last executing test programs: 11.170158317s ago: executing program 2 (id=874): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, 0x0, 0xfffffffe, 0x4, 0x401, 0x7, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/image_size', 0x200080, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000003c0), 0x6, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket$inet(0x2, 0x4000000000000001, 0x0) getpid() r2 = syz_usbip_server_init(0x1) write$usbip_server(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d3, &(0x7f0000000100)) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000440)={0x7, "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"}) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r6], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x8000) 8.764062364s ago: executing program 2 (id=882): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdp', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 8.49768886s ago: executing program 2 (id=887): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x0, 0xfefffffc, 0x6a39}) r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0xd, 0x6) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.922455901s ago: executing program 0 (id=894): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) 5.837997903s ago: executing program 0 (id=896): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdp', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 5.762046744s ago: executing program 0 (id=897): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x1407, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x8008) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, '/'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0x7, @mcast1}]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='sockfs\x00', 0x203100d, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0x0) sendfile(r8, r8, 0x0, 0x6) accept4(r7, 0x0, 0x0, 0x0) r9 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r9, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) 4.761269448s ago: executing program 2 (id=901): r0 = syz_open_dev$usbmon(0x0, 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={0x0, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) syz_open_dev$mouse(0x0, 0x0, 0x2042) mq_open(&(0x7f0000000340)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bL\x10\x00\x00\x00\x04\x00\x00\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdc\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x1d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x40, 0xa4, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x8000000000000001}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0xc, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 4.753670118s ago: executing program 0 (id=902): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x4000040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x8000000000, 0x800000, 0x0, 0xfffffffffffffff8}, {0x0, 0xacb0, 0x400000000, 0xffffffffffffffff}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3.597995686s ago: executing program 2 (id=906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='2', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r7, &(0x7f0000000440)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000940)='dummy_udc.0', 0xb) 3.539962717s ago: executing program 0 (id=907): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004600)={0x10, 0x1404, 0x1, 0x70bd29, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x48081}, 0x4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r1, r0, 0x1, [0x0, 0xf7df]}, {r1, r2, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x2, 0x2, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x800, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{@gid}]}) 3.470048118s ago: executing program 1 (id=908): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x82d81, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x100, 0x0, 0x20000006, 0x7, 0xc27}, 0x7, 0xe8}, [{0x2, 0x9, 0x7, 0x4, 0x5, 0x8}, {0x200, 0x57, 0xa, 0x6, 0x977, 0xfffffff7}, {0x705, 0x9, 0x51, 0x7, 0x1, 0xa}, {0x80000001, 0xc, 0x80, 0x10, 0xbc2, 0x2}, {0xff, 0xdcd3, 0x3ff, 0x6, 0x80000000, 0x6}, {0x10001, 0x7, 0x0, 0x800, 0x81, 0x4}, {0xfffffff2, 0x8, 0xfffffff7, 0x2, 0x85, 0x3}, {0xffff, 0x4, 0x7fff, 0xd54a, 0x1, 0x1}, {0x3, 0x3, 0xfffffffd, 0x100, 0x7, 0x80000001}, {0x6b3, 0x4, 0x9d, 0x3, 0x8000, 0x7ff}, {0xffffffaa, 0x4, 0x4, 0xba3, 0x14732273, 0xc5}, {0x7, 0x5, 0x80000000, 0x401, 0x1, 0x7}, {0x80000001, 0x3, 0x5, 0x9, 0xc6e5, 0xfffffffb}, {0xfffffffa, 0x2, 0x5c7, 0x7, 0x1, 0x2}, {0x8, 0x3, 0x9a5, 0x34d57ea2, 0xc, 0x8}, {0x0, 0x665b, 0x0, 0x1, 0x55, 0x10}, {0x2, 0xca57, 0x7, 0xae95, 0x7, 0x2}, {0xffffffff, 0x200, 0x5, 0x5, 0x4, 0xd}, {0x3, 0x9, 0x7, 0x5, 0x1ff, 0x10000}, {0x9, 0xffffffff, 0xfffe0000, 0x100, 0xb, 0x1}, {0x8000, 0x0, 0x3, 0x8bc, 0x4325, 0x2}, {0x2, 0x4, 0x6, 0x3, 0xb3, 0xfffffb60}, {0x2, 0x1, 0x605a, 0x5, 0x800, 0x5}, {0x3, 0x23e000, 0xfffffffd, 0x0, 0x4, 0x3ff}, {0x2, 0x7fffffff, 0x7, 0x5, 0x1, 0x9}, {0x7ff, 0x9, 0x5, 0x1, 0xd4, 0x1}, {0x1000, 0x7, 0xfffffb9c, 0x8000, 0x4, 0xf}, {0x3, 0x9, 0x696, 0x8, 0x6, 0x125d}, {0x1, 0x10, 0x7ff, 0x4, 0x9, 0x8f74}, {0x5, 0x0, 0x10001, 0x2, 0x69, 0x9}, {0x6, 0x0, 0xe, 0x1000, 0x0, 0xe6}, {0x53d, 0x5, 0x1, 0x4, 0x200, 0xfffffffd}, {0x7f, 0x9, 0x1, 0x800, 0x9, 0x40}, {0x2, 0xb, 0x4, 0xf, 0x8, 0x2}, {0xffffffff, 0x30, 0xe, 0x5, 0x0, 0x7}, {0x6c, 0x5, 0x0, 0x1, 0x2}, {0xb, 0x6, 0x7, 0x2, 0x8}, {0xfff, 0x9, 0x0, 0xbb, 0x3, 0xfc38}, {0x3, 0x9, 0x2bc, 0x8001, 0x4, 0xc42d}, {0xac4, 0x4, 0x6, 0x6, 0x7, 0x8}, {0x5, 0x9, 0x8, 0x4, 0x8001, 0x83a6}, {0xcc, 0x3, 0xfffffeb7, 0x4, 0x4c4, 0x8001}, {0x3, 0x123ceeba, 0x8, 0x100, 0x1, 0x6}, {0x7a, 0x6, 0x5, 0x6, 0x1, 0x40}, {0x7fffffff, 0x34, 0x4, 0x5, 0x1, 0x4}, {0x8, 0xbd, 0x0, 0x6, 0x8}, {0x3, 0x8, 0x8, 0x8, 0xfff, 0x4}, {0x1, 0xfffff800, 0x8, 0x6, 0x75b, 0x3}, {0x3, 0x5, 0xd85, 0x29, 0x1, 0x6}, {0xffffffff, 0xfffffff7, 0x7ff, 0x8001, 0x2, 0x8}, {0x1, 0x9, 0x4, 0xc2b3, 0x4, 0x9f1}, {0xff, 0x4, 0x9, 0x0, 0x6, 0x6}, {0x2, 0x0, 0x6, 0x200, 0x85d0, 0x74}, {0xffffff90, 0x1ff, 0x5, 0x7fffffff, 0x2, 0xaad0}, {0x5, 0x0, 0x0, 0xffff, 0x1, 0x9}, {0x7, 0x40, 0xa, 0x800, 0x400}, {0x5, 0xffffffff, 0xffff0001, 0x10000, 0x0, 0xd01e}, {0x9, 0xffff37fd, 0x2efe, 0xfffffffa, 0x1ff, 0x1}, {0x7, 0x8, 0x4, 0x8001, 0x3}, {0xf, 0xad8e, 0x8fa, 0x9, 0xfffffff9, 0x8}, {0xe, 0xc70, 0xfff, 0xfffffff8, 0x2}, {0x4, 0xd, 0x0, 0x7, 0x727c, 0x8}, {0x2, 0x5, 0x3, 0x8, 0x1, 0x2}, {0x2, 0x64a, 0x6, 0x2cc952de, 0x1, 0x4}, {0x1ffe00, 0xf296, 0x8, 0x0, 0x81, 0xb5}, {0x400, 0x1ff, 0x2, 0xe4, 0x4, 0xfce00}, {0x4e, 0x9a, 0x1000, 0x8, 0x1ff, 0x9}, {0x4, 0x5, 0x7, 0x9a, 0x6, 0xab7}, {0x8, 0x6, 0xfffff000, 0x2, 0x1, 0x8000}, {0x8000, 0x5, 0x0, 0x781d, 0x10001, 0x7}, {0x10, 0x2, 0xfff, 0x81, 0x51d, 0x8}, {0x7, 0x6, 0x2, 0x6, 0x4, 0x990}, {0x188c1852, 0x8, 0xa, 0x6, 0xe6a8, 0xc}, {0x20000, 0x959, 0x54f6, 0xb4, 0x85, 0x3}, {0x2, 0x38000, 0x9, 0xcb2, 0x7f, 0x4}, {0x6, 0x7fffffff, 0xe, 0xff, 0x7, 0x2}, {0x4, 0x9, 0x6, 0x6, 0x9, 0x2}, {0x5, 0x8000, 0xe, 0x4, 0x7, 0x1}, {0x3, 0xffffff81, 0x2, 0xa3, 0x2, 0x3}, {0x2, 0x1, 0x7, 0x8, 0x5, 0x6}, {0x40a2, 0x5, 0x1, 0x0, 0x9, 0x4a}, {0x2, 0x9, 0x1, 0x6c4, 0x3, 0x400}, {0x7f, 0xc8, 0x0, 0x7, 0x2, 0xaf5}, {0x7ff, 0x7, 0x7fffffff, 0x0, 0x80, 0x390}, {0x1, 0x3, 0xb5a4, 0x10001, 0x10000, 0x9}, {0x2, 0x9ff0, 0x7fff, 0x5, 0x4, 0x6}, {0x2, 0xc, 0x5, 0x3, 0x1, 0x8}, {0xccc, 0x17b8, 0x1, 0x2, 0x0, 0xb8ba}, {0x9, 0x8001, 0x0, 0x3, 0x969f5792, 0x7}, {0xb, 0x9, 0x4, 0x9, 0x0, 0x77}, {0x2, 0xafc, 0x4, 0x3, 0x9, 0x1}, {0x7ff, 0x9, 0xfffffff8, 0x2, 0x8, 0x8}, {0x5, 0x4, 0x1, 0x7fff, 0xd, 0x3}, {0x7, 0x80000001, 0xffff, 0x0, 0x0, 0x4}, {0x3, 0xc, 0xbd, 0x8, 0x0, 0x4}, {0xfffff801, 0x72c, 0x4, 0x7, 0x3e8c, 0x3}, {0x9, 0x5, 0x40, 0xe, 0x2bc1, 0xffffff81}, {0x80000001, 0xa46, 0x0, 0x1000, 0x4, 0x7}, {0x1, 0x2, 0xffffffff, 0x2, 0x3, 0x8000000}, {0x400, 0x2, 0x101, 0x576, 0x401, 0x7fffffff}, {0x75cb, 0x3, 0x2, 0x3, 0xc, 0xd}, {0xcb6, 0x9, 0x6, 0x9, 0xab3, 0xffff}, {0xc, 0x3, 0x6, 0x4, 0xffff, 0xffffffff}, {0x8001, 0x0, 0x2fa4, 0x1, 0x4, 0x3ff}, {0xe380, 0x4, 0x81, 0x5, 0xf, 0xffffffff}, {0x4, 0x2887eff4, 0x6, 0x5, 0x7ff, 0x5}, {0x200, 0x6, 0x0, 0x2, 0x800, 0xfff}, {0xb6, 0x6, 0x7fffffff, 0x53611e27, 0x9, 0x1}, {0x2, 0x8000, 0x2, 0x8, 0x5, 0x6}, {0xa, 0x5, 0x6, 0x3, 0xa4, 0x5}, {0xfffffffb, 0x6, 0x4054, 0x4, 0x6, 0xd9}, {0xfffffff9, 0x7, 0x0, 0xbcf, 0x5, 0x9}, {0x3, 0xda5, 0x7, 0x1, 0x4, 0x5}, {0x400, 0x871, 0x8, 0xc09, 0x1, 0x88d}, {0x2e, 0x80, 0xffff, 0x59a, 0x10000, 0x41c165e}, {0x3, 0x4, 0x1, 0x9, 0x0, 0x7}, {0x1, 0x80, 0xef86, 0x5, 0x10000000, 0x80000000}, {0x9, 0xac2d, 0x9, 0xa, 0x5, 0x8}, {0x59, 0x6, 0xfffffffb, 0x7, 0x48, 0xd}, {0x5, 0x10, 0xf85, 0x7, 0x9, 0x8}, {0x6, 0x7, 0x7, 0x2, 0x8, 0x101}, {0x3030, 0x2, 0xdd0, 0x1, 0x9, 0xfffffffe}, {0x2, 0x7, 0x1000, 0x9, 0x1ff, 0x5}, {0x0, 0xe06a, 0x3, 0x8, 0xe, 0x97fb}, {0x7, 0x9, 0x1, 0xfffffff7, 0x2, 0xd9b}, {0x7, 0x0, 0x2, 0x9, 0x2, 0x6}, {0x7fff, 0x104, 0x200, 0x5e, 0x4d07, 0x7f}, {0xfffffff2, 0xee3, 0x0, 0x6, 0xfff, 0x2}], [{0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x4}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x3}, {}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x4}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0xa19a2f37fc43f3d8}, {0x1, 0x1}, {0x4}, {}, {0x3}, {0x4}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x36d6435f70ccebc3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x6}, {}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x0, 0x2}, {0x1, 0x1}, {0x4}, {0x1}, {}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.313357832s ago: executing program 1 (id=909): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3.227053484s ago: executing program 1 (id=910): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdp', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 3.104383687s ago: executing program 3 (id=911): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/image_size', 0x200080, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x110000000097a9, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0xcb9, 0xfffffffe, 0x7, 0x10001, 0xff000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 3.068665578s ago: executing program 1 (id=912): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone(0x89e6600, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)="d642f8a394297f4fb5c665b5e0c3eb8e7e5f1d4ec4d53d04df3bcce453312c61f15edb96b71e32d418c026caa065d7fdf4c15f8b710e1cc06fd4") openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b4d, &(0x7f00000000c0)) 1.966167364s ago: executing program 1 (id=913): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) 1.885685116s ago: executing program 1 (id=914): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, 0x0, 0xfffffffe, 0x4, 0x401, 0x7, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x505043, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000003c0), 0x6, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket$inet(0x2, 0x4000000000000001, 0x0) getpid() r2 = syz_usbip_server_init(0x1) write$usbip_server(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d3, &(0x7f0000000100)) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000440)={0x7, "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"}) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r6], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x8000) 1.733305179s ago: executing program 3 (id=915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000000) 1.606027393s ago: executing program 3 (id=916): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x401, 0x0, 0x8000000000000000, 0x2, 0x0, 0x0, 0x1, 0x65c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0xa, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1\x00', 0x1) 1.330949669s ago: executing program 3 (id=917): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[]) read$FUSE(r0, &(0x7f0000008880)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r6, 0x2000000) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x1f, 0x0, 0x1000000}) 1.078189755s ago: executing program 0 (id=918): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x1407, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x8008) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, '/'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0x7, @mcast1}]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='sockfs\x00', 0x203100d, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xda90) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0x0) sendfile(r7, r7, 0x0, 0x6) accept4(r6, 0x0, 0x0, 0x0) r8 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r8, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) 190.037446ms ago: executing program 3 (id=919): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000240)={0x3, 0x0, &(0x7f00000000c0), 0x0}, 0x20) r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000001c0)={{r4, r3, 0x1, [0x0, 0xf7df]}, {r4, r5, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x48, 0x1402, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) write$sequencer(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="810100"], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r9 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000040)=0x800, 0x4) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r12, r12, 0x0, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{@gid}]}) 164.221656ms ago: executing program 2 (id=920): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdp', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 0s ago: executing program 3 (id=921): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone(0x89e6600, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)="d642f8a394297f4fb5c665b5e0c3eb8e7e5f1d4ec4d53d04df3bcce453312c61f15edb96b71e32d418c026caa065d7fdf4c15f8b710e1cc06fd4") openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b4d, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 82.924282][ T5765] cgroup: Unknown subsys name 'net' [ 83.069944][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.741091][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.377631][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.386582][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.398681][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.406983][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.415211][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.422883][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.447194][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.460907][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.471444][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.480209][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.490771][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.498980][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.507407][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.516594][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.525208][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.533945][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.542301][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.549839][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.633424][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.646889][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.655422][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.687104][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.695046][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.703080][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.072354][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 87.136264][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 87.349174][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 87.365454][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.375593][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.384603][ T5780] bridge_slave_0: entered allmulticast mode [ 87.392370][ T5780] bridge_slave_0: entered promiscuous mode [ 87.402839][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.410119][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.417476][ T5780] bridge_slave_1: entered allmulticast mode [ 87.425060][ T5780] bridge_slave_1: entered promiscuous mode [ 87.466234][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 87.527348][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.534656][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.542030][ T5777] bridge_slave_0: entered allmulticast mode [ 87.549507][ T5777] bridge_slave_0: entered promiscuous mode [ 87.599187][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.608815][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.617270][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.627100][ T5777] bridge_slave_1: entered allmulticast mode [ 87.636850][ T5777] bridge_slave_1: entered promiscuous mode [ 87.665014][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.735139][ T5780] team0: Port device team_slave_0 added [ 87.767810][ T5780] team0: Port device team_slave_1 added [ 87.812187][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.819505][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.827188][ T5781] bridge_slave_0: entered allmulticast mode [ 87.835251][ T5781] bridge_slave_0: entered promiscuous mode [ 87.858003][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.876980][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.884918][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.892398][ T5781] bridge_slave_1: entered allmulticast mode [ 87.899922][ T5781] bridge_slave_1: entered promiscuous mode [ 87.941966][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.972293][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.982834][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.989829][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.016166][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.043169][ T5777] team0: Port device team_slave_0 added [ 88.062136][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.090988][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.098005][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.124333][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.144258][ T5777] team0: Port device team_slave_1 added [ 88.185486][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.192747][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.219033][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.245494][ T5781] team0: Port device team_slave_0 added [ 88.255743][ T5781] team0: Port device team_slave_1 added [ 88.262294][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.269620][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.280024][ T5786] bridge_slave_0: entered allmulticast mode [ 88.287423][ T5786] bridge_slave_0: entered promiscuous mode [ 88.298943][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.306013][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.332009][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.375227][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.382737][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.389978][ T5786] bridge_slave_1: entered allmulticast mode [ 88.397405][ T5786] bridge_slave_1: entered promiscuous mode [ 88.467252][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.476951][ T5084] Bluetooth: hci0: command tx timeout [ 88.485921][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.501856][ T5780] hsr_slave_0: entered promiscuous mode [ 88.509223][ T5780] hsr_slave_1: entered promiscuous mode [ 88.517395][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.524989][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.552794][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.592315][ T5777] hsr_slave_0: entered promiscuous mode [ 88.598815][ T5777] hsr_slave_1: entered promiscuous mode [ 88.606025][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.614070][ T5777] Cannot create hsr debugfs directory [ 88.634037][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.640937][ T5084] Bluetooth: hci1: command tx timeout [ 88.641241][ T5084] Bluetooth: hci2: command tx timeout [ 88.653460][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.679807][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.733926][ T5786] team0: Port device team_slave_0 added [ 88.771931][ T5786] team0: Port device team_slave_1 added [ 88.790780][ T5084] Bluetooth: hci3: command tx timeout [ 88.851965][ T5781] hsr_slave_0: entered promiscuous mode [ 88.858749][ T5781] hsr_slave_1: entered promiscuous mode [ 88.865448][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.873619][ T5781] Cannot create hsr debugfs directory [ 88.893151][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.900159][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.926512][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.963938][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.971070][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.997399][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.200277][ T5786] hsr_slave_0: entered promiscuous mode [ 89.207394][ T5786] hsr_slave_1: entered promiscuous mode [ 89.214350][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.222130][ T5786] Cannot create hsr debugfs directory [ 89.386844][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.414796][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.430313][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.475699][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.560238][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.581441][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.595516][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.622095][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.691317][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.737871][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.764742][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.782983][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.797633][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.807906][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.818493][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.837082][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.993782][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.037343][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.074880][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.099316][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.106696][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.137119][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.144682][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.200350][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.215641][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.239409][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.246715][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.264175][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.304019][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.311441][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.348347][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.394562][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.401906][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.420085][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.436404][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.443700][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.495520][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.502805][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.519002][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.526265][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.551391][ T5084] Bluetooth: hci0: command tx timeout [ 90.711618][ T5084] Bluetooth: hci2: command tx timeout [ 90.717118][ T5084] Bluetooth: hci1: command tx timeout [ 90.857419][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.873631][ T5084] Bluetooth: hci3: command tx timeout [ 90.920215][ T5777] veth0_vlan: entered promiscuous mode [ 90.944948][ T5777] veth1_vlan: entered promiscuous mode [ 91.041826][ T5777] veth0_macvtap: entered promiscuous mode [ 91.074993][ T5777] veth1_macvtap: entered promiscuous mode [ 91.157028][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.213828][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.257182][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.278159][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.288027][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.298468][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.307747][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.399141][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.425973][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.480771][ T5781] veth0_vlan: entered promiscuous mode [ 91.499068][ T5781] veth1_vlan: entered promiscuous mode [ 91.587575][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.609196][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.659867][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.674574][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.709342][ T5786] veth0_vlan: entered promiscuous mode [ 91.727144][ T5780] veth0_vlan: entered promiscuous mode [ 91.743360][ T5781] veth0_macvtap: entered promiscuous mode [ 91.780100][ T5781] veth1_macvtap: entered promiscuous mode [ 91.793934][ T5780] veth1_vlan: entered promiscuous mode [ 91.814163][ T5786] veth1_vlan: entered promiscuous mode [ 91.887347][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.899072][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.918570][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.984284][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.998536][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.012518][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.095729][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.123459][ T5841] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.156856][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.197265][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.238828][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.415429][ T5780] veth0_macvtap: entered promiscuous mode [ 92.608598][ T5786] veth0_macvtap: entered promiscuous mode [ 92.630690][ T5084] Bluetooth: hci0: command tx timeout [ 92.730160][ T5780] veth1_macvtap: entered promiscuous mode [ 92.791068][ T5084] Bluetooth: hci1: command tx timeout [ 92.796729][ T51] Bluetooth: hci2: command tx timeout [ 92.950858][ T5084] Bluetooth: hci3: command tx timeout [ 93.527196][ T174] cfg80211: failed to load regulatory.db [ 93.555350][ T5786] veth1_macvtap: entered promiscuous mode [ 93.666941][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.684188][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.697759][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.710666][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.723911][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.771980][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.777682][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.779886][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.795386][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.811718][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.826649][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.841618][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.849542][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.861144][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.890961][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.914246][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.926577][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.937355][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.950656][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.987989][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.998232][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.007464][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.017042][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.042404][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.072508][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.084718][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.096587][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.106791][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.118051][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.130235][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.305053][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.335940][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.370075][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.396748][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.589291][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.655874][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.796293][ T5084] Bluetooth: hci0: command tx timeout [ 94.991296][ T5084] Bluetooth: hci1: command tx timeout [ 94.996982][ T5084] Bluetooth: hci2: command tx timeout [ 95.036997][ T51] Bluetooth: hci3: command tx timeout [ 95.429671][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.444249][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.513048][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.538246][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.710092][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.740687][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.768175][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.821215][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.112764][ T5866] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 96.119766][ T5866] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.163780][ T5866] vhci_hcd vhci_hcd.0: Device attached [ 96.215105][ T5866] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 96.322873][ T5866] team0: Port device dummy0 added [ 96.363467][ T5871] vhci_hcd: connection closed [ 96.369819][ T3510] vhci_hcd: stop threads [ 96.420541][ T3510] vhci_hcd: release socket [ 96.426222][ T3510] vhci_hcd: disconnect device [ 96.814951][ T5893] syzkaller0: entered promiscuous mode [ 96.820513][ T5893] syzkaller0: entered allmulticast mode [ 96.916524][ T5893] tipc: Started in network mode [ 96.936029][ T5893] tipc: Node identity 3edf509d5d0a, cluster identity 4711 [ 96.952877][ T5893] tipc: Enabled bearer , priority 0 [ 96.980518][ T5866] syz.1.9 (5866) used greatest stack depth: 20456 bytes left [ 96.994669][ T5891] tipc: Resetting bearer [ 97.076218][ T5891] tipc: Disabling bearer [ 97.145925][ T5899] syzkaller0: entered promiscuous mode [ 97.166126][ T5899] syzkaller0: entered allmulticast mode [ 97.196002][ T5899] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14'. [ 101.386680][ T5951] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 101.393379][ T5951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.481923][ T5951] vhci_hcd vhci_hcd.0: Device attached [ 101.508714][ T5950] TCP: TCP_TX_DELAY enabled [ 101.657863][ T5951] batman_adv: batadv0: Adding interface: dummy0 [ 101.698314][ T5951] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.764135][ T790] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 101.784506][ T5951] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 101.817175][ T5952] vhci_hcd: connection reset by peer [ 101.843960][ T64] vhci_hcd: stop threads [ 101.849483][ T64] vhci_hcd: release socket [ 101.862962][ T64] vhci_hcd: disconnect device [ 102.627269][ T5767] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.845880][ T5767] usb 1-1: Using ep0 maxpacket: 32 [ 104.406879][ T5767] usb 1-1: config 0 has no interfaces? [ 104.424388][ T5767] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 104.440651][ T5767] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 104.449135][ T5767] usb 1-1: Product: syz [ 104.453537][ T5767] usb 1-1: Manufacturer: syz [ 104.458199][ T5767] usb 1-1: SerialNumber: syz [ 104.469521][ T5767] usb 1-1: config 0 descriptor?? [ 106.261157][ T27] usb 1-1: USB disconnect, device number 2 [ 106.766594][ T6010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.46'. [ 106.872517][ T790] vhci_hcd: vhci_device speed not set [ 108.492718][ T6036] syzkaller0: entered promiscuous mode [ 108.518807][ T6036] syzkaller0: entered allmulticast mode [ 108.648019][ T6034] Invalid ELF header magic: != ELF [ 109.303582][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.65'. [ 109.501994][ T6058] batman_adv: batadv0: Removing interface: dummy0 [ 109.753850][ T6068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.921085][ T6068] batadv_slave_0: entered promiscuous mode [ 110.050146][ T6068] batadv_slave_0: entered allmulticast mode [ 110.393762][ T6075] syzkaller0: entered promiscuous mode [ 110.399329][ T6075] syzkaller0: entered allmulticast mode [ 110.420548][ T6073] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 110.427245][ T6073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.474259][ T6073] vhci_hcd vhci_hcd.0: Device attached [ 110.646794][ T6079] vhci_hcd: connection closed [ 110.657285][ T3510] vhci_hcd: stop threads [ 110.697955][ T3510] vhci_hcd: release socket [ 110.713286][ T3510] vhci_hcd: disconnect device [ 110.718503][ T6078] Invalid ELF header magic: != ELF [ 110.745151][ T27] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 110.779703][ T27] usb 33-1: enqueue for inactive port 0 [ 110.891121][ T27] vhci_hcd: vhci_device speed not set [ 112.287052][ T6110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.82'. [ 112.853066][ T6124] Invalid ELF header magic: != ELF [ 115.518780][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.527510][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.002263][ T6152] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 116.008963][ T6152] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.018990][ T6152] vhci_hcd vhci_hcd.0: Device attached [ 116.025736][ T6154] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 1 [ 116.038783][ T1328] vhci_hcd: stop threads [ 116.048872][ T1328] vhci_hcd: release socket [ 116.056830][ T1328] vhci_hcd: disconnect device [ 116.526711][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.603041][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.846317][ T6116] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.858366][ T6116] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.881294][ T6116] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.896393][ T6116] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.997985][ T6160] netlink: 44 bytes leftover after parsing attributes in process `syz.2.94'. [ 117.071725][ T6116] syz.1.83 (6116) used greatest stack depth: 20264 bytes left [ 117.465844][ T6189] program syz.2.97 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.265232][ T6188] Invalid ELF header magic: != ELF [ 124.726711][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.734791][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.006831][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.044003][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.287238][ T6206] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.303087][ T6206] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.312900][ T6206] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.322393][ T6206] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.543582][ T6219] netlink: 44 bytes leftover after parsing attributes in process `syz.1.105'. [ 125.557616][ T6247] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 125.605931][ T6247] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 128.838038][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.845803][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.494427][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.525269][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.912675][ T6286] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.929852][ T6286] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.939241][ T6286] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.948667][ T6286] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.183178][ T6300] netlink: 44 bytes leftover after parsing attributes in process `syz.0.124'. [ 130.475863][ T6326] Zero length message leads to an empty skb [ 130.515765][ T6330] warning: `syz.0.135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.358614][ T6336] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 132.747362][ T6343] binder: 6341:6343 ioctl 400c620e 0 returned -14 [ 133.125465][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.135969][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.486266][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 134.579327][ T6365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.645739][ T6365] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 135.654353][ T6365] bond1: entered promiscuous mode [ 135.691085][ T6365] erspan0: entered promiscuous mode [ 135.710947][ T6365] bond1: entered allmulticast mode [ 135.743691][ T6365] erspan0: entered allmulticast mode [ 136.410367][ T6393] kvm: pic: level sensitive irq not supported [ 136.433636][ T6393] kvm: pic: non byte read [ 139.138502][ T6405] program syz.3.155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.172970][ T6405] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 139.602819][ T6408] tipc: Started in network mode [ 139.639776][ T6408] tipc: Node identity 8691045154ae, cluster identity 4711 [ 139.664503][ T6408] tipc: Enabled bearer , priority 0 [ 139.849506][ T6408] syzkaller0: entered promiscuous mode [ 139.916442][ T6408] syzkaller0: entered allmulticast mode [ 140.266185][ T6418] tipc: Resetting bearer [ 140.485960][ T6406] tipc: Resetting bearer [ 140.554886][ T6406] tipc: Disabling bearer [ 140.563553][ T5767] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 140.772072][ T97] device offline error, dev sda, sector 721246 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 140.782972][ T97] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90155) [ 140.795176][ T97] Buffer I/O error on device sda1, logical block 90117 [ 140.807646][ T97] device offline error, dev sda, sector 721294 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 140.818224][ T97] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90161) [ 140.830314][ T97] Buffer I/O error on device sda1, logical block 90123 [ 140.840759][ T97] device offline error, dev sda, sector 721310 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 140.851401][ T97] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90163) [ 140.864997][ T97] Buffer I/O error on device sda1, logical block 90125 [ 140.875169][ T97] Buffer I/O error on device sda1, logical block 90126 [ 140.882437][ T97] device offline error, dev sda, sector 721438 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 140.893017][ T97] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90179) [ 140.904651][ T97] Buffer I/O error on device sda1, logical block 90141 [ 140.911824][ T97] device offline error, dev sda, sector 721486 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 140.922420][ T97] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90185) [ 140.934080][ T97] Buffer I/O error on device sda1, logical block 90147 [ 140.941118][ T97] device offline error, dev sda, sector 721502 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 140.951920][ T97] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90187) [ 140.963508][ T97] Buffer I/O error on device sda1, logical block 90149 [ 140.970473][ T97] device offline error, dev sda, sector 721574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 140.981101][ T97] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90196) [ 140.992883][ T97] Buffer I/O error on device sda1, logical block 90158 [ 140.999804][ T97] Buffer I/O error on device sda1, logical block 90159 [ 141.006913][ T97] device offline error, dev sda, sector 721630 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 141.017452][ T97] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90203) [ 141.029143][ T97] Buffer I/O error on device sda1, logical block 90165 [ 141.036704][ T97] device offline error, dev sda, sector 721686 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 141.047303][ T97] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90210) [ 141.058963][ T97] device offline error, dev sda, sector 721766 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 141.069608][ T97] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90220) [ 141.144385][ T2884] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2030, error -5) [ 141.187015][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2028, error -5) [ 141.213498][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2028, error -5) [ 141.315898][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2034, error -5) [ 141.473176][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2031, error -5) [ 141.618821][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2029, error -5) [ 141.771670][ T5101] Aborting journal on device sda1-8. [ 141.799671][ T6424] Buffer I/O error on dev sda1, logical block 0, lost async page write [ 141.856934][ T55] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 141.881420][ T5101] JBD2: I/O error when updating journal superblock for sda1-8. [ 141.910495][ T6442] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.3.168: Detected aborted journal [ 141.924796][ T6424] Buffer I/O error on dev sda1, logical block 130, lost async page write [ 141.987747][ T6424] Buffer I/O error on dev sda1, logical block 64971, lost async page write [ 142.030683][ T6442] EXT4-fs (sda1): previous I/O error to superblock detected [ 142.139837][ T55] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 142.152003][ T6442] EXT4-fs (sda1): I/O error while writing superblock [ 142.224253][ T6442] EXT4-fs (sda1): Remounting filesystem read-only [ 142.871284][ T51] Bluetooth: hci1: command tx timeout [ 143.469701][ T6424] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 147.865861][ T6489] cgroup: release_agent respecified [ 148.023279][ T6493] input: syz0 as /devices/virtual/input/input5 [ 150.724150][ T9] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 152.997388][ T5767] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 153.178769][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 153.232342][ T6558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.259834][ T6567] bond2: entered promiscuous mode [ 153.271542][ T6567] bond2: entered allmulticast mode [ 153.770744][ T5767] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 153.926734][ T6586] syz.2.213[6586]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 154.810916][ T5767] usb 4-1: Using ep0 maxpacket: 32 [ 154.828360][ T5767] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 154.851507][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.380600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 155.566422][ T5767] usb 4-1: config 0 descriptor?? [ 155.687937][ T5767] as10x_usb: device has been detected [ 155.694848][ T5767] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 155.728362][ T6170] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 155.736530][ T5767] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 155.782979][ T5767] usb 4-1: loading /lib/firmware/updates/syzkaller/as102_data1_st.hex failed with error -5 [ 155.807703][ T5767] usb 4-1: loading /lib/firmware/updates/as102_data1_st.hex failed with error -5 [ 155.828114][ T5767] usb 4-1: loading /lib/firmware/syzkaller/as102_data1_st.hex failed with error -5 [ 155.842376][ T5767] usb 4-1: loading /lib/firmware/as102_data1_st.hex failed with error -5 [ 155.852341][ T5767] usb 4-1: Direct firmware load for as102_data1_st.hex failed with error -5 [ 155.861648][ T5767] usb 4-1: Falling back to sysfs fallback for: as102_data1_st.hex [ 155.992932][ T6599] netlink: 72 bytes leftover after parsing attributes in process `syz.0.216'. [ 157.358108][ T6612] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 157.454751][ T6617] netlink: 72 bytes leftover after parsing attributes in process `syz.0.223'. [ 158.652202][ T6635] tipc: Enabled bearer , priority 0 [ 158.680189][ T6635] syzkaller0: entered promiscuous mode [ 158.702574][ T6635] syzkaller0: entered allmulticast mode [ 158.741322][ T6635] tipc: Resetting bearer [ 158.760385][ T6634] tipc: Resetting bearer [ 158.842751][ T6634] tipc: Disabling bearer [ 159.627768][ T6650] netlink: 'syz.0.232': attribute type 3 has an invalid length. [ 159.644258][ T6650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.232'. [ 160.403299][ T9] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 161.381033][ T6660] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 162.767911][ T6681] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 163.797717][ T6681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.806674][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 163.834592][ T9] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 163.907048][ T6685] bond1: (slave ip6erspan0): making interface the new active one [ 163.945607][ T6685] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 164.148494][ T6697] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 164.875669][ T6701] netlink: 68 bytes leftover after parsing attributes in process `syz.1.249'. [ 165.434548][ T6714] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 166.455143][ T6170] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 167.720862][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 167.920725][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 167.940144][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 167.949927][ T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 167.959317][ T9] usb 1-1: Product: syz [ 167.964167][ T9] usb 1-1: Manufacturer: syz [ 167.968831][ T9] usb 1-1: SerialNumber: syz [ 167.981566][ T9] usb 1-1: config 0 descriptor?? [ 168.234200][ T6173] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 169.809185][ T9] usb 1-1: USB disconnect, device number 3 [ 169.879830][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.222633][ T6170] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 174.059827][ T9] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 176.245633][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 176.278155][ T9] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 176.440486][ T6842] tipc: Enabled bearer , priority 0 [ 176.449963][ T6842] syzkaller0: entered promiscuous mode [ 176.456873][ T6842] syzkaller0: entered allmulticast mode [ 176.480502][ T6842] tipc: Resetting bearer [ 176.506749][ T6841] tipc: Resetting bearer [ 176.546561][ T6841] tipc: Disabling bearer [ 177.884594][ T6859] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 178.809355][ T9] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 179.034470][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 179.386399][ T6879] ======================================================= [ 179.386399][ T6879] WARNING: The mand mount option has been deprecated and [ 179.386399][ T6879] and is ignored by this kernel. Remove the mand [ 179.386399][ T6879] option from the mount to silence this warning. [ 179.386399][ T6879] ======================================================= [ 179.421355][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.320647][ T6888] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 180.327522][ T6888] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 180.338859][ T6888] vhci_hcd vhci_hcd.0: Device attached [ 180.352516][ T6889] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 180.361273][ T12] vhci_hcd: stop threads [ 180.365876][ T12] vhci_hcd: release socket [ 180.375780][ T12] vhci_hcd: disconnect device [ 180.381405][ T6888] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 180.415450][ T6888] bond3: option mode: invalid value (19) [ 180.429373][ T6888] bond3 (unregistering): Released all slaves [ 180.547735][ T6897] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 181.985475][ T6170] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 183.222599][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 185.047639][ T6929] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 185.054320][ T6929] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.076804][ T6929] vhci_hcd vhci_hcd.0: Device attached [ 185.140123][ T6929] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 185.252696][ T6929] bond2: option mode: invalid value (19) [ 185.299019][ T6929] bond2 (unregistering): Released all slaves [ 185.372710][ T9] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 185.387602][ T6933] team0: Port device dummy0 removed [ 185.426560][ T6939] vhci_hcd: connection reset by peer [ 185.435809][ T1328] vhci_hcd: stop threads [ 185.444402][ T1328] vhci_hcd: release socket [ 185.452119][ T1328] vhci_hcd: disconnect device [ 185.901631][ T6170] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 187.096421][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'. [ 188.446800][ T6966] 9pnet_virtio: no channels available for device syz [ 188.933266][ T6170] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 189.146957][ T6984] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 189.153647][ T6984] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.163237][ T6984] vhci_hcd vhci_hcd.0: Device attached [ 189.170062][ T6985] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 189.181902][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.189680][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.193791][ T12] vhci_hcd: stop threads [ 189.214948][ T12] vhci_hcd: release socket [ 189.239852][ T12] vhci_hcd: disconnect device [ 190.470762][ T9] vhci_hcd: vhci_device speed not set [ 190.564480][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.630057][ T6969] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.643332][ T6969] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.653430][ T6969] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.663229][ T6969] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.818685][ T6984] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 192.835274][ T6984] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 193.026275][ T6175] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 193.185685][ T7014] tipc: Started in network mode [ 193.195413][ T7014] tipc: Node identity 0e1cf2d04e58, cluster identity 4711 [ 193.206348][ T7014] tipc: Enabled bearer , priority 0 [ 193.216339][ T7014] syzkaller0: entered promiscuous mode [ 193.225823][ T7014] syzkaller0: entered allmulticast mode [ 193.246295][ T7014] tipc: Resetting bearer [ 193.269764][ T7011] tipc: Resetting bearer [ 193.314725][ T7011] tipc: Disabling bearer [ 194.555059][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.561562][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.650002][ T7031] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 194.656682][ T7031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.670474][ T7031] vhci_hcd vhci_hcd.0: Device attached [ 194.677546][ T7035] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 194.703285][ T12] vhci_hcd: stop threads [ 194.716214][ T12] vhci_hcd: release socket [ 194.721749][ T7031] netlink: 'syz.2.361': attribute type 1 has an invalid length. [ 194.733766][ T12] vhci_hcd: disconnect device [ 194.770766][ T6159] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 194.800660][ T7031] bond1: option mode: invalid value (18) [ 194.809847][ T7031] bond1 (unregistering): Released all slaves [ 195.144290][ T7049] netlink: 'syz.3.367': attribute type 1 has an invalid length. [ 195.249741][ T7049] bond1: option mode: invalid value (14) [ 195.258228][ T7049] bond1 (unregistering): Released all slaves [ 196.539431][ T6159] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 197.615035][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 198.198756][ T7093] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 198.205452][ T7093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.229419][ T7093] vhci_hcd vhci_hcd.0: Device attached [ 198.248050][ T7094] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 198.262803][ T7093] netlink: 'syz.2.381': attribute type 1 has an invalid length. [ 198.271719][ T3468] vhci_hcd: stop threads [ 198.276034][ T3468] vhci_hcd: release socket [ 198.299770][ T3468] vhci_hcd: disconnect device [ 198.346125][ T7093] bond1: option mode: invalid value (18) [ 198.457146][ T7093] bond1 (unregistering): Released all slaves [ 199.664278][ T7108] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 200.773908][ T7116] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 200.959501][ T7116] bond1: option mode: invalid value (13) [ 201.015316][ T7116] bond1 (unregistering): Released all slaves [ 201.375850][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 202.904413][ T7142] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 202.911105][ T7142] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.959391][ T7125] syz.0.389: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 202.965670][ T7142] vhci_hcd vhci_hcd.0: Device attached [ 202.995307][ T7125] CPU: 0 PID: 7125 Comm: syz.0.389 Not tainted syzkaller #0 [ 203.003691][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 203.013873][ T7125] Call Trace: [ 203.017215][ T7125] [ 203.020217][ T7125] dump_stack_lvl+0x18c/0x250 [ 203.024979][ T7125] ? show_regs_print_info+0x20/0x20 [ 203.030237][ T7125] ? load_image+0x420/0x420 [ 203.034815][ T7125] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 203.041311][ T7125] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 203.047866][ T7125] warn_alloc+0x246/0x340 [ 203.052240][ T7125] ? zone_watermark_ok_safe+0x230/0x230 [ 203.057827][ T7125] ? _raw_spin_unlock+0x28/0x40 [ 203.062727][ T7125] __vmalloc_node_range+0x661/0x1320 [ 203.068051][ T7125] ? __asan_memset+0x22/0x40 [ 203.072704][ T7125] ? free_vm_area+0x50/0x50 [ 203.077243][ T7125] ? rcu_is_watching+0x15/0xb0 [ 203.082046][ T7125] ? kvmalloc_node+0x70/0x180 [ 203.086757][ T7125] ? trace_kmalloc+0x1f/0xa0 [ 203.091468][ T7125] kvmalloc_node+0x13f/0x180 [ 203.096100][ T7125] ? xp_create_and_assign_umem+0x173/0xbf0 [ 203.101943][ T7125] xp_create_and_assign_umem+0x173/0xbf0 [ 203.107620][ T7125] xsk_bind+0x30f/0xc50 [ 203.111819][ T7125] __sys_bind+0x2f0/0x3f0 [ 203.116353][ T7125] ? __ia32_sys_socketpair+0xb0/0xb0 [ 203.121688][ T7125] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 203.127637][ T7125] __x64_sys_bind+0x7a/0x90 [ 203.132172][ T7125] do_syscall_64+0x55/0xb0 [ 203.136620][ T7125] ? clear_bhb_loop+0x40/0x90 [ 203.141326][ T7125] ? clear_bhb_loop+0x40/0x90 [ 203.146123][ T7125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.152064][ T7125] RIP: 0033:0x7fd34399de99 [ 203.156511][ T7125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.176171][ T7125] RSP: 002b:00007fd3417b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 203.184649][ T7125] RAX: ffffffffffffffda RBX: 00007fd343c26270 RCX: 00007fd34399de99 [ 203.192646][ T7125] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 203.200652][ T7125] RBP: 00007fd343a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 203.208731][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.216723][ T7125] R13: 00007fd343c26308 R14: 00007fd343c26270 R15: 00007fff85fff3c8 [ 203.224733][ T7125] [ 203.237067][ T7125] Mem-Info: [ 203.240289][ T7125] active_anon:6921 inactive_anon:0 isolated_anon:0 [ 203.240289][ T7125] active_file:10773 inactive_file:38631 isolated_file:0 [ 203.240289][ T7125] unevictable:0 dirty:234 writeback:0 [ 203.240289][ T7125] slab_reclaimable:10235 slab_unreclaimable:89742 [ 203.240289][ T7125] mapped:28892 shmem:1361 pagetables:598 [ 203.240289][ T7125] sec_pagetables:0 bounce:0 [ 203.240289][ T7125] kernel_misc_reclaimable:0 [ 203.240289][ T7125] free:1343950 free_pcp:13270 free_cma:0 [ 203.297712][ T7125] Node 0 active_anon:26252kB inactive_anon:0kB active_file:43092kB inactive_file:154392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115552kB dirty:936kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11532kB pagetables:2392kB sec_pagetables:0kB all_unreclaimable? no [ 203.329896][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.339136][ T7125] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 203.381085][ T7125] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.408689][ T6175] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 203.465316][ T7150] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 203.544515][ T7125] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 203.578552][ T7125] Node 0 DMA32 free:1475400kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26192kB inactive_anon:0kB active_file:43092kB inactive_file:153592kB unevictable:0kB writepending:936kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:28716kB local_pcp:20952kB free_cma:0kB [ 203.703592][ T7143] vhci_hcd: connection reset by peer [ 203.722486][ T2884] vhci_hcd: stop threads [ 203.735731][ T2884] vhci_hcd: release socket [ 203.752484][ T2884] vhci_hcd: disconnect device [ 203.795632][ T7125] lowmem_reserve[]: 0 0 0 0 0 [ 203.817309][ T7125] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:60kB inactive_anon:0kB active_file:0kB inactive_file:800kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 203.922852][ T7125] lowmem_reserve[]: 0 0 0 0 0 [ 203.942469][ T7125] Node 1 Normal free:3884816kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23808kB local_pcp:14456kB free_cma:0kB [ 204.048653][ T7125] lowmem_reserve[]: 0 0 0 0 0 [ 204.067343][ T7125] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 204.118136][ T7125] Node 0 DMA32: 414*4kB (ME) 518*8kB (UME) 192*16kB (ME) 17*32kB (UE) 235*64kB (UME) 28*128kB (M) 12*256kB (UME) 9*512kB (UME) 4*1024kB (M) 3*2048kB (ME) 349*4096kB (M) = 1475464kB [ 204.165739][ T7125] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 204.204664][ T7125] Node 1 Normal: 260*4kB (UME) 64*8kB (UME) 44*16kB (UME) 88*32kB (UME) 23*64kB (UME) 3*128kB (UE) 0*256kB 2*512kB (ME) 0*1024kB 1*2048kB (E) 946*4096kB (M) = 3884816kB [ 204.267060][ T7125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.277619][ T7125] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.287543][ T7125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.297762][ T7125] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.307631][ T7125] 50765 total pagecache pages [ 204.313009][ T7125] 0 pages in swap cache [ 204.318590][ T7125] Free swap = 124704kB [ 204.323704][ T7125] Total swap = 124996kB [ 204.417447][ T7125] 2097051 pages RAM [ 204.430709][ T7125] 0 pages HighMem/MovableOnly [ 204.435551][ T7125] 416955 pages reserved [ 204.440214][ T7125] 0 pages cma reserved [ 204.618189][ T7142] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 204.655228][ T7142] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 205.772665][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'. [ 207.216588][ T7178] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 208.550804][ T6175] vhci_hcd: vhci_device speed not set [ 209.411866][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'. [ 209.457842][ T7197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.476994][ T7197] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.487577][ T7197] bond1: (slave team0): Enslaving as an active interface with an up link [ 209.508377][ T7197] bond1: entered promiscuous mode [ 209.518678][ T7197] team0: entered promiscuous mode [ 209.525912][ T7197] team_slave_0: entered promiscuous mode [ 209.532301][ T7197] team_slave_1: entered promiscuous mode [ 209.538451][ T7197] bond1: entered allmulticast mode [ 209.543834][ T7197] team0: entered allmulticast mode [ 209.549038][ T7197] team_slave_0: entered allmulticast mode [ 209.555238][ T7197] team_slave_1: entered allmulticast mode [ 210.040611][ T6159] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 210.253015][ T6159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 210.310724][ T6159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 210.357072][ T6159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 210.418489][ T6159] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 210.438010][ T6159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.451892][ T6159] usb 1-1: Product: syz [ 210.460833][ T6159] usb 1-1: Manufacturer: syz [ 210.473150][ T6159] usb 1-1: SerialNumber: syz [ 210.493709][ T6159] usb 1-1: config 0 descriptor?? [ 210.802829][ T6159] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 211.035574][ T5814] usb 1-1: USB disconnect, device number 4 [ 211.145924][ T7232] netlink: 72 bytes leftover after parsing attributes in process `syz.1.421'. [ 211.994966][ T7220] Bluetooth: hci0: command 0x0406 tx timeout [ 212.001579][ T7220] Bluetooth: hci2: command 0x0406 tx timeout [ 212.003678][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 212.016764][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 213.233682][ T7256] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 213.240367][ T7256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.251360][ T7256] vhci_hcd vhci_hcd.0: Device attached [ 213.261914][ T7257] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 213.275197][ T2884] vhci_hcd: stop threads [ 213.284571][ T2884] vhci_hcd: release socket [ 213.289397][ T2884] vhci_hcd: disconnect device [ 213.297951][ T7256] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 213.363594][ T7256] bond3: option mode: invalid value (18) [ 213.412433][ T7256] bond3 (unregistering): Released all slaves [ 213.472022][ T7262] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 213.510397][ T7262] bond1: option mode: invalid value (12) [ 213.529741][ T7262] bond1 (unregistering): Released all slaves [ 213.856557][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'. [ 214.134746][ T7280] netlink: 72 bytes leftover after parsing attributes in process `syz.2.435'. [ 214.436871][ T7290] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 214.489874][ T7290] bond3: option mode: invalid value (11) [ 214.555499][ T7290] bond3 (unregistering): Released all slaves [ 215.130449][ T7302] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 215.137139][ T7302] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.147347][ T7302] vhci_hcd vhci_hcd.0: Device attached [ 215.157832][ T7302] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 215.185141][ T7302] bond3: option mode: invalid value (19) [ 215.192875][ T7302] bond3 (unregistering): Released all slaves [ 215.270568][ T7303] vhci_hcd: connection closed [ 215.270998][ T2884] vhci_hcd: stop threads [ 215.280208][ T2884] vhci_hcd: release socket [ 215.285864][ T2884] vhci_hcd: disconnect device [ 215.341153][ T6253] vhci_hcd: vhci_device speed not set [ 215.552101][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'. [ 215.682513][ T7319] netlink: 72 bytes leftover after parsing attributes in process `syz.2.449'. [ 216.775016][ T7329] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 216.793160][ T7327] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 216.835480][ T7329] bond1: option mode: invalid value (10) [ 216.851798][ T7329] bond1 (unregistering): Released all slaves [ 217.358585][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'. [ 217.460296][ T7349] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 217.466975][ T7349] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 217.477492][ T7349] vhci_hcd vhci_hcd.0: Device attached [ 217.488597][ T7349] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 217.515637][ T7349] bond1: option mode: invalid value (19) [ 217.523837][ T7349] bond1 (unregistering): Released all slaves [ 217.590482][ T7350] vhci_hcd: connection closed [ 217.592274][ T11] vhci_hcd: stop threads [ 217.601503][ T11] vhci_hcd: release socket [ 217.607538][ T11] vhci_hcd: disconnect device [ 218.167842][ T7359] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 218.360890][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 218.416895][ T7363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.441385][ T7363] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.470860][ T7363] bond2: (slave team0): Enslaving as an active interface with an up link [ 218.499524][ T7363] bond2: entered promiscuous mode [ 218.506762][ T7363] team0: entered promiscuous mode [ 218.514022][ T7363] team_slave_0: entered promiscuous mode [ 218.520034][ T7363] team_slave_1: entered promiscuous mode [ 218.528824][ T7363] bond2: entered allmulticast mode [ 218.535607][ T7363] team0: entered allmulticast mode [ 218.544663][ T7363] team_slave_0: entered allmulticast mode [ 218.551223][ T7363] team_slave_1: entered allmulticast mode [ 218.674424][ T7380] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 218.759314][ T7380] bond2: option mode: invalid value (9) [ 218.773142][ T7380] bond2 (unregistering): Released all slaves [ 219.275516][ T7392] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 219.282192][ T7392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 219.306988][ T7392] vhci_hcd vhci_hcd.0: Device attached [ 219.664157][ T7392] netlink: 'syz.3.473': attribute type 1 has an invalid length. [ 219.811266][ T6159] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 219.913010][ T7392] bond1: option mode: invalid value (19) [ 219.923788][ T7392] bond1 (unregistering): Released all slaves [ 220.049246][ T7393] vhci_hcd: connection reset by peer [ 220.064118][ T1328] vhci_hcd: stop threads [ 220.068447][ T1328] vhci_hcd: release socket [ 220.073261][ T1328] vhci_hcd: disconnect device [ 220.156794][ T5767] as10x_usb: unable to locate firmware file: as102_data1_st.hex [ 220.289279][ T7413] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 220.342148][ T5767] Registered device nBox DVB-T Dongle [ 220.359043][ T5767] usb 4-1: USB disconnect, device number 2 [ 220.409530][ T5767] Unregistered device nBox DVB-T Dongle [ 220.429606][ T5767] as10x_usb: device has been disconnected [ 220.792358][ T7422] tipc: Started in network mode [ 220.797528][ T7422] tipc: Node identity 3adb535b8b9a, cluster identity 4711 [ 220.805426][ T7422] tipc: Enabled bearer , priority 0 [ 220.819690][ T7422] tipc: Resetting bearer [ 220.862552][ T7421] tipc: Disabling bearer [ 220.876515][ T7425] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 220.904668][ T7425] bond2: option mode: invalid value (8) [ 220.919388][ T7425] bond2 (unregistering): Released all slaves [ 222.952326][ T7446] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 223.273976][ T7450] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 223.334331][ T7450] bond3: option mode: invalid value (17) [ 223.343565][ T7450] bond3 (unregistering): Released all slaves [ 223.452057][ T7457] tipc: Enabled bearer , priority 0 [ 223.507204][ T7457] syzkaller0: entered promiscuous mode [ 223.530756][ T7457] syzkaller0: entered allmulticast mode [ 223.568657][ T7457] tipc: Resetting bearer [ 223.590923][ T7452] tipc: Resetting bearer [ 223.665700][ T7452] tipc: Disabling bearer [ 224.960748][ T6159] vhci_hcd: vhci_device speed not set [ 226.691033][ T7488] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 226.760180][ T7488] bond1: option mode: invalid value (17) [ 226.771427][ T7488] bond1 (unregistering): Released all slaves [ 228.942483][ T7509] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 229.113067][ T7511] tipc: Enabled bearer , priority 0 [ 229.157896][ T7511] syzkaller0: entered promiscuous mode [ 229.211153][ T7511] syzkaller0: entered allmulticast mode [ 229.352882][ T7513] Invalid ELF header magic: != ELF [ 229.364393][ T7511] tipc: Resetting bearer [ 229.412922][ T7510] tipc: Resetting bearer [ 229.509055][ T7510] tipc: Disabling bearer [ 230.323323][ T7528] autofs4:pid:7528:autofs_fill_super: called with bogus options [ 231.992772][ T7544] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 232.552681][ T7549] tipc: Enabled bearer , priority 0 [ 232.561453][ T7549] syzkaller0: entered promiscuous mode [ 232.567091][ T7549] syzkaller0: entered allmulticast mode [ 232.585593][ T7549] tipc: Resetting bearer [ 232.596760][ T7548] tipc: Resetting bearer [ 232.663784][ T7548] tipc: Disabling bearer [ 233.044856][ T7556] Invalid ELF header magic: != ELF [ 233.402682][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 233.564224][ T7564] autofs4:pid:7564:autofs_fill_super: called with bogus options [ 234.998187][ T7572] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 235.871725][ T7579] tipc: Enabled bearer , priority 0 [ 235.906152][ T7579] syzkaller0: entered promiscuous mode [ 235.930707][ T7579] syzkaller0: entered allmulticast mode [ 236.103105][ T7583] tipc: Resetting bearer [ 236.170796][ T7576] tipc: Resetting bearer [ 236.303658][ T7576] tipc: Disabling bearer [ 238.741402][ T7598] autofs4:pid:7598:autofs_fill_super: called with bogus options [ 241.287209][ T7606] Invalid ELF header magic: != ELF [ 241.514244][ T7615] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 243.503224][ T7623] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 246.077801][ T7641] autofs4:pid:7641:autofs_fill_super: called with bogus options [ 246.207415][ T7642] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 247.231366][ T7642] bond1: option mode: invalid value (7) [ 247.305184][ T7642] bond1 (unregistering): Released all slaves [ 248.928217][ T7659] Invalid ELF header magic: != ELF [ 250.575709][ T7685] netlink: 'syz.1.562': attribute type 1 has an invalid length. [ 250.689289][ T7685] bond3: option mode: invalid value (7) [ 250.701979][ T7685] bond3 (unregistering): Released all slaves [ 251.740918][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 251.883511][ T7704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.041288][ T7711] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.056573][ T7711] bond1: (slave team0): Enslaving as an active interface with an up link [ 252.204834][ T7715] bond1: entered promiscuous mode [ 252.210089][ T7715] team0: entered promiscuous mode [ 252.216031][ T7715] team_slave_0: entered promiscuous mode [ 252.223740][ T7715] team_slave_1: entered promiscuous mode [ 252.230038][ T7715] bond1: entered allmulticast mode [ 252.237903][ T7715] team0: entered allmulticast mode [ 252.245701][ T7715] team_slave_0: entered allmulticast mode [ 252.253527][ T7715] team_slave_1: entered allmulticast mode [ 254.874755][ T7729] Invalid ELF header magic: != ELF [ 256.008075][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.014516][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.445523][ T7788] Invalid ELF header magic: != ELF [ 261.713014][ T7838] netlink: 'syz.2.605': attribute type 1 has an invalid length. [ 261.730859][ T7835] Invalid ELF header magic: != ELF [ 261.836203][ T7838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.020209][ T7873] fuse: Bad value for 'fd' [ 266.499494][ T7883] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 266.577943][ T7883] bond3: option mode: invalid value (7) [ 266.597937][ T7883] bond3 (unregistering): Released all slaves [ 267.102331][ T7887] Invalid ELF header magic: != ELF [ 272.568432][ T7929] tipc: Enabled bearer , priority 0 [ 272.591502][ T7929] syzkaller0: entered promiscuous mode [ 272.597491][ T7929] syzkaller0: entered allmulticast mode [ 272.618428][ T7929] tipc: Resetting bearer [ 272.643251][ T7928] tipc: Resetting bearer [ 272.704849][ T7928] tipc: Disabling bearer [ 272.938833][ T7933] Invalid ELF header magic: != ELF [ 274.907564][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.639'. [ 274.951515][ T7956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.066529][ T7956] bond2: (slave team0): Releasing backup interface [ 275.082740][ T7956] team0: left promiscuous mode [ 275.100741][ T7956] team_slave_0: left promiscuous mode [ 275.110820][ T7956] team_slave_1: left promiscuous mode [ 275.117928][ T7956] team0: left allmulticast mode [ 275.365302][ T7956] team_slave_0: left allmulticast mode [ 275.380745][ T7956] team_slave_1: left allmulticast mode [ 275.404172][ T7956] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.418701][ T7956] bond3: (slave team0): Enslaving as an active interface with an up link [ 275.434078][ T7963] bond3: entered promiscuous mode [ 275.440354][ T7963] team0: entered promiscuous mode [ 275.448087][ T7963] team_slave_0: entered promiscuous mode [ 275.455917][ T7963] team_slave_1: entered promiscuous mode [ 275.462344][ T7963] bond3: entered allmulticast mode [ 275.467651][ T7963] team0: entered allmulticast mode [ 275.473224][ T7963] team_slave_0: entered allmulticast mode [ 275.479167][ T7963] team_slave_1: entered allmulticast mode [ 275.836493][ T7971] Invalid ELF header magic: != ELF [ 277.897074][ T7987] netlink: 'syz.1.649': attribute type 1 has an invalid length. [ 278.515003][ T7987] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.786701][ T7997] autofs4:pid:7997:autofs_fill_super: called with bogus options [ 281.413644][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 281.666194][ T8005] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.770291][ T8002] bond1: (slave team0): Releasing backup interface [ 281.809470][ T8002] team0: left promiscuous mode [ 281.823544][ T8002] team_slave_0: left promiscuous mode [ 281.858829][ T8002] team_slave_1: left promiscuous mode [ 281.878052][ T8002] team0: left allmulticast mode [ 281.884924][ T8002] team_slave_0: left allmulticast mode [ 281.891321][ T8002] team_slave_1: left allmulticast mode [ 281.902446][ T8002] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.934730][ T8002] bond3: (slave team0): Enslaving as an active interface with an up link [ 282.006990][ T8007] bond3: entered promiscuous mode [ 282.015756][ T8007] team0: entered promiscuous mode [ 282.027505][ T8007] team_slave_0: entered promiscuous mode [ 282.038780][ T8007] team_slave_1: entered promiscuous mode [ 282.055664][ T8007] bond3: entered allmulticast mode [ 282.063537][ T8007] team0: entered allmulticast mode [ 282.069913][ T8007] team_slave_0: entered allmulticast mode [ 282.078595][ T8007] team_slave_1: entered allmulticast mode [ 283.463358][ T8024] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 284.007593][ T8026] Invalid ELF header magic: != ELF [ 284.436786][ T6159] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 284.571977][ T8040] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 284.793520][ T8042] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 284.849481][ T8042] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.361122][ T6159] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 286.418911][ T8070] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 286.647261][ T8079] netlink: 'syz.3.675': attribute type 1 has an invalid length. [ 286.684044][ T8079] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.873776][ T8075] Invalid ELF header magic: != ELF [ 289.157326][ T8103] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 289.213395][ T6175] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 289.342582][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'. [ 289.385687][ T8111] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.627216][ T8111] bond3: (slave team0): Releasing backup interface [ 289.740439][ T8111] team0: left promiscuous mode [ 289.770983][ T8111] team_slave_0: left promiscuous mode [ 289.808975][ T8111] team_slave_1: left promiscuous mode [ 289.874395][ T8111] team0: left allmulticast mode [ 289.926737][ T8111] team_slave_0: left allmulticast mode [ 289.976563][ T8111] team_slave_1: left allmulticast mode [ 290.217390][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.368557][ T8111] bond5: (slave team0): Enslaving as an active interface with an up link [ 290.472403][ T8121] bond5: entered promiscuous mode [ 290.477549][ T8121] team0: entered promiscuous mode [ 290.491666][ T8121] team_slave_0: entered promiscuous mode [ 290.500863][ T8121] team_slave_1: entered promiscuous mode [ 290.506968][ T8121] bond5: entered allmulticast mode [ 290.513045][ T8121] team0: entered allmulticast mode [ 290.518218][ T8121] team_slave_0: entered allmulticast mode [ 290.524288][ T8121] team_slave_1: entered allmulticast mode [ 290.728680][ T8132] netlink: 68 bytes leftover after parsing attributes in process `syz.1.690'. [ 290.752604][ T8126] Invalid ELF header magic: != ELF [ 291.773543][ T8144] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 291.885812][ T6175] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 293.103586][ T8164] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 293.869364][ T8166] netlink: 68 bytes leftover after parsing attributes in process `syz.1.702'. [ 294.828343][ T8177] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 294.982733][ T8181] syzkaller0: entered promiscuous mode [ 294.988276][ T8181] syzkaller0: entered allmulticast mode [ 295.356349][ T8180] Invalid ELF header magic: != ELF [ 296.005200][ T8189] syzkaller0: entered promiscuous mode [ 296.031667][ T8189] syzkaller0: entered allmulticast mode [ 296.079869][ T8189] netlink: 44 bytes leftover after parsing attributes in process `syz.3.710'. [ 297.075083][ T8202] netlink: 'syz.0.711': attribute type 3 has an invalid length. [ 297.367903][ T8210] netlink: 68 bytes leftover after parsing attributes in process `syz.0.715'. [ 297.459953][ T8215] netlink: 'syz.1.718': attribute type 1 has an invalid length. [ 297.498018][ T8212] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 297.595487][ T8215] 8021q: adding VLAN 0 to HW filter on device bond6 [ 297.644172][ T8220] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 297.702336][ T8220] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.729212][ T8224] bond4: (slave ip6erspan0): making interface the new active one [ 297.802365][ T8224] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 298.911111][ T8232] syzkaller0: entered promiscuous mode [ 298.931448][ T8232] syzkaller0: entered allmulticast mode [ 298.997008][ T8232] netlink: 44 bytes leftover after parsing attributes in process `syz.2.722'. [ 299.068174][ T8237] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 299.910688][ T8243] netlink: 68 bytes leftover after parsing attributes in process `syz.2.727'. [ 299.994608][ T8246] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 300.100436][ T8251] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 300.186053][ T8251] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.430241][ T8268] syzkaller0: entered promiscuous mode [ 301.437670][ T8268] syzkaller0: entered allmulticast mode [ 301.447618][ T8268] netlink: 44 bytes leftover after parsing attributes in process `syz.1.735'. [ 301.783732][ T8276] netlink: 68 bytes leftover after parsing attributes in process `syz.3.739'. [ 303.026214][ T8284] netlink: 'syz.3.740': attribute type 3 has an invalid length. [ 303.478247][ T8291] netlink: 'syz.3.744': attribute type 1 has an invalid length. [ 305.354341][ T8291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 305.406261][ T8298] bond3: (slave ip6erspan0): making interface the new active one [ 305.435387][ T8298] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 305.467591][ T8303] syzkaller0: entered promiscuous mode [ 305.475912][ T8303] syzkaller0: entered allmulticast mode [ 305.496925][ T8299] netlink: 44 bytes leftover after parsing attributes in process `syz.0.746'. [ 305.831279][ T8322] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 307.349145][ T8337] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 307.392498][ T8337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.603356][ T8344] syzkaller0: entered promiscuous mode [ 307.617115][ T8344] syzkaller0: entered allmulticast mode [ 307.638575][ T8344] netlink: 44 bytes leftover after parsing attributes in process `syz.0.760'. [ 307.832420][ T8358] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 308.102507][ T8366] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 310.685482][ T8385] syzkaller0: entered promiscuous mode [ 310.712961][ T8385] syzkaller0: entered allmulticast mode [ 310.752906][ T8386] syzkaller0: entered promiscuous mode [ 310.758465][ T8386] syzkaller0: entered allmulticast mode [ 310.788410][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz.0.776'. [ 310.893266][ T8392] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 312.588945][ T8424] syzkaller0: entered promiscuous mode [ 312.599602][ T8424] syzkaller0: entered allmulticast mode [ 312.614907][ T8424] netlink: 44 bytes leftover after parsing attributes in process `syz.1.790'. [ 314.801688][ T8452] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 314.808383][ T8452] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.816654][ T8452] vhci_hcd vhci_hcd.0: Device attached [ 314.828934][ T8453] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 1 [ 314.851631][ T8452] netlink: 'syz.1.799': attribute type 1 has an invalid length. [ 314.898872][ T12] vhci_hcd: stop threads [ 314.917778][ T12] vhci_hcd: release socket [ 314.925903][ T8452] bond7: option mode: invalid value (19) [ 314.933260][ T12] vhci_hcd: disconnect device [ 314.967218][ T8452] bond7 (unregistering): Released all slaves [ 315.981226][ T8468] syzkaller0: entered promiscuous mode [ 316.014780][ T8468] syzkaller0: entered allmulticast mode [ 316.046089][ T8465] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 316.089716][ T8472] netlink: 44 bytes leftover after parsing attributes in process `syz.0.802'. [ 316.727072][ T8496] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 317.481256][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.487659][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.588044][ T8511] syzkaller0: entered promiscuous mode [ 318.610741][ T8511] syzkaller0: entered allmulticast mode [ 318.633468][ T8511] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 318.703609][ T8517] netlink: 44 bytes leftover after parsing attributes in process `syz.1.814'. [ 318.996385][ T8528] netlink: 'syz.1.820': attribute type 3 has an invalid length. [ 319.024535][ T8524] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 319.031225][ T8524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 319.080365][ T8524] vhci_hcd vhci_hcd.0: Device attached [ 319.158597][ T8533] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 319.319620][ T8524] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 319.457833][ T6253] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 319.951301][ T8529] vhci_hcd: connection reset by peer [ 319.956931][ T12] vhci_hcd: stop threads [ 319.967530][ T12] vhci_hcd: release socket [ 319.981763][ T8524] bond6: option mode: invalid value (19) [ 320.001344][ T12] vhci_hcd: disconnect device [ 320.034127][ T8524] bond6 (unregistering): Released all slaves [ 321.261456][ T8551] syzkaller0: entered promiscuous mode [ 321.291513][ T8551] syzkaller0: entered allmulticast mode [ 321.331188][ T8551] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 321.370067][ T8551] netlink: 44 bytes leftover after parsing attributes in process `syz.0.829'. [ 322.482807][ T8567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.625744][ T8573] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 323.393031][ T8575] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 323.399734][ T8575] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 323.454545][ T8575] vhci_hcd vhci_hcd.0: Device attached [ 323.460474][ T8582] netlink: 'syz.1.837': attribute type 1 has an invalid length. [ 323.492688][ T8582] bond7: option mode: invalid value (20) [ 323.502525][ T8582] bond7 (unregistering): Released all slaves [ 323.805455][ T5814] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 323.965404][ T8576] vhci_hcd: connection reset by peer [ 324.240167][ T3510] vhci_hcd: stop threads [ 324.279619][ T3510] vhci_hcd: release socket [ 324.321784][ T3510] vhci_hcd: disconnect device [ 324.630692][ T6253] vhci_hcd: vhci_device speed not set [ 324.657489][ T8593] syzkaller0: entered promiscuous mode [ 324.684843][ T8593] syzkaller0: entered allmulticast mode [ 325.919613][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 325.930899][ T8611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.941830][ T8611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.965620][ T8622] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 326.984668][ T8620] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 326.991359][ T8620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 327.021154][ T8620] vhci_hcd vhci_hcd.0: Device attached [ 327.203885][ T8622] bond6: option mode: invalid value (20) [ 327.280574][ T6159] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 327.439012][ T8622] bond6 (unregistering): Released all slaves [ 327.918317][ T8621] vhci_hcd: connection reset by peer [ 327.951732][ T3510] vhci_hcd: stop threads [ 327.956130][ T3510] vhci_hcd: release socket [ 327.960722][ T3510] vhci_hcd: disconnect device [ 328.902192][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.855'. [ 328.944763][ T8634] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 328.985715][ T8636] bond1: (slave team0): Releasing backup interface [ 329.022665][ T8636] team0: left promiscuous mode [ 329.027705][ T8636] team_slave_0: left promiscuous mode [ 329.033446][ T5814] vhci_hcd: vhci_device speed not set [ 329.039909][ T8636] team_slave_1: left promiscuous mode [ 329.047242][ T8636] team0: left allmulticast mode [ 329.052627][ T8636] team_slave_0: left allmulticast mode [ 329.058210][ T8636] team_slave_1: left allmulticast mode [ 329.075422][ T8644] syzkaller0: entered promiscuous mode [ 329.081333][ T8644] syzkaller0: entered allmulticast mode [ 329.608915][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 330.483774][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 330.576540][ T8669] 8021q: adding VLAN 0 to HW filter on device bond4 [ 330.598873][ T8671] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.620395][ T8671] bond4: (slave team0): Enslaving as an active interface with an up link [ 330.675457][ T8673] bond4: entered promiscuous mode [ 330.680660][ T8673] team0: entered promiscuous mode [ 330.685738][ T8673] team_slave_0: entered promiscuous mode [ 330.692011][ T8673] team_slave_1: entered promiscuous mode [ 330.699662][ T8673] bond4: entered allmulticast mode [ 330.705459][ T8673] team0: entered allmulticast mode [ 330.718448][ T8673] team_slave_0: entered allmulticast mode [ 330.729946][ T8673] team_slave_1: entered allmulticast mode [ 330.752035][ T8689] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 330.758725][ T8689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 330.780770][ T8683] syzkaller0: entered promiscuous mode [ 330.799664][ T8683] syzkaller0: entered allmulticast mode [ 330.825114][ T8689] vhci_hcd vhci_hcd.0: Device attached [ 330.903941][ T8695] netlink: 'syz.2.874': attribute type 1 has an invalid length. [ 330.955545][ T8695] bond6: option mode: invalid value (20) [ 330.982853][ T8695] bond6 (unregistering): Released all slaves [ 331.007279][ T8700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.066277][ T8692] vhci_hcd: connection closed [ 332.067588][ T12] vhci_hcd: stop threads [ 332.078873][ T12] vhci_hcd: release socket [ 332.133558][ T12] vhci_hcd: disconnect device [ 332.446220][ T6159] vhci_hcd: vhci_device speed not set [ 333.260774][ T5814] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 333.451114][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.886'. [ 333.533238][ T8723] 8021q: adding VLAN 0 to HW filter on device bond5 [ 333.556696][ T8731] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.567958][ T8731] bond5: (slave team0): Enslaving as an active interface with an up link [ 333.601883][ T8723] bond5: entered promiscuous mode [ 333.609546][ T8723] team0: entered promiscuous mode [ 333.617677][ T8732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.627732][ T8723] team_slave_0: entered promiscuous mode [ 333.634593][ T8723] team_slave_1: entered promiscuous mode [ 333.652355][ T8723] bond5: entered allmulticast mode [ 333.660611][ T5767] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 333.664762][ T8723] team0: entered allmulticast mode [ 333.684125][ T8723] team_slave_0: entered allmulticast mode [ 333.700583][ T8723] team_slave_1: entered allmulticast mode [ 333.850791][ T5767] usb 2-1: Using ep0 maxpacket: 32 [ 333.888912][ T5767] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 333.955694][ T5767] usb 2-1: config 0 has no interface number 0 [ 334.034366][ T5767] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 334.102866][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.155305][ T5767] usb 2-1: Product: syz [ 334.194548][ T5767] usb 2-1: Manufacturer: syz [ 334.226500][ T5767] usb 2-1: SerialNumber: syz [ 334.394804][ T5767] usb 2-1: config 0 descriptor?? [ 334.527468][ T5767] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 334.604590][ T5767] usb 2-1: selecting invalid altsetting 1 [ 334.640270][ T5767] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 334.662949][ T8740] netlink: 'syz.3.890': attribute type 1 has an invalid length. [ 334.784003][ T5767] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 334.794676][ T8739] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 334.801336][ T8739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 334.837686][ T5767] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 334.857796][ T8739] vhci_hcd vhci_hcd.0: Device attached [ 334.868188][ T5767] usb 2-1: media controller created [ 335.049741][ T5767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 335.130800][ T6159] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 335.176136][ T8740] bond6: option mode: invalid value (19) [ 335.316973][ T8740] bond6 (unregistering): Released all slaves [ 335.324096][ T5767] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 335.359002][ T5767] zl10353_read_register: readreg error (reg=127, ret==-71) [ 335.435181][ T8741] vhci_hcd: connection reset by peer [ 335.442719][ T64] vhci_hcd: stop threads [ 335.449347][ T64] vhci_hcd: release socket [ 335.484313][ T5767] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 335.512572][ T64] vhci_hcd: disconnect device [ 335.896220][ T5767] usb 2-1: USB disconnect, device number 2 [ 336.030357][ T6175] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 337.055232][ T8764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.665677][ T5767] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 340.110642][ T8815] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 340.117331][ T8815] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.160161][ T8815] vhci_hcd vhci_hcd.0: Device attached [ 340.310765][ T6159] vhci_hcd: vhci_device speed not set [ 340.387991][ T8822] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 340.430633][ T6251] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 340.438258][ T8818] netlink: 'syz.1.914': attribute type 1 has an invalid length. [ 340.563709][ T8818] bond7: option mode: invalid value (19) [ 340.620934][ T5767] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 340.666549][ T8818] bond7 (unregistering): Released all slaves [ 340.849152][ T5767] usb 1-1: Dual-Role OTG device on HNP port [ 340.911812][ T5767] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 340.989148][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.425107][ T8816] vhci_hcd: connection reset by peer [ 341.660239][ T3510] vhci_hcd: stop threads [ 341.677058][ T5767] gspca_main: spca501-2.14.0 probing 0000:0000 [ 341.683460][ T3510] vhci_hcd: release socket [ 341.701174][ T3510] vhci_hcd: disconnect device [ 341.718668][ T5767] gspca_spca501: reg write: error -32 [ 341.736676][ T5767] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 341.755249][ T5767] spca501: probe of 1-1:1.0 failed with error -22 [ 341.784053][ C0] general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] PREEMPT SMP KASAN [ 341.795852][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 341.804306][ C0] CPU: 0 PID: 5767 Comm: kworker/0:3 Not tainted syzkaller #0 [ 341.811814][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 341.821941][ C0] Workqueue: usb_hub_wq hub_event [ 341.827026][ C0] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 341.832714][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 341.852447][ C0] RSP: 0018:ffffc90000007840 EFLAGS: 00010002 [ 341.858568][ C0] RAX: 00000000000000e6 RBX: ffff88805e634120 RCX: ffff888029731e00 [ 341.866593][ C0] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 341.874879][ C0] RBP: ffff88805e634100 R08: 0000000000000000 R09: 00000000eed9a316 [ 341.882898][ C0] R10: 000000005c29093d R11: 0000000000000100 R12: ffff88805e634730 [ 341.891355][ C0] R13: dffffc0000000000 R14: ffff88805e634128 R15: 0000000000000730 [ 341.899369][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 341.908350][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.915009][ C0] CR2: 00007f03f315da08 CR3: 000000002e6b6000 CR4: 00000000003506f0 [ 341.923119][ C0] Call Trace: [ 341.926453][ C0] [ 341.929339][ C0] f_midi2_set_alt+0x100/0x800 [ 341.934173][ C0] composite_setup+0x1ffe/0x33a0 [ 341.939168][ C0] configfs_composite_setup+0xc7/0x100 [ 341.944674][ C0] dummy_timer+0x1309/0x3420 [ 341.949348][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 341.954437][ C0] ? lock_chain_count+0x20/0x20 [ 341.959346][ C0] ? dummy_free_streams+0x520/0x520 [ 341.964602][ C0] ? dummy_free_streams+0x520/0x520 [ 341.969848][ C0] __hrtimer_run_queues+0x525/0xc10 [ 341.975124][ C0] ? hrtimer_interrupt+0x980/0x980 [ 341.980291][ C0] ? read_tsc+0x9/0x20 [ 341.984422][ C0] hrtimer_run_softirq+0x177/0x290 [ 341.989766][ C0] handle_softirqs+0x27d/0x820 [ 341.994588][ C0] ? read_tsc+0x9/0x20 [ 341.998712][ C0] ? ktime_get+0x24b/0x280 [ 342.003182][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 342.007998][ C0] ? do_softirq+0x1a0/0x1a0 [ 342.012548][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 342.017844][ C0] __irq_exit_rcu+0xd3/0x190 [ 342.022486][ C0] ? irq_exit_rcu+0x20/0x20 [ 342.027042][ C0] irq_exit_rcu+0x9/0x20 [ 342.031327][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 342.036999][ C0] [ 342.039952][ C0] [ 342.042922][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.048928][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 342.055468][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2b 5f c6 f6 65 8b 05 9c 2d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 342.075193][ C0] RSP: 0018:ffffc90002e46880 EFLAGS: 00000206 [ 342.081280][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 3e9968e5c83a2100 [ 342.089273][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 342.097284][ C0] RBP: ffffc90002e46910 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 342.105291][ C0] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: dffffc0000000000 [ 342.113294][ C0] R13: dffffc0000000000 R14: ffff8881437e0000 R15: 1ffff920005c8d10 [ 342.121387][ C0] ? _raw_spin_unlock+0x40/0x40 [ 342.126280][ C0] ? kobject_get+0xcc/0x120 [ 342.130813][ C0] dummy_urb_enqueue+0x587/0x780 [ 342.135803][ C0] usb_hcd_submit_urb+0x318/0x1aa0 [ 342.140946][ C0] ? __init_swait_queue_head+0xa8/0x140 [ 342.146520][ C0] usb_start_wait_urb+0x140/0x580 [ 342.151570][ C0] ? usb_api_blocking_completion+0xb0/0xb0 [ 342.157414][ C0] usb_control_msg+0x235/0x3e0 [ 342.162207][ C0] usb_set_interface+0x51f/0x13f0 [ 342.167276][ C0] snd_usb_midi_v2_create+0x62f/0x48a0 [ 342.172786][ C0] ? proc_audio_usbbus_read+0x170/0x170 [ 342.178372][ C0] ? snd_card_rw_proc_new+0x10d/0x130 [ 342.183794][ C0] ? validate_midi_out_jack+0xb0/0xb0 [ 342.189207][ C0] ? usb_ifnum_to_if+0x262/0x2e0 [ 342.194192][ C0] snd_usb_create_stream+0x262/0x5d0 [ 342.199523][ C0] usb_audio_probe+0xead/0x1f00 [ 342.204410][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 342.209482][ C0] ? snd_usb_autosuspend+0x1c0/0x1c0 [ 342.214793][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 342.220733][ C0] usb_probe_interface+0x5c2/0xaf0 [ 342.225881][ C0] ? usb_register_driver+0x3c0/0x3c0 [ 342.231214][ C0] really_probe+0x247/0xae0 [ 342.235758][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 342.240995][ C0] __driver_probe_device+0x1f5/0x390 [ 342.246320][ C0] driver_probe_device+0x4f/0x420 [ 342.251380][ C0] __device_attach_driver+0x2ca/0x510 [ 342.256783][ C0] bus_for_each_drv+0x252/0x2e0 [ 342.261661][ C0] ? coredump_store+0x90/0x90 [ 342.266367][ C0] ? bus_find_device+0x300/0x300 [ 342.271335][ C0] __device_attach+0x2c1/0x420 [ 342.276132][ C0] ? device_attach+0x20/0x20 [ 342.280863][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 342.286086][ C0] bus_probe_device+0x180/0x260 [ 342.290969][ C0] device_add+0x87c/0xc40 [ 342.295332][ C0] usb_set_configuration+0x1ad0/0x2150 [ 342.300827][ C0] usb_generic_driver_probe+0x8d/0x150 [ 342.306334][ C0] usb_probe_device+0x12a/0x260 [ 342.311304][ C0] ? usb_register_device_driver+0x230/0x230 [ 342.317227][ C0] really_probe+0x247/0xae0 [ 342.321762][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 342.327047][ C0] __driver_probe_device+0x1f5/0x390 [ 342.332362][ C0] driver_probe_device+0x4f/0x420 [ 342.337413][ C0] __device_attach_driver+0x2ca/0x510 [ 342.342814][ C0] bus_for_each_drv+0x252/0x2e0 [ 342.347690][ C0] ? coredump_store+0x90/0x90 [ 342.352403][ C0] ? bus_find_device+0x300/0x300 [ 342.357366][ C0] __device_attach+0x2c1/0x420 [ 342.362160][ C0] ? device_attach+0x20/0x20 [ 342.366780][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 342.371835][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 342.377086][ C0] bus_probe_device+0x180/0x260 [ 342.381967][ C0] device_add+0x87c/0xc40 [ 342.386322][ C0] usb_new_device+0x995/0x1550 [ 342.391115][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 342.395990][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.401305][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 342.406534][ C0] hub_event+0x29d5/0x4a80 [ 342.410996][ C0] ? hub_post_resume+0x120/0x120 [ 342.415965][ C0] ? read_lock_is_recursive+0x20/0x20 [ 342.421368][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.426591][ C0] ? process_scheduled_works+0x975/0x1600 [ 342.432367][ C0] ? process_scheduled_works+0x975/0x1600 [ 342.438115][ C0] process_scheduled_works+0xa60/0x1600 [ 342.443702][ C0] ? worker_attach_to_pool+0x370/0x370 [ 342.449195][ C0] ? assign_work+0x3cc/0x5d0 [ 342.453838][ C0] worker_thread+0xa5e/0xfe0 [ 342.458463][ C0] ? _raw_spin_unlock+0x40/0x40 [ 342.463340][ C0] ? __kthread_parkme+0x71/0x1c0 [ 342.468342][ C0] kthread+0x2fa/0x390 [ 342.472446][ C0] ? pr_cont_work+0x550/0x550 [ 342.477149][ C0] ? kthread_blkcg+0xd0/0xd0 [ 342.481766][ C0] ret_from_fork+0x48/0x80 [ 342.486215][ C0] ? kthread_blkcg+0xd0/0xd0 [ 342.490831][ C0] ret_from_fork_asm+0x11/0x20 [ 342.495625][ C0] [ 342.498672][ C0] Modules linked in: [ 342.502596][ C0] ---[ end trace 0000000000000000 ]--- [ 342.508065][ C0] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 342.513727][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 342.533445][ C0] RSP: 0018:ffffc90000007840 EFLAGS: 00010002 [ 342.539555][ C0] RAX: 00000000000000e6 RBX: ffff88805e634120 RCX: ffff888029731e00 [ 342.547590][ C0] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 342.555640][ C0] RBP: ffff88805e634100 R08: 0000000000000000 R09: 00000000eed9a316 [ 342.563647][ C0] R10: 000000005c29093d R11: 0000000000000100 R12: ffff88805e634730 [ 342.571665][ C0] R13: dffffc0000000000 R14: ffff88805e634128 R15: 0000000000000730 [ 342.579671][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 342.588633][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.595261][ C0] CR2: 00007f03f315da08 CR3: 000000002e6b6000 CR4: 00000000003506f0 [ 342.603278][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 342.611094][ C0] Kernel Offset: disabled [ 342.615447][ C0] Rebooting in 86400 seconds..