000 RBX: ffff8880133d8000 RCX: 0000000000000103 [ 56.186138][ C0] RDX: 00000000000000e6 RSI: ffffffff87f39296 RDI: ffff8880133d8128 [ 56.188941][ C0] RBP: ffff8880133d8128 R08: 0000000000000004 R09: 0000000000000020 [ 56.191548][ C0] R10: 0000000000000020 R11: 000000000000760b R12: ffff8880133d80f0 [ 56.194056][ C0] R13: ffff8880133d8128 R14: ffff8880133d8740 R15: 0000000000000001 [ 56.196797][ C0] FS: 0000000000000000(0000) GS:ffff888096963000(0000) knlGS:0000000000000000 [ 56.199921][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.202185][ C0] CR2: 00000000f721ea77 CR3: 00000000614bd000 CR4: 0000000000352ef0 [ 56.204720][ C0] Call Trace: [ 56.205819][ C0] [ 56.206776][ C0] f_midi2_set_alt+0x444/0x5f0 [ 56.208486][ C0] composite_setup+0x16f8/0x9290 [ 56.210260][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 56.211997][ C0] ? __pfx_composite_setup+0x10/0x10 [ 56.213740][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 56.215487][ C0] ? do_raw_spin_lock+0x128/0x260 [ 56.217102][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 56.218894][ C0] ? configfs_composite_setup+0xfb/0x130 [ 56.220663][ C0] configfs_composite_setup+0xfb/0x130 [ 56.222355][ C0] dummy_timer+0x2039/0x3700 [ 56.223786][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 56.225803][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 56.227586][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 56.229277][ C0] ? mark_held_locks+0x40/0x70 [ 56.230892][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.232799][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 56.234371][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 56.236075][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 56.237698][ C0] handle_softirqs+0x1e6/0x9d0 [ 56.239307][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 56.240985][ C0] ? _raw_spin_unlock+0x28/0x50 [ 56.242565][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 56.244387][ C0] __irq_exit_rcu+0x194/0x210 [ 56.245960][ C0] irq_exit_rcu+0x9/0x30 [ 56.247380][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 56.249286][ C0] [ 56.250264][ C0] [ 56.251240][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 56.253113][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 56.255142][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 c5 15 f6 48 89 df e8 0e 1c 16 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 22 05 f6 65 48 83 3d e4 f4 ba 08 00 74 16 5b [ 56.261338][ C0] RSP: 0018:ffffc9000613e880 EFLAGS: 00000246 [ 56.263293][ C0] RAX: 0000000000000006 RBX: ffff88801da94000 RCX: 0000000000000040 [ 56.265983][ C0] RDX: 0000000000000001 RSI: ffffffff8e3f0890 RDI: ffffffff8c622580 [ 56.268638][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 56.271193][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 56.273900][ C0] R13: ffff888021822478 R14: 0000000000000000 R15: ffff888021822400 [ 56.276615][ C0] dummy_urb_enqueue+0x56c/0x880 [ 56.278286][ C0] ? __device_attach_driver+0xf1/0x320 [ 56.280009][ C0] usb_hcd_submit_urb+0x268/0x2150 [ 56.281673][ C0] ? bus_for_each_drv+0x159/0x1e0 [ 56.283439][ C0] ? __device_attach+0x1e4/0x4d0 [ 56.285592][ C0] ? device_initial_probe+0xaf/0xd0 [ 56.287582][ C0] ? bus_probe_device+0x64/0x160 [ 56.289627][ C0] ? device_add+0x121d/0x1970 [ 56.291728][ C0] ? usb_new_device.part.0+0xcc2/0x1686 [ 56.293930][ C0] ? hub_event.cold+0x1e3/0xe90 [ 56.295564][ C0] usb_submit_urb+0x827/0x19b0 [ 56.297091][ C0] ? __init_swait_queue_head+0xca/0x150 [ 56.299018][ C0] usb_start_wait_urb+0x10e/0x580 [ 56.300718][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 56.302554][ C0] ? __asan_memset+0x23/0x50 [ 56.304163][ C0] usb_control_msg+0x328/0x4b0 [ 56.305775][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 56.307500][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.309304][ C0] usb_control_msg_send+0xca/0x130 [ 56.311407][ C0] usb_set_interface+0x9b6/0xe20 [ 56.313472][ C0] snd_usb_midi_v2_create+0x629/0x4070 [ 56.315289][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 56.317063][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 56.319144][ C0] ? snd_info_create_entry+0x6f/0x400 [ 56.320979][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 56.322734][ C0] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 56.324883][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 56.326802][ C0] ? snd_info_create_entry+0x314/0x400 [ 56.328702][ C0] ? usb_ifnum_to_if+0x16f/0x1d0 [ 56.330320][ C0] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 56.332201][ C0] usb_audio_probe+0xf0b/0x3b10 [ 56.333748][ C0] ? __pfx_usb_audio_probe+0x10/0x10 [ 56.335474][ C0] ? do_raw_spin_lock+0x128/0x260 [ 56.337079][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 56.338881][ C0] ? mark_held_locks+0x40/0x70 [ 56.340419][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 56.342248][ C0] ? find_held_lock+0x2b/0x80 [ 56.344013][ C0] ? mark_held_locks+0x40/0x70 [ 56.345812][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.347995][ C0] usb_probe_interface+0x386/0x9b0 [ 56.349882][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 56.352057][ C0] ? kernfs_put+0x3f/0x60 [ 56.353826][ C0] ? sysfs_create_link+0x68/0xc0 [ 56.355740][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 56.357506][ C0] really_probe+0x241/0xa60 [ 56.359102][ C0] __driver_probe_device+0x210/0x460 [ 56.360764][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.362590][ C0] driver_probe_device+0x4a/0x140 [ 56.364180][ C0] __device_attach_driver+0x1df/0x320 [ 56.365947][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 56.367900][ C0] bus_for_each_drv+0x159/0x1e0 [ 56.369530][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 56.371308][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.373053][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 56.374920][ C0] __device_attach+0x1e4/0x4d0 [ 56.376449][ C0] ? __pfx___device_attach+0x10/0x10 [ 56.378115][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 56.379861][ C0] device_initial_probe+0xaf/0xd0 [ 56.381457][ C0] bus_probe_device+0x64/0x160 [ 56.382981][ C0] device_add+0x121d/0x1970 [ 56.384470][ C0] ? __pfx_device_add+0x10/0x10 [ 56.386163][ C0] ? mark_held_locks+0x40/0x70 [ 56.387853][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.389793][ C0] usb_set_configuration+0xd97/0x1c60 [ 56.391520][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 56.393433][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 56.395143][ C0] usb_probe_device+0xef/0x400 [ 56.396727][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 56.398585][ C0] really_probe+0x241/0xa60 [ 56.400124][ C0] __driver_probe_device+0x210/0x460 [ 56.402001][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 56.404054][ C0] driver_probe_device+0x4a/0x140 [ 56.405805][ C0] __device_attach_driver+0x1df/0x320 [ 56.407501][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 56.409384][ C0] bus_for_each_drv+0x159/0x1e0 [ 56.410933][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 56.412640][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.414316][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 56.416242][ C0] __device_attach+0x1e4/0x4d0 [ 56.417820][ C0] ? __pfx___device_attach+0x10/0x10 [ 56.419538][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 56.421176][ C0] device_initial_probe+0xaf/0xd0 [ 56.422779][ C0] bus_probe_device+0x64/0x160 [ 56.424306][ C0] device_add+0x121d/0x1970 [ 56.425782][ C0] ? __pfx_device_add+0x10/0x10 [ 56.427390][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 56.429284][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 56.431001][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 56.432868][ C0] ? mark_held_locks+0x40/0x70 [ 56.434571][ C0] hub_event.cold+0x1e3/0xe90 [ 56.436232][ C0] ? __pfx_hub_event+0x10/0x10 [ 56.437757][ C0] ? percpu_rwsem_wake_function+0x2b0/0x4a0 [ 56.439809][ C0] ? lock_acquire+0x1d1/0x380 [ 56.441355][ C0] ? process_one_work+0xa2c/0x1b10 [ 56.443023][ C0] ? process_one_work+0x906/0x1b10 [ 56.444698][ C0] ? process_one_work+0x906/0x1b10 [ 56.446372][ C0] process_one_work+0xac7/0x1b10 [ 56.448130][ C0] ? __pfx_process_one_work+0x10/0x10 [ 56.449843][ C0] ? lock_acquire+0x1d1/0x380 [ 56.451394][ C0] ? __pfx_hub_event+0x10/0x10 [ 56.452974][ C0] worker_thread+0x5ef/0xe50 [ 56.454533][ C0] ? __pfx_worker_thread+0x10/0x10 [ 56.456297][ C0] ? kthread+0x13a/0x450 [ 56.457718][ C0] ? __pfx_worker_thread+0x10/0x10 [ 56.459778][ C0] kthread+0x373/0x450 [ 56.461075][ C0] ? __pfx_kthread+0x10/0x10 [ 56.462533][ C0] ret_from_fork+0x730/0xd60 [ 56.464253][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 56.465985][ C0] ? __switch_to+0x800/0x10f0 [ 56.467488][ C0] ? __pfx_kthread+0x10/0x10 [ 56.469156][ C0] ret_from_fork_asm+0x1a/0x30 [ 56.470831][ C0] [ 56.471929][ C0] Modules linked in: [ 56.473297][ C0] ---[ end trace 0000000000000000 ]--- [ 56.475257][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 56.475273][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 56.475283][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010002 [ 56.475292][ C0] RAX: dffffc0000000000 RBX: ffff8880133d8000 RCX: 0000000000000103 [ 56.475299][ C0] RDX: 00000000000000e6 RSI: ffffffff87f39296 RDI: ffff8880133d8128 [ 56.475305][ C0] RBP: ffff8880133d8128 R08: 0000000000000004 R09: 0000000000000020 [ 56.475311][ C0] R10: 0000000000000020 R11: 000000000000760b R12: ffff8880133d80f0 [ 56.475318][ C0] R13: ffff8880133d8128 R14: ffff8880133d8740 R15: 0000000000000001 [ 56.475324][ C0] FS: 0000000000000000(0000) GS:ffff888096963000(0000) knlGS:0000000000000000 [ 56.475346][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.475360][ C0] CR2: 00000000f721ea77 CR3: 00000000614bd000 CR4: 0000000000352ef0 [ 56.475369][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 56.508940][ C0] Kernel Offset: disabled [ 56.510297][ C0] Rebooting in 86400 seconds..