last executing test programs: 13.759394376s ago: executing program 2 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r1, r0, 0x1, [0x0, 0xf7df]}, {r1, r2, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x2, 0x2, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x800, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{@gid}]}) 12.588739764s ago: executing program 3 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x46) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000, 0xfffffffffffffffe}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x2, 0x2b}, 0x0, @in6=@remote, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 10.720450658s ago: executing program 3 (id=190): futex(&(0x7f0000000000)=0x1, 0x7, 0x2, 0x0, 0x0, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x82d81, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x42, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 'wg2\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a050000000000000000000700000a0900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021900000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000640003806000008004000180580007800b00010074617267657400"], 0x114}}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x100, 0x0, 0x20000006, 0x7, 0xc27}, 0x7, 0xe8}, [{0x2, 0x9, 0x7, 0x4, 0x5, 0x8}, {0x200, 0x57, 0xa, 0x6, 0x977, 0xfffffff7}, {0x705, 0x9, 0x51, 0x7, 0x1, 0xa}, {0x80000001, 0xc, 0x80, 0x10, 0xbc2, 0x2}, {0xff, 0xdcd3, 0x3ff, 0x6, 0x80000000, 0x6}, {0x10001, 0x7, 0x0, 0x800, 0x81, 0x4}, {0xfffffff2, 0x8, 0xfffffff7, 0x2, 0x85, 0x3}, {0xffff, 0x4, 0x7fff, 0xd54a, 0x1, 0x1}, {0x3, 0x3, 0xfffffffd, 0x100, 0x7, 0x80000001}, {0x6b3, 0x4, 0x9d, 0x3, 0x8000, 0x7ff}, {0xffffffaa, 0x4, 0x4, 0xba3, 0x14732273, 0xc5}, {0x7, 0x5, 0x80000000, 0x401, 0x1, 0x7}, {0x80000001, 0x3, 0x5, 0x9, 0xc6e5, 0xfffffffb}, {0xfffffffa, 0x2, 0x5c7, 0x7, 0x1, 0x2}, {0x8, 0x3, 0x9a5, 0x34d57ea2, 0xc, 0x8}, {0x0, 0x665b, 0x0, 0x1, 0x55, 0x10}, {0x2, 0xca57, 0x7, 0xae95, 0x7, 0x2}, {0xffffffff, 0x200, 0x5, 0x5, 0x4, 0xd}, {0x3, 0x9, 0x7, 0x5, 0x1ff, 0x10000}, {0x9, 0xffffffff, 0xfffe0000, 0x100, 0xb, 0x1}, {0x8000, 0x0, 0x3, 0x8bc, 0x4325, 0x2}, {0x2, 0x4, 0x6, 0x3, 0xb3, 0xfffffb60}, {0x2, 0x1, 0x605a, 0x5, 0x800, 0x5}, {0x3, 0x23e000, 0xfffffffd, 0x0, 0x4, 0x3ff}, {0x2, 0x7fffffff, 0x7, 0x5, 0x1, 0x9}, {0x7ff, 0x9, 0x5, 0x1, 0xd4, 0x1}, {0x1000, 0x7, 0xfffffb9c, 0x8000, 0x4, 0xf}, {0x3, 0x9, 0x696, 0x8, 0x6, 0x125d}, {0x1, 0x10, 0x7ff, 0x4, 0x9, 0x8f74}, {0x5, 0x0, 0x10001, 0x2, 0x69, 0x9}, {0x6, 0x0, 0xe, 0x1000, 0x0, 0xe6}, {0x53d, 0x5, 0x1, 0x4, 0x200, 0xfffffffd}, {0x7f, 0x9, 0x1, 0x800, 0x9, 0x40}, {0x2, 0xb, 0x4, 0xf, 0x8, 0x2}, {0xffffffff, 0x30, 0xe, 0x5, 0x0, 0x7}, {0x6c, 0x5, 0x0, 0x1, 0x2}, {0xb, 0x6, 0x7, 0x2, 0x8}, {0xfff, 0x9, 0x0, 0xbb, 0x3, 0xfc38}, {0x3, 0x9, 0x2bc, 0x8001, 0x4, 0xc42d}, {0xac4, 0x4, 0x6, 0x6, 0x7, 0x8}, {0x5, 0x9, 0x8, 0x4, 0x8001, 0x83a6}, {0xcc, 0x3, 0xfffffeb7, 0x4, 0x4c4, 0x8001}, {0x3, 0x123ceeba, 0x8, 0x100, 0x1, 0x6}, {0x7a, 0x6, 0x5, 0x6, 0x1, 0x40}, {0x7fffffff, 0x34, 0x4, 0x5, 0x1, 0x4}, {0x8, 0xbd, 0x0, 0x6, 0x8}, {0x3, 0x8, 0x8, 0x8, 0xfff, 0x4}, {0x1, 0xfffff800, 0x8, 0x6, 0x75b, 0x3}, {0x3, 0x5, 0xd85, 0x29, 0x1, 0x6}, {0xffffffff, 0xfffffff7, 0x7ff, 0x8001, 0x2, 0x8}, {0x1, 0x9, 0x4, 0xc2b3, 0x4, 0x9f1}, {0xff, 0x4, 0x9, 0x0, 0x6, 0x6}, {0x2, 0x0, 0x6, 0x200, 0x85d0, 0x74}, {0xffffff90, 0x1ff, 0x5, 0x7fffffff, 0x2, 0xaad0}, {0x5, 0x0, 0x0, 0xffff, 0x1, 0x9}, {0x7, 0x40, 0xa, 0x800, 0x400}, {0x5, 0xffffffff, 0xffff0001, 0x10000, 0x0, 0xd01e}, {0x9, 0xffff37fd, 0x2efe, 0xfffffffa, 0x1ff, 0x1}, {0x7, 0x8, 0x4, 0x8001, 0x3}, {0xf, 0xad8e, 0x8fa, 0x9, 0xfffffff9, 0x8}, {0xe, 0xc70, 0xfff, 0xfffffff8, 0x2}, {0x4, 0xd, 0x0, 0x7, 0x727c, 0x8}, {0x2, 0x5, 0x3, 0x8, 0x1, 0x2}, {0x2, 0x64a, 0x6, 0x2cc952de, 0x1, 0x4}, {0x1ffe00, 0xf296, 0x8, 0x0, 0x81, 0xb5}, {0x400, 0x1ff, 0x2, 0xe4, 0x4, 0xfce00}, {0x4e, 0x9a, 0x1000, 0x8, 0x1ff, 0x9}, {0x4, 0x5, 0x7, 0x9a, 0x6, 0xab7}, {0x8, 0x6, 0xfffff000, 0x2, 0x1, 0x8000}, {0x8000, 0x5, 0x0, 0x781d, 0x10001, 0x7}, {0x10, 0x2, 0xfff, 0x81, 0x51d, 0x8}, {0x7, 0x6, 0x2, 0x6, 0x4, 0x990}, {0x188c1852, 0x8, 0xa, 0x6, 0xe6a8, 0xc}, {0x20000, 0x959, 0x54f6, 0xb4, 0x85, 0x3}, {0x2, 0x38000, 0x9, 0xcb2, 0x7f, 0x4}, {0x6, 0x7fffffff, 0xe, 0xff, 0x7, 0x2}, {0x4, 0x9, 0x6, 0x6, 0x9, 0x2}, {0x5, 0x8000, 0xe, 0x4, 0x7, 0x1}, {0x3, 0xffffff81, 0x2, 0xa3, 0x2, 0x3}, {0x2, 0x1, 0x7, 0x8, 0x5, 0x6}, {0x40a2, 0x5, 0x1, 0x0, 0x9, 0x4a}, {0x2, 0x9, 0x1, 0x6c4, 0x3, 0x400}, {0x7f, 0xc8, 0x0, 0x7, 0x2, 0xaf5}, {0x7ff, 0x7, 0x7fffffff, 0x0, 0x80, 0x390}, {0x1, 0x3, 0xb5a4, 0x10001, 0x10000, 0x9}, {0x2, 0x9ff0, 0x7fff, 0x5, 0x4, 0x6}, {0x2, 0xc, 0x5, 0x3, 0x1, 0x8}, {0xccc, 0x17b8, 0x1, 0x2, 0x0, 0xb8ba}, {0x9, 0x8001, 0x0, 0x3, 0x969f5792, 0x7}, {0xb, 0x9, 0x4, 0x9, 0x0, 0x77}, {0x2, 0xafc, 0x4, 0x3, 0x9, 0x1}, {0x7ff, 0x9, 0xfffffff8, 0x2, 0x8, 0x8}, {0x5, 0x4, 0x1, 0x7fff, 0xd, 0x3}, {0x7, 0x80000001, 0xffff, 0x0, 0x0, 0x4}, {0x3, 0xc, 0xbd, 0x8, 0x0, 0x4}, {0xfffff801, 0x72c, 0x4, 0x7, 0x3e8c, 0x3}, {0x9, 0x5, 0x40, 0xe, 0x2bc1, 0xffffff81}, {0x80000001, 0xa46, 0x0, 0x1000, 0x4, 0x7}, {0x1, 0x2, 0xffffffff, 0x2, 0x3, 0x8000000}, {0x400, 0x2, 0x101, 0x576, 0x401, 0x7fffffff}, {0x75cb, 0x3, 0x2, 0x3, 0xc, 0xd}, {0xcb6, 0x9, 0x6, 0x9, 0xab3, 0xffff}, {0xc, 0x3, 0x6, 0x4, 0xffff, 0xffffffff}, {0x8001, 0x0, 0x2fa4, 0x1, 0x4, 0x3ff}, {0xe380, 0x4, 0x81, 0x5, 0xf, 0xffffffff}, {0x4, 0x2887eff4, 0x6, 0x5, 0x7ff, 0x5}, {0x200, 0x6, 0x0, 0x2, 0x800, 0xfff}, {0xb6, 0x6, 0x7fffffff, 0x53611e27, 0x9, 0x1}, {0x2, 0x8000, 0x2, 0x8, 0x5, 0x6}, {0xa, 0x5, 0x6, 0x3, 0xa4, 0x5}, {0xfffffffb, 0x6, 0x4054, 0x4, 0x6, 0xd9}, {0xfffffff9, 0x7, 0x0, 0xbcf, 0x5, 0x9}, {0x3, 0xda5, 0x7, 0x1, 0x4, 0x5}, {0x400, 0x871, 0x8, 0xc09, 0x1, 0x88d}, {0x2e, 0x80, 0xffff, 0x59a, 0x10000, 0x41c165e}, {0x3, 0x4, 0x1, 0x9, 0x0, 0x7}, {0x1, 0x80, 0xef86, 0x5, 0x10000000, 0x80000000}, {0x9, 0xac2d, 0x9, 0xa, 0x5, 0x8}, {0x59, 0x6, 0xfffffffb, 0x7, 0x48, 0xd}, {0x5, 0x10, 0xf85, 0x7, 0x9, 0x8}, {0x6, 0x7, 0x7, 0x2, 0x8, 0x101}, {0x3030, 0x2, 0xdd0, 0x1, 0x9, 0xfffffffe}, {0x2, 0x7, 0x1000, 0x9, 0x1ff, 0x5}, {0x0, 0xe06a, 0x3, 0x8, 0xe, 0x97fb}, {0x7, 0x9, 0x1, 0xfffffff7, 0x2, 0xd9b}, {0x7, 0x0, 0x2, 0x9, 0x2, 0x6}, {0x7fff, 0x104, 0x200, 0x5e, 0x4d07, 0x7f}, {0xfffffff2, 0xee3, 0x0, 0x6, 0xfff, 0x2}], [{0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x4}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x3}, {}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x4}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0xa19a2f37fc43f3d8}, {0x1, 0x1}, {0x4}, {}, {0x3}, {0x4}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x36d6435f70ccebc3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x6}, {}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x0, 0x2}, {0x1, 0x1}, {0x4}, {0x1}, {}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10.19573328s ago: executing program 2 (id=192): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='./', 0x2) 9.823290099s ago: executing program 2 (id=194): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x4e24, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x1, 0x8}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00', @ANYRES16=r0, @ANYBLOB="040026bd7000fcdbdf250f000000080031000200000008003400000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8841}, 0x4008041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0xffff26c0, @loopback, 0x28}, {0xa, 0x4e22, 0x5, @mcast1}, 0x0, {[0x8, 0x8, 0x101, 0x8, 0x1, 0x200, 0x8, 0x6]}}, 0x5c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_conn_req={{0x2, 0x36, 0x4}, {0xd, 0x2}}, @l2cap_disconn_rsp={{0x7, 0x81, 0x4}, {0x1, 0x3}}, @l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0xc66}}]}}, 0x1f) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) openat$cgroup_root(0xffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dum\ry_encpyp+\x84E\xdc', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\r\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8c{\x9e\x85\xdbO\xb3\xa2\xfev\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Q', 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x8, 0x7, 0x4, 0xf8b, 0x1, 0x80}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7c2}, 0x94) 7.123759992s ago: executing program 3 (id=196): openat(0xffffffffffffff9c, 0x0, 0x181341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000020000000000000300000018110000c4bf167b699d70dfe963e7cb4a7814580644f2c11341d19de8a72d9da0818e897980e579e9c9a2ce249f1135b719dbd74f53b9a55c671600b7d9e7c010d08343b64614c7407e3f65b5ee5bdbe3a6d92a57bf9092eef6e9d8d8b665548b18c8322ec859f8aa55c724", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) 7.100532473s ago: executing program 1 (id=197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 7.080016724s ago: executing program 2 (id=198): getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x46) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000, 0xfffffffffffffffe}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x2, 0x2b}, 0x0, @in6=@remote, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 6.951071406s ago: executing program 3 (id=199): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x46) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000, 0xfffffffffffffffe}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x2, 0x2b}, 0x0, @in6=@remote, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 6.950708586s ago: executing program 1 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{r1, r0, 0x1, [0x0, 0xf7df]}, {r1, r2, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x2, 0x2, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x800, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{@gid}]}) 6.885948298s ago: executing program 0 (id=201): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/image_size', 0x200080, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x110000000097a9, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0xcb9, 0xfffffffe, 0x7, 0x10001, 0xff000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 6.500726127s ago: executing program 0 (id=202): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x802, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000400)) 5.278746816s ago: executing program 3 (id=203): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0x8}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 5.149060879s ago: executing program 0 (id=204): futex(&(0x7f0000000000)=0x1, 0x7, 0x2, 0x0, 0x0, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x82d81, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x42, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 'wg2\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a050000000000000000000700000a0900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021900000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000640003806000008004000180580007800b00010074617267657400"], 0x114}}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x100, 0x0, 0x20000006, 0x7, 0xc27}, 0x7, 0xe8}, [{0x2, 0x9, 0x7, 0x4, 0x5, 0x8}, {0x200, 0x57, 0xa, 0x6, 0x977, 0xfffffff7}, {0x705, 0x9, 0x51, 0x7, 0x1, 0xa}, {0x80000001, 0xc, 0x80, 0x10, 0xbc2, 0x2}, {0xff, 0xdcd3, 0x3ff, 0x6, 0x80000000, 0x6}, {0x10001, 0x7, 0x0, 0x800, 0x81, 0x4}, {0xfffffff2, 0x8, 0xfffffff7, 0x2, 0x85, 0x3}, {0xffff, 0x4, 0x7fff, 0xd54a, 0x1, 0x1}, {0x3, 0x3, 0xfffffffd, 0x100, 0x7, 0x80000001}, {0x6b3, 0x4, 0x9d, 0x3, 0x8000, 0x7ff}, {0xffffffaa, 0x4, 0x4, 0xba3, 0x14732273, 0xc5}, {0x7, 0x5, 0x80000000, 0x401, 0x1, 0x7}, {0x80000001, 0x3, 0x5, 0x9, 0xc6e5, 0xfffffffb}, {0xfffffffa, 0x2, 0x5c7, 0x7, 0x1, 0x2}, {0x8, 0x3, 0x9a5, 0x34d57ea2, 0xc, 0x8}, {0x0, 0x665b, 0x0, 0x1, 0x55, 0x10}, {0x2, 0xca57, 0x7, 0xae95, 0x7, 0x2}, {0xffffffff, 0x200, 0x5, 0x5, 0x4, 0xd}, {0x3, 0x9, 0x7, 0x5, 0x1ff, 0x10000}, {0x9, 0xffffffff, 0xfffe0000, 0x100, 0xb, 0x1}, {0x8000, 0x0, 0x3, 0x8bc, 0x4325, 0x2}, {0x2, 0x4, 0x6, 0x3, 0xb3, 0xfffffb60}, {0x2, 0x1, 0x605a, 0x5, 0x800, 0x5}, {0x3, 0x23e000, 0xfffffffd, 0x0, 0x4, 0x3ff}, {0x2, 0x7fffffff, 0x7, 0x5, 0x1, 0x9}, {0x7ff, 0x9, 0x5, 0x1, 0xd4, 0x1}, {0x1000, 0x7, 0xfffffb9c, 0x8000, 0x4, 0xf}, {0x3, 0x9, 0x696, 0x8, 0x6, 0x125d}, {0x1, 0x10, 0x7ff, 0x4, 0x9, 0x8f74}, {0x5, 0x0, 0x10001, 0x2, 0x69, 0x9}, {0x6, 0x0, 0xe, 0x1000, 0x0, 0xe6}, {0x53d, 0x5, 0x1, 0x4, 0x200, 0xfffffffd}, {0x7f, 0x9, 0x1, 0x800, 0x9, 0x40}, {0x2, 0xb, 0x4, 0xf, 0x8, 0x2}, {0xffffffff, 0x30, 0xe, 0x5, 0x0, 0x7}, {0x6c, 0x5, 0x0, 0x1, 0x2}, {0xb, 0x6, 0x7, 0x2, 0x8}, {0xfff, 0x9, 0x0, 0xbb, 0x3, 0xfc38}, {0x3, 0x9, 0x2bc, 0x8001, 0x4, 0xc42d}, {0xac4, 0x4, 0x6, 0x6, 0x7, 0x8}, {0x5, 0x9, 0x8, 0x4, 0x8001, 0x83a6}, {0xcc, 0x3, 0xfffffeb7, 0x4, 0x4c4, 0x8001}, {0x3, 0x123ceeba, 0x8, 0x100, 0x1, 0x6}, {0x7a, 0x6, 0x5, 0x6, 0x1, 0x40}, {0x7fffffff, 0x34, 0x4, 0x5, 0x1, 0x4}, {0x8, 0xbd, 0x0, 0x6, 0x8}, {0x3, 0x8, 0x8, 0x8, 0xfff, 0x4}, {0x1, 0xfffff800, 0x8, 0x6, 0x75b, 0x3}, {0x3, 0x5, 0xd85, 0x29, 0x1, 0x6}, {0xffffffff, 0xfffffff7, 0x7ff, 0x8001, 0x2, 0x8}, {0x1, 0x9, 0x4, 0xc2b3, 0x4, 0x9f1}, {0xff, 0x4, 0x9, 0x0, 0x6, 0x6}, {0x2, 0x0, 0x6, 0x200, 0x85d0, 0x74}, {0xffffff90, 0x1ff, 0x5, 0x7fffffff, 0x2, 0xaad0}, {0x5, 0x0, 0x0, 0xffff, 0x1, 0x9}, {0x7, 0x40, 0xa, 0x800, 0x400}, {0x5, 0xffffffff, 0xffff0001, 0x10000, 0x0, 0xd01e}, {0x9, 0xffff37fd, 0x2efe, 0xfffffffa, 0x1ff, 0x1}, {0x7, 0x8, 0x4, 0x8001, 0x3}, {0xf, 0xad8e, 0x8fa, 0x9, 0xfffffff9, 0x8}, {0xe, 0xc70, 0xfff, 0xfffffff8, 0x2}, {0x4, 0xd, 0x0, 0x7, 0x727c, 0x8}, {0x2, 0x5, 0x3, 0x8, 0x1, 0x2}, {0x2, 0x64a, 0x6, 0x2cc952de, 0x1, 0x4}, {0x1ffe00, 0xf296, 0x8, 0x0, 0x81, 0xb5}, {0x400, 0x1ff, 0x2, 0xe4, 0x4, 0xfce00}, {0x4e, 0x9a, 0x1000, 0x8, 0x1ff, 0x9}, {0x4, 0x5, 0x7, 0x9a, 0x6, 0xab7}, {0x8, 0x6, 0xfffff000, 0x2, 0x1, 0x8000}, {0x8000, 0x5, 0x0, 0x781d, 0x10001, 0x7}, {0x10, 0x2, 0xfff, 0x81, 0x51d, 0x8}, {0x7, 0x6, 0x2, 0x6, 0x4, 0x990}, {0x188c1852, 0x8, 0xa, 0x6, 0xe6a8, 0xc}, {0x20000, 0x959, 0x54f6, 0xb4, 0x85, 0x3}, {0x2, 0x38000, 0x9, 0xcb2, 0x7f, 0x4}, {0x6, 0x7fffffff, 0xe, 0xff, 0x7, 0x2}, {0x4, 0x9, 0x6, 0x6, 0x9, 0x2}, {0x5, 0x8000, 0xe, 0x4, 0x7, 0x1}, {0x3, 0xffffff81, 0x2, 0xa3, 0x2, 0x3}, {0x2, 0x1, 0x7, 0x8, 0x5, 0x6}, {0x40a2, 0x5, 0x1, 0x0, 0x9, 0x4a}, {0x2, 0x9, 0x1, 0x6c4, 0x3, 0x400}, {0x7f, 0xc8, 0x0, 0x7, 0x2, 0xaf5}, {0x7ff, 0x7, 0x7fffffff, 0x0, 0x80, 0x390}, {0x1, 0x3, 0xb5a4, 0x10001, 0x10000, 0x9}, {0x2, 0x9ff0, 0x7fff, 0x5, 0x4, 0x6}, {0x2, 0xc, 0x5, 0x3, 0x1, 0x8}, {0xccc, 0x17b8, 0x1, 0x2, 0x0, 0xb8ba}, {0x9, 0x8001, 0x0, 0x3, 0x969f5792, 0x7}, {0xb, 0x9, 0x4, 0x9, 0x0, 0x77}, {0x2, 0xafc, 0x4, 0x3, 0x9, 0x1}, {0x7ff, 0x9, 0xfffffff8, 0x2, 0x8, 0x8}, {0x5, 0x4, 0x1, 0x7fff, 0xd, 0x3}, {0x7, 0x80000001, 0xffff, 0x0, 0x0, 0x4}, {0x3, 0xc, 0xbd, 0x8, 0x0, 0x4}, {0xfffff801, 0x72c, 0x4, 0x7, 0x3e8c, 0x3}, {0x9, 0x5, 0x40, 0xe, 0x2bc1, 0xffffff81}, {0x80000001, 0xa46, 0x0, 0x1000, 0x4, 0x7}, {0x1, 0x2, 0xffffffff, 0x2, 0x3, 0x8000000}, {0x400, 0x2, 0x101, 0x576, 0x401, 0x7fffffff}, {0x75cb, 0x3, 0x2, 0x3, 0xc, 0xd}, {0xcb6, 0x9, 0x6, 0x9, 0xab3, 0xffff}, {0xc, 0x3, 0x6, 0x4, 0xffff, 0xffffffff}, {0x8001, 0x0, 0x2fa4, 0x1, 0x4, 0x3ff}, {0xe380, 0x4, 0x81, 0x5, 0xf, 0xffffffff}, {0x4, 0x2887eff4, 0x6, 0x5, 0x7ff, 0x5}, {0x200, 0x6, 0x0, 0x2, 0x800, 0xfff}, {0xb6, 0x6, 0x7fffffff, 0x53611e27, 0x9, 0x1}, {0x2, 0x8000, 0x2, 0x8, 0x5, 0x6}, {0xa, 0x5, 0x6, 0x3, 0xa4, 0x5}, {0xfffffffb, 0x6, 0x4054, 0x4, 0x6, 0xd9}, {0xfffffff9, 0x7, 0x0, 0xbcf, 0x5, 0x9}, {0x3, 0xda5, 0x7, 0x1, 0x4, 0x5}, {0x400, 0x871, 0x8, 0xc09, 0x1, 0x88d}, {0x2e, 0x80, 0xffff, 0x59a, 0x10000, 0x41c165e}, {0x3, 0x4, 0x1, 0x9, 0x0, 0x7}, {0x1, 0x80, 0xef86, 0x5, 0x10000000, 0x80000000}, {0x9, 0xac2d, 0x9, 0xa, 0x5, 0x8}, {0x59, 0x6, 0xfffffffb, 0x7, 0x48, 0xd}, {0x5, 0x10, 0xf85, 0x7, 0x9, 0x8}, {0x6, 0x7, 0x7, 0x2, 0x8, 0x101}, {0x3030, 0x2, 0xdd0, 0x1, 0x9, 0xfffffffe}, {0x2, 0x7, 0x1000, 0x9, 0x1ff, 0x5}, {0x0, 0xe06a, 0x3, 0x8, 0xe, 0x97fb}, {0x7, 0x9, 0x1, 0xfffffff7, 0x2, 0xd9b}, {0x7, 0x0, 0x2, 0x9, 0x2, 0x6}, {0x7fff, 0x104, 0x200, 0x5e, 0x4d07, 0x7f}, {0xfffffff2, 0xee3, 0x0, 0x6, 0xfff, 0x2}], [{0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x4}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x3}, {}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x4}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0xa19a2f37fc43f3d8}, {0x1, 0x1}, {0x4}, {}, {0x3}, {0x4}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x36d6435f70ccebc3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x6}, {}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x0, 0x2}, {0x1, 0x1}, {0x4}, {0x1}, {}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.327350918s ago: executing program 1 (id=205): mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x7f36, 0x1c080, 0xa, 0x20002f7}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 4.226489071s ago: executing program 0 (id=206): mkdir(0x0, 0x0) creat(0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xd, 0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) 3.100155217s ago: executing program 3 (id=207): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='2', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r7, &(0x7f0000000440)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000940)='dummy_udc.0', 0xb) 2.909114202s ago: executing program 2 (id=208): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.175440009s ago: executing program 2 (id=209): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001400)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/70, 0x0, 0x9000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x3000, 0x1000, &(0x7f0000000400)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(r1, &(0x7f0000000700)='net/sockstat\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) 2.10332741s ago: executing program 1 (id=210): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/image_size', 0x200080, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x110000000097a9, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0xcb9, 0xfffffffe, 0x7, 0x10001, 0xff000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 2.093890911s ago: executing program 0 (id=211): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x46) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000, 0xfffffffffffffffe}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x2, 0x2b}, 0x0, @in6=@remote, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 1.779476108s ago: executing program 1 (id=212): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1af4 1050 ffff', 0xe) 1.568161494s ago: executing program 1 (id=213): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) socketpair(0x15, 0x3, 0x0, &(0x7f0000000100)={0x0, 0x0}) socket$inet(0x2, 0x4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x8a, 0x0, 0x0, 0x0, 0x1) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000180)) write(0xffffffffffffffff, &(0x7f0000000240)='add 2-1', 0x7) close(0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x98f907, 0x2}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2-1\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/usb/drivers/usbip-host/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='2-1', 0x3) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0x25, &(0x7f0000000040)='highspeed', 0x6) close(r4) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/usb/devices/2-1/usbip_sockfd\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='3', 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) 0s ago: executing program 0 (id=214): ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000080)={0x0, 0x0, 0x7fff}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) r1 = syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r3, 0x13}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x30, @mcast1, 0x4}}}, 0x90) writev(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r4, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) io_setup(0x9, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. [ 83.056937][ T5763] cgroup: Unknown subsys name 'net' [ 83.206351][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.940105][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.640413][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.657908][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.665754][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.688524][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.753048][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.761520][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.769315][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.770736][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.783532][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.786279][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.798595][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.811301][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.820264][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.828387][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.835965][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.843591][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.851662][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.855306][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.860830][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.866828][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.875825][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.889247][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.890524][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.906975][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.330313][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.632673][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.648647][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.656108][ T5776] bridge_slave_0: entered allmulticast mode [ 87.664430][ T5776] bridge_slave_0: entered promiscuous mode [ 87.697753][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 87.737567][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.744866][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.757146][ T5776] bridge_slave_1: entered allmulticast mode [ 87.765681][ T5776] bridge_slave_1: entered promiscuous mode [ 87.781581][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 87.857041][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.879675][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.892308][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.983264][ T5776] team0: Port device team_slave_0 added [ 88.015419][ T5776] team0: Port device team_slave_1 added [ 88.083049][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.090302][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.116306][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.129016][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.136249][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.146307][ T5781] bridge_slave_0: entered allmulticast mode [ 88.153809][ T5781] bridge_slave_0: entered promiscuous mode [ 88.162903][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.170310][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.177893][ T5781] bridge_slave_1: entered allmulticast mode [ 88.185361][ T5781] bridge_slave_1: entered promiscuous mode [ 88.198615][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.205764][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.213103][ T5780] bridge_slave_0: entered allmulticast mode [ 88.220482][ T5780] bridge_slave_0: entered promiscuous mode [ 88.229954][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.241346][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.272953][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.320291][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.327644][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.334909][ T5780] bridge_slave_1: entered allmulticast mode [ 88.342578][ T5780] bridge_slave_1: entered promiscuous mode [ 88.380307][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.404133][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.416105][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.426695][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.434277][ T5775] bridge_slave_0: entered allmulticast mode [ 88.444470][ T5775] bridge_slave_0: entered promiscuous mode [ 88.455007][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.477289][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.512407][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.519745][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.526939][ T5775] bridge_slave_1: entered allmulticast mode [ 88.534277][ T5775] bridge_slave_1: entered promiscuous mode [ 88.558647][ T5781] team0: Port device team_slave_0 added [ 88.609569][ T5781] team0: Port device team_slave_1 added [ 88.618664][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.631172][ T5780] team0: Port device team_slave_0 added [ 88.654935][ T5776] hsr_slave_0: entered promiscuous mode [ 88.661656][ T5776] hsr_slave_1: entered promiscuous mode [ 88.683573][ T5780] team0: Port device team_slave_1 added [ 88.702650][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.743155][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.750474][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.777706][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.823758][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.831967][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.858850][ T51] Bluetooth: hci0: command tx timeout [ 88.864728][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.876655][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.886043][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.915199][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.927900][ T51] Bluetooth: hci1: command tx timeout [ 88.934350][ T5775] team0: Port device team_slave_0 added [ 88.943303][ T5775] team0: Port device team_slave_1 added [ 88.985948][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.995883][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.017680][ T51] Bluetooth: hci2: command tx timeout [ 89.030421][ T5787] Bluetooth: hci3: command tx timeout [ 89.036297][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.088915][ T5781] hsr_slave_0: entered promiscuous mode [ 89.095557][ T5781] hsr_slave_1: entered promiscuous mode [ 89.102030][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.110111][ T5781] Cannot create hsr debugfs directory [ 89.123281][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.130663][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.158764][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.172428][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.179517][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.205502][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.266711][ T5780] hsr_slave_0: entered promiscuous mode [ 89.274124][ T5780] hsr_slave_1: entered promiscuous mode [ 89.280625][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.288890][ T5780] Cannot create hsr debugfs directory [ 89.418917][ T5775] hsr_slave_0: entered promiscuous mode [ 89.425638][ T5775] hsr_slave_1: entered promiscuous mode [ 89.432139][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.439829][ T5775] Cannot create hsr debugfs directory [ 89.745446][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.758388][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.781470][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.811018][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.903486][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.918530][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.929056][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.964587][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.009699][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.024591][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.050630][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.062108][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.163405][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.185928][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.198843][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.212766][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.294296][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.383589][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.398359][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.431340][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.469167][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.476845][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.499167][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.511861][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.519085][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.554950][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.565268][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.572509][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.584373][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.591615][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.655936][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.663182][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.719806][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.726965][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.784098][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.843994][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.900858][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.908105][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.928750][ T51] Bluetooth: hci0: command tx timeout [ 90.983822][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.991078][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.018620][ T51] Bluetooth: hci1: command tx timeout [ 91.083555][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.093107][ T51] Bluetooth: hci2: command tx timeout [ 91.099442][ T51] Bluetooth: hci3: command tx timeout [ 91.411787][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.441834][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.582524][ T5776] veth0_vlan: entered promiscuous mode [ 91.605704][ T5781] veth0_vlan: entered promiscuous mode [ 91.622407][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.646491][ T5781] veth1_vlan: entered promiscuous mode [ 91.661298][ T5776] veth1_vlan: entered promiscuous mode [ 91.733856][ T5776] veth0_macvtap: entered promiscuous mode [ 91.747244][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.766802][ T5776] veth1_macvtap: entered promiscuous mode [ 91.779643][ T5780] veth0_vlan: entered promiscuous mode [ 91.813651][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.842670][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.857291][ T5780] veth1_vlan: entered promiscuous mode [ 91.881706][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.893830][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.904325][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.914612][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.942292][ T5781] veth0_macvtap: entered promiscuous mode [ 91.961935][ T5781] veth1_macvtap: entered promiscuous mode [ 92.025689][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.038625][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.051549][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.068436][ T5775] veth0_vlan: entered promiscuous mode [ 92.074745][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.087165][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.102986][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.130477][ T788] cfg80211: failed to load regulatory.db [ 92.147881][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.156646][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.165765][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.175315][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.235602][ T5775] veth1_vlan: entered promiscuous mode [ 92.261353][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.274538][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.286223][ T5780] veth0_macvtap: entered promiscuous mode [ 92.329694][ T5780] veth1_macvtap: entered promiscuous mode [ 92.389957][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.401434][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.406074][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.423179][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.434520][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.445791][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.459339][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.515718][ T5775] veth0_macvtap: entered promiscuous mode [ 92.534799][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.543477][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.562097][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.562987][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.582172][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.592717][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.606219][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.623810][ T5775] veth1_macvtap: entered promiscuous mode [ 92.647260][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.663759][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.674011][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.686582][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.768821][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.781393][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.791274][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.807412][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.827224][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.838697][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.848890][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.864773][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.881788][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.930241][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.941604][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.952234][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.963561][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.975181][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.041481][ T5787] Bluetooth: hci0: command tx timeout [ 93.057520][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.088364][ T5787] Bluetooth: hci1: command tx timeout [ 93.112774][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.167931][ T5787] Bluetooth: hci3: command tx timeout [ 93.173406][ T5787] Bluetooth: hci2: command tx timeout [ 93.227036][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.241672][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.254169][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.273268][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.364284][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.384814][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.538033][ T5853] program syz.1.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.646569][ T5852] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.226310][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.326668][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.348121][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.355967][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.433096][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.464955][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.779984][ T5866] ªªªªªª: renamed from vlan0 (while UP) [ 94.803264][ T5867] syz.0.1[5867]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.919801][ T5867] dvmrp8: entered allmulticast mode [ 95.087627][ T5787] Bluetooth: hci0: command tx timeout [ 95.179286][ T5787] Bluetooth: hci1: command tx timeout [ 95.247542][ T5787] Bluetooth: hci2: command tx timeout [ 95.451014][ T5844] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 95.683002][ T5844] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 95.712759][ T5844] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 95.853515][ T5844] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.882429][ T5890] Invalid ELF header magic: != ELF [ 95.914906][ T5844] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 95.935494][ T5844] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 95.975079][ T5844] usb 2-1: config 168 interface 0 has no altsetting 0 [ 96.067794][ T5844] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 96.092569][ T5844] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 96.132795][ T5844] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.165055][ T5844] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 96.217759][ T5844] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 96.264364][ T5844] usb 2-1: config 168 interface 0 has no altsetting 0 [ 96.285623][ T5844] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 96.302269][ T5844] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 96.315445][ T5844] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.339486][ T5844] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 96.380327][ T5844] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 96.414867][ T5844] usb 2-1: config 168 interface 0 has no altsetting 0 [ 96.457925][ T5844] usb 2-1: string descriptor 0 read error: -22 [ 96.471320][ T5844] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 96.486710][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.561890][ T5844] adutux 2-1:168.0: interrupt endpoints not found [ 96.709186][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 96.752244][ T5912] Zero length message leads to an empty skb [ 96.791588][ T5861] usb 2-1: USB disconnect, device number 2 [ 96.800199][ T5904] nlmon0: entered promiscuous mode [ 96.805562][ T5904] nlmon0: entered allmulticast mode [ 97.173529][ T5916] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 98.169154][ T5927] autofs4:pid:5927:autofs_fill_super: called with bogus options [ 99.818030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 100.558339][ T5922] Invalid ELF header magic: != ELF [ 100.812145][ T5933] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 101.272979][ T5943] warning: `syz.1.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.718337][ T5995] Invalid ELF header magic: != ELF [ 108.515961][ T6025] cgroup: release_agent respecified [ 109.073073][ T6025] input: syz0 as /devices/virtual/input/input5 [ 115.037723][ T6067] Invalid ELF header magic: != ELF [ 117.978048][ T6078] binder: 6076:6078 ioctl 400c620e 0 returned -14 [ 118.298060][ T6080] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.70' sets config #24 [ 118.866571][ T6094] tipc: Started in network mode [ 118.885173][ T6094] tipc: Node identity 2ec505af0741, cluster identity 4711 [ 118.923284][ T6094] tipc: Enabled bearer , priority 0 [ 118.963923][ T6094] syzkaller0: entered promiscuous mode [ 118.986312][ T6094] syzkaller0: entered allmulticast mode [ 119.120610][ T6094] tipc: Resetting bearer [ 119.248982][ T6093] tipc: Resetting bearer [ 120.574695][ T6093] tipc: Disabling bearer [ 120.688001][ T788] tipc: Node number set to 696518063 [ 120.824581][ T6100] Invalid ELF header magic: != ELF [ 121.387031][ T6122] team0: Device xfrm0 is of different type [ 121.467647][ T6127] tipc: Started in network mode [ 121.489070][ T6127] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 121.506190][ T6127] tipc: Enabled bearer , priority 0 [ 121.566303][ T6122] syz.3.84 (6122) used greatest stack depth: 20336 bytes left [ 122.106683][ T6135] kvm: pic: level sensitive irq not supported [ 122.106988][ T6135] kvm: pic: non byte read [ 122.466629][ T6139] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 122.497686][ T5844] tipc: Node number set to 11578026 [ 123.088461][ T6154] usb usb2: usbfs: process 6154 (syz.2.93) did not claim interface 0 before use [ 123.103893][ T6148] TCP: TCP_TX_DELAY enabled [ 123.604239][ T6149] Invalid ELF header magic: != ELF [ 125.040223][ T6180] db_root: cannot open: ./my_ [ 125.302633][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.104'. [ 125.517685][ T6193] syz.0.105 uses obsolete (PF_INET,SOCK_PACKET) [ 125.547248][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 126.702731][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'. [ 126.903135][ T6202] Invalid ELF header magic: != ELF [ 127.656212][ T6212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.112'. [ 127.730745][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 128.335628][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 128.400859][ T6239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.477767][ T6236] bond1: entered promiscuous mode [ 128.488271][ T6232] Invalid ELF header magic: != ELF [ 128.505240][ T6236] bond1: entered allmulticast mode [ 128.668023][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'. [ 131.258622][ T6298] program syz.0.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.388968][ T6298] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 132.102729][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.111677][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.063988][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.092246][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.100058][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.112067][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.315770][ T6275] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.333546][ T6275] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.345305][ T6275] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.357366][ T6275] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.482657][ T6300] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 133.495637][ T6300] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 133.612608][ T6310] syz.3.140: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 133.650496][ T6310] CPU: 0 PID: 6310 Comm: syz.3.140 Not tainted syzkaller #0 [ 133.657865][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 133.667981][ T6310] Call Trace: [ 133.671304][ T6310] [ 133.674279][ T6310] dump_stack_lvl+0x18c/0x250 [ 133.679035][ T6310] ? show_regs_print_info+0x20/0x20 [ 133.684293][ T6310] ? load_image+0x420/0x420 [ 133.688860][ T6310] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 133.695346][ T6310] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 133.701886][ T6310] warn_alloc+0x246/0x340 [ 133.706251][ T6310] ? zone_watermark_ok_safe+0x230/0x230 [ 133.711851][ T6310] ? _raw_spin_unlock+0x28/0x40 [ 133.716776][ T6310] __vmalloc_node_range+0x661/0x1320 [ 133.722119][ T6310] ? __asan_memset+0x22/0x40 [ 133.726773][ T6310] ? free_vm_area+0x50/0x50 [ 133.731316][ T6310] ? rcu_is_watching+0x15/0xb0 [ 133.736114][ T6310] ? kvmalloc_node+0x70/0x180 [ 133.740829][ T6310] ? trace_kmalloc+0x1f/0xa0 [ 133.745463][ T6310] kvmalloc_node+0x13f/0x180 [ 133.750097][ T6310] ? xp_create_and_assign_umem+0x173/0xbf0 [ 133.755938][ T6310] xp_create_and_assign_umem+0x173/0xbf0 [ 133.761615][ T6310] ? dev_get_by_index+0x22/0x2d0 [ 133.766585][ T6310] xsk_bind+0x30f/0xc50 [ 133.770814][ T6310] __sys_bind+0x2f0/0x3f0 [ 133.775175][ T6310] ? __ia32_sys_socketpair+0xb0/0xb0 [ 133.780495][ T6310] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 133.786452][ T6310] __x64_sys_bind+0x7a/0x90 [ 133.790988][ T6310] do_syscall_64+0x55/0xb0 [ 133.795435][ T6310] ? clear_bhb_loop+0x40/0x90 [ 133.800145][ T6310] ? clear_bhb_loop+0x40/0x90 [ 133.804873][ T6310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.810822][ T6310] RIP: 0033:0x7ff35c99de99 [ 133.815271][ T6310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.834907][ T6310] RSP: 002b:00007ff35d7fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 133.843352][ T6310] RAX: ffffffffffffffda RBX: 00007ff35cc26270 RCX: 00007ff35c99de99 [ 133.851379][ T6310] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 133.859742][ T6310] RBP: 00007ff35ca33eaf R08: 0000000000000000 R09: 0000000000000000 [ 133.867778][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.875796][ T6310] R13: 00007ff35cc26308 R14: 00007ff35cc26270 R15: 00007ffd2decbed8 [ 133.883903][ T6310] [ 133.890459][ T6310] Mem-Info: [ 133.893738][ T6310] active_anon:6069 inactive_anon:0 isolated_anon:0 [ 133.893738][ T6310] active_file:4494 inactive_file:39963 isolated_file:0 [ 133.893738][ T6310] unevictable:768 dirty:138 writeback:0 [ 133.893738][ T6310] slab_reclaimable:9942 slab_unreclaimable:90943 [ 133.893738][ T6310] mapped:25729 shmem:1362 pagetables:543 [ 133.893738][ T6310] sec_pagetables:0 bounce:0 [ 133.893738][ T6310] kernel_misc_reclaimable:0 [ 133.893738][ T6310] free:1349716 free_pcp:9326 free_cma:0 [ 134.020755][ T6310] Node 0 active_anon:24276kB inactive_anon:0kB active_file:17976kB inactive_file:159652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102916kB dirty:552kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11292kB pagetables:2272kB sec_pagetables:0kB all_unreclaimable? no [ 134.048322][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 134.067566][ T6310] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 134.126590][ T6323] netlink: 68 bytes leftover after parsing attributes in process `syz.1.143'. [ 134.138388][ T6310] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.279008][ T6310] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 134.358244][ T6310] Node 0 DMA32 free:1485764kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:33892kB inactive_anon:0kB active_file:17976kB inactive_file:158824kB unevictable:1536kB writepending:568kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:15096kB local_pcp:12108kB free_cma:0kB [ 135.604600][ T6310] lowmem_reserve[]: 0 0 0 0 0 [ 135.609625][ T6310] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.667202][ T6310] lowmem_reserve[]: 0 0 0 0 0 [ 135.672454][ T6310] Node 1 Normal free:3895028kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15516kB local_pcp:6624kB free_cma:0kB [ 135.717898][ T6310] lowmem_reserve[]: 0 0 0 0 0 [ 135.722912][ T6310] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 135.738434][ T6310] Node 0 DMA32: 10*4kB (ME) 22*8kB (UME) 1*16kB (U) 6*32kB (UME) 10*64kB (ME) 3*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 3*2048kB (UME) 337*4096kB (M) = 1391528kB [ 135.756393][ T6310] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 135.771613][ T6310] Node 1 Normal: 235*4kB (UME) 15*8kB (UME) 47*16kB (UME) 53*32kB (UME) 19*64kB (UME) 7*128kB (UME) 3*256kB (UM) 1*512kB (E) 1*1024kB (U) 2*2048kB (UE) 948*4096kB (M) = 3895028kB [ 136.621703][ T6310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.650311][ T6310] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.661762][ T6310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.677921][ T6310] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.687876][ T6310] 74260 total pagecache pages [ 136.692627][ T6310] 0 pages in swap cache [ 136.696818][ T6310] Free swap = 124996kB [ 136.701737][ T6310] Total swap = 124996kB [ 136.705950][ T6310] 2097051 pages RAM [ 136.709866][ T6310] 0 pages HighMem/MovableOnly [ 136.714578][ T6310] 416955 pages reserved [ 136.718951][ T6310] 0 pages cma reserved [ 137.909041][ T6347] program syz.3.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.034329][ T6347] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 139.139812][ T6353] tipc: Enabled bearer , priority 0 [ 139.175081][ T6353] syzkaller0: entered promiscuous mode [ 139.192741][ T6353] syzkaller0: entered allmulticast mode [ 139.303252][ T6353] tipc: Resetting bearer [ 140.161379][ T6352] tipc: Resetting bearer [ 140.220594][ T6352] tipc: Disabling bearer [ 140.494071][ T6359] netlink: 'syz.1.154': attribute type 3 has an invalid length. [ 140.511541][ T6359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.154'. [ 144.188277][ T6382] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 144.923967][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.931983][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.192298][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.389026][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.197539][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 147.467460][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 147.483895][ T8] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 147.504802][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.545444][ T8] usb 3-1: config 0 descriptor?? [ 147.608196][ T8] as10x_usb: device has been detected [ 147.628374][ T8] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 147.708593][ T8] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 147.791866][ T8] as10x_usb: error during firmware upload part1 [ 147.809306][ T8] Registered device nBox DVB-T Dongle [ 147.897826][ T6368] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.973320][ T6368] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.991153][ T8] usb 3-1: USB disconnect, device number 2 [ 147.998605][ T6391] as102_open: can't find device for minor 0 [ 148.008455][ T6368] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.032949][ T6368] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.053935][ T8] Unregistered device nBox DVB-T Dongle [ 148.069930][ T8] as10x_usb: device has been disconnected [ 148.793587][ T6399] netlink: 44 bytes leftover after parsing attributes in process `syz.0.163'. [ 148.999465][ T6403] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 149.006481][ T6403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.065900][ T6408] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 149.085181][ T6403] vhci_hcd vhci_hcd.0: Device attached [ 149.337570][ T6297] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 149.365252][ T6408] bond1: option mode: invalid value (17) [ 149.415975][ T6408] bond1 (unregistering): Released all slaves [ 149.616860][ T6413] ======================================================= [ 149.616860][ T6413] WARNING: The mand mount option has been deprecated and [ 149.616860][ T6413] and is ignored by this kernel. Remove the mand [ 149.616860][ T6413] option from the mount to silence this warning. [ 149.616860][ T6413] ======================================================= [ 150.088916][ T6406] vhci_hcd: connection reset by peer [ 150.136072][ T49] vhci_hcd: stop threads [ 150.157274][ T49] vhci_hcd: release socket [ 150.188635][ T49] vhci_hcd: disconnect device [ 154.457506][ T6297] vhci_hcd: vhci_device speed not set [ 155.912911][ T6451] tipc: Enabled bearer , priority 0 [ 155.967750][ T6464] netlink: 44 bytes leftover after parsing attributes in process `syz.1.176'. [ 156.012415][ T6461] syzkaller0: entered promiscuous mode [ 156.034873][ T6461] syzkaller0: entered allmulticast mode [ 156.088495][ T6470] tipc: Resetting bearer [ 156.129192][ T6446] tipc: Resetting bearer [ 156.156159][ T6478] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 156.162845][ T6478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.182656][ T6478] vhci_hcd vhci_hcd.0: Device attached [ 156.193126][ T6479] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 156.204222][ T1117] vhci_hcd: stop threads [ 156.209159][ T1117] vhci_hcd: release socket [ 156.214089][ T1117] vhci_hcd: disconnect device [ 156.238443][ T6446] tipc: Disabling bearer [ 156.264206][ T6478] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 156.337953][ T6478] bond1: option mode: invalid value (16) [ 156.363816][ T6478] bond1 (unregistering): Released all slaves [ 158.251176][ T6493] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 158.787713][ T6297] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 159.037114][ T6297] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.048617][ T6499] netlink: 256 bytes leftover after parsing attributes in process `syz.2.184'. [ 159.063020][ T6297] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 159.077530][ T6499] netlink: 56 bytes leftover after parsing attributes in process `syz.2.184'. [ 159.088922][ T6297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 159.104705][ T6297] usb 2-1: Product: syz [ 159.110832][ T6297] usb 2-1: Manufacturer: syz [ 159.129766][ T6297] usb_debug 2-1:1.0: debug converter detected [ 159.164640][ T6297] usb 2-1: debug converter now attached to ttyUSB0 [ 159.471171][ T6285] usb 2-1: USB disconnect, device number 3 [ 159.488925][ T6285] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 159.511631][ T6285] usb_debug 2-1:1.0: device disconnected [ 160.260144][ T6520] netlink: 44 bytes leftover after parsing attributes in process `syz.3.187'. [ 160.339969][ T6527] tipc: Started in network mode [ 160.344991][ T6527] tipc: Node identity 9a3117e3c697, cluster identity 4711 [ 160.372748][ T6527] tipc: Enabled bearer , priority 0 [ 160.395140][ T6527] syzkaller0: entered promiscuous mode [ 160.407853][ T6527] syzkaller0: entered allmulticast mode [ 160.448210][ T6527] tipc: Resetting bearer [ 161.257462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 162.278460][ T6526] tipc: Resetting bearer [ 162.469063][ T6526] tipc: Disabling bearer [ 162.641768][ T9] tipc: Node number set to 1554388963 [ 163.097257][ T6539] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 163.477428][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 163.794145][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 163.947583][ T9] usb 1-1: device descriptor read/64, error -32 [ 164.457693][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 164.897997][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 164.940584][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 164.967985][ T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 164.991315][ T9] usb 1-1: Product: syz [ 165.000109][ T9] usb 1-1: Manufacturer: syz [ 165.004779][ T9] usb 1-1: SerialNumber: syz [ 165.062710][ T9] usb 1-1: config 0 descriptor?? [ 165.484030][ T6285] usb 1-1: USB disconnect, device number 3 [ 165.645199][ T6555] netlink: 72 bytes leftover after parsing attributes in process `syz.3.190'. [ 168.333513][ T6582] netlink: 72 bytes leftover after parsing attributes in process `syz.0.204'. [ 171.437431][ T6285] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 171.618537][ T6285] usb 1-1: Dual-Role OTG device on HNP port [ 171.680000][ T6285] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 171.710745][ T6285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.754022][ T6285] gspca_main: spca501-2.14.0 probing 0000:0000 [ 173.002339][ T6285] gspca_spca501: reg write: error -32 [ 173.008632][ T6285] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 173.016291][ T6285] spca501: probe of 1-1:1.0 failed with error -22 [ 173.041808][ C1] general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] PREEMPT SMP KASAN [ 173.053559][ C1] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 173.061974][ C1] CPU: 1 PID: 6285 Comm: kworker/1:9 Not tainted syzkaller #0 [ 173.069436][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 173.079524][ C1] Workqueue: usb_hub_wq hub_event [ 173.084617][ C1] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 173.090309][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 173.109953][ C1] RSP: 0018:ffffc900001f0840 EFLAGS: 00010002 [ 173.116033][ C1] RAX: 00000000000000e6 RBX: ffff88805fe5c120 RCX: ffff88802d8a1e00 [ 173.124033][ C1] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 173.132012][ C1] RBP: ffff88805fe5c100 R08: 0000000000000000 R09: 00000000eed9a316 [ 173.140009][ C1] R10: 000000005c29093d R11: 0000000000000100 R12: ffff88805fe5c730 [ 173.147996][ C1] R13: dffffc0000000000 R14: ffff88805fe5c128 R15: 0000000000000730 [ 173.155994][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 173.164928][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.171562][ C1] CR2: 0000200000237030 CR3: 0000000064b66000 CR4: 00000000003506e0 [ 173.179551][ C1] Call Trace: [ 173.182833][ C1] [ 173.185685][ C1] f_midi2_set_alt+0x100/0x800 [ 173.190496][ C1] composite_setup+0x1ffe/0x33a0 [ 173.195474][ C1] configfs_composite_setup+0xc7/0x100 [ 173.200942][ C1] dummy_timer+0x1309/0x3420 [ 173.205578][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 173.210611][ C1] ? lock_chain_count+0x20/0x20 [ 173.215477][ C1] ? dummy_free_streams+0x520/0x520 [ 173.220700][ C1] ? dummy_free_streams+0x520/0x520 [ 173.225901][ C1] __hrtimer_run_queues+0x525/0xc10 [ 173.231113][ C1] ? hrtimer_interrupt+0x980/0x980 [ 173.236244][ C1] ? read_tsc+0x9/0x20 [ 173.240341][ C1] hrtimer_run_softirq+0x177/0x290 [ 173.245469][ C1] handle_softirqs+0x27d/0x820 [ 173.250248][ C1] ? read_tsc+0x9/0x20 [ 173.254346][ C1] ? ktime_get+0x24b/0x280 [ 173.258775][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 173.263542][ C1] ? do_softirq+0x1a0/0x1a0 [ 173.268053][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 173.273260][ C1] __irq_exit_rcu+0xd3/0x190 [ 173.277856][ C1] ? irq_exit_rcu+0x20/0x20 [ 173.282366][ C1] irq_exit_rcu+0x9/0x20 [ 173.286618][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 173.292262][ C1] [ 173.295196][ C1] [ 173.298135][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.304136][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 173.310649][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2b 5f c6 f6 65 8b 05 9c 2d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 173.330261][ C1] RSP: 0018:ffffc9000fd46880 EFLAGS: 00000206 [ 173.336351][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: f1c32fb0a9ca1900 [ 173.344337][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 173.352320][ C1] RBP: ffffc9000fd46910 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 173.360307][ C1] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: dffffc0000000000 [ 173.368284][ C1] R13: dffffc0000000000 R14: ffff888025500000 R15: 1ffff92001fa8d10 [ 173.376278][ C1] ? _raw_spin_unlock+0x40/0x40 [ 173.381160][ C1] ? kobject_get+0xcc/0x120 [ 173.385677][ C1] dummy_urb_enqueue+0x587/0x780 [ 173.390634][ C1] usb_hcd_submit_urb+0x318/0x1aa0 [ 173.395755][ C1] ? __init_swait_queue_head+0xa8/0x140 [ 173.401334][ C1] usb_start_wait_urb+0x140/0x580 [ 173.406381][ C1] ? usb_api_blocking_completion+0xb0/0xb0 [ 173.412208][ C1] usb_control_msg+0x235/0x3e0 [ 173.417001][ C1] usb_set_interface+0x51f/0x13f0 [ 173.422040][ C1] snd_usb_midi_v2_create+0x62f/0x48a0 [ 173.427507][ C1] ? proc_audio_usbbus_read+0x170/0x170 [ 173.433059][ C1] ? snd_card_rw_proc_new+0x10d/0x130 [ 173.438464][ C1] ? validate_midi_out_jack+0xb0/0xb0 [ 173.443865][ C1] ? usb_ifnum_to_if+0x262/0x2e0 [ 173.448846][ C1] snd_usb_create_stream+0x262/0x5d0 [ 173.454168][ C1] usb_audio_probe+0xead/0x1f00 [ 173.459037][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 173.464075][ C1] ? snd_usb_autosuspend+0x1c0/0x1c0 [ 173.469368][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 173.475288][ C1] usb_probe_interface+0x5c2/0xaf0 [ 173.480416][ C1] ? usb_register_driver+0x3c0/0x3c0 [ 173.485713][ C1] really_probe+0x247/0xae0 [ 173.490230][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 173.495442][ C1] __driver_probe_device+0x1f5/0x390 [ 173.500742][ C1] driver_probe_device+0x4f/0x420 [ 173.505778][ C1] __device_attach_driver+0x2ca/0x510 [ 173.511162][ C1] bus_for_each_drv+0x252/0x2e0 [ 173.516023][ C1] ? coredump_store+0x90/0x90 [ 173.520714][ C1] ? bus_find_device+0x300/0x300 [ 173.525682][ C1] __device_attach+0x2c1/0x420 [ 173.530457][ C1] ? device_attach+0x20/0x20 [ 173.535072][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 173.540297][ C1] bus_probe_device+0x180/0x260 [ 173.545170][ C1] device_add+0x87c/0xc40 [ 173.549554][ C1] usb_set_configuration+0x1ad0/0x2150 [ 173.555044][ C1] usb_generic_driver_probe+0x8d/0x150 [ 173.560526][ C1] usb_probe_device+0x12a/0x260 [ 173.565404][ C1] ? usb_register_device_driver+0x230/0x230 [ 173.571311][ C1] really_probe+0x247/0xae0 [ 173.575849][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 173.581072][ C1] __driver_probe_device+0x1f5/0x390 [ 173.586388][ C1] driver_probe_device+0x4f/0x420 [ 173.591432][ C1] __device_attach_driver+0x2ca/0x510 [ 173.596815][ C1] bus_for_each_drv+0x252/0x2e0 [ 173.601678][ C1] ? coredump_store+0x90/0x90 [ 173.606362][ C1] ? bus_find_device+0x300/0x300 [ 173.611313][ C1] __device_attach+0x2c1/0x420 [ 173.616083][ C1] ? device_attach+0x20/0x20 [ 173.620676][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 173.625712][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 173.630920][ C1] bus_probe_device+0x180/0x260 [ 173.635791][ C1] device_add+0x87c/0xc40 [ 173.640144][ C1] usb_new_device+0x995/0x1550 [ 173.644913][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 173.649770][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.654994][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 173.660204][ C1] hub_event+0x29d5/0x4a80 [ 173.664648][ C1] ? hub_post_resume+0x120/0x120 [ 173.669586][ C1] ? read_lock_is_recursive+0x20/0x20 [ 173.674984][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.680195][ C1] ? process_scheduled_works+0x975/0x1600 [ 173.685923][ C1] ? process_scheduled_works+0x975/0x1600 [ 173.691659][ C1] process_scheduled_works+0xa60/0x1600 [ 173.697239][ C1] ? worker_attach_to_pool+0x370/0x370 [ 173.702705][ C1] ? assign_work+0x3cc/0x5d0 [ 173.707325][ C1] worker_thread+0xa5e/0xfe0 [ 173.711947][ C1] kthread+0x2fa/0x390 [ 173.716032][ C1] ? pr_cont_work+0x550/0x550 [ 173.720713][ C1] ? kthread_blkcg+0xd0/0xd0 [ 173.725334][ C1] ret_from_fork+0x48/0x80 [ 173.729761][ C1] ? kthread_blkcg+0xd0/0xd0 [ 173.734353][ C1] ret_from_fork_asm+0x11/0x20 [ 173.739224][ C1] [ 173.742271][ C1] Modules linked in: [ 173.746183][ C1] ---[ end trace 0000000000000000 ]--- [ 173.751667][ C1] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 173.757347][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 173.776977][ C1] RSP: 0018:ffffc900001f0840 EFLAGS: 00010002 [ 173.783052][ C1] RAX: 00000000000000e6 RBX: ffff88805fe5c120 RCX: ffff88802d8a1e00 [ 173.791069][ C1] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 173.799061][ C1] RBP: ffff88805fe5c100 R08: 0000000000000000 R09: 00000000eed9a316 [ 173.807032][ C1] R10: 000000005c29093d R11: 0000000000000100 R12: ffff88805fe5c730 [ 173.815009][ C1] R13: dffffc0000000000 R14: ffff88805fe5c128 R15: 0000000000000730 [ 173.822984][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 173.831936][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.838533][ C1] CR2: 0000200000237030 CR3: 0000000064b66000 CR4: 00000000003506e0 [ 173.846528][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 173.854288][ C1] Kernel Offset: disabled [ 173.858620][ C1] Rebooting in 86400 seconds..