last executing test programs: 5.597677557s ago: executing program 3 (id=4): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r2], 0xfdef) 5.323630764s ago: executing program 2 (id=3): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg$can_bcm(r2, 0x0, 0x10000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10) 5.295416704s ago: executing program 3 (id=5): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000480)=ANY=[], 0x0, 0x0}) 5.256874105s ago: executing program 1 (id=2): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299583dd996ddbf2923", 0x10}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0) recvmsg$can_bcm(r2, 0x0, 0x10000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10) 4.692918529s ago: executing program 0 (id=1): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000280)={[{@nojoliet}, {@uid}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {}, {@check_relaxed}, {@check_relaxed}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$eJzs3dtuE0kawPGvQ7JYXim7WlYIRQGKsCsFKZi2DUYWV73tslNgd1vdbZRcoYg4KMKBFWGlTW7Y3LAz0sxDMJfzEPNGaB5hRn1wjj4AOU70/1lQ5e5y1deO1Z8qcVcLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy63ZdtGSpvE6S2o4txb4rb2n2auPbJB7B4oR44pY8T/J5eRGuunG3/d2X4//m5PZ9Nms5OIiJ9t/vv7XJ9cmJ/qvHxHwV/npG3va3Np+vdLrdd+dVCAX0M2rw/c1tGdC37SchlYm9FW1UrEfLNZDVTdNHS6HkW4pN9BO5Adq3r2nitVqWenCst/xGjWnqfsbH98v2XZFPS20tROEvvfgaSF0F02zabxG0ibeHbd5HH8Qn5lIRdppKbW23uuWxx1A3Kj4JY1K4xqV7FKpWCyVipVH1UePbXvyyAb7EDnS4uQ+tPhjOsGzN3A8E1n+l6YY8aQjS6IGPlypSSC+tIbsz/Tz/z8f6JHj7s///Sx/Y2/3jCT5/1b67Naw/D8klrN7bMqWbMtrWZGe9KQr7849orN9NESLJ0ZC8cVIS5xki8q2KKlKRSpiywtZlPpU/EOsi5GmaAllWUKJRCefKFcC0eJIJL4EomReXLknSopSlaqURYmWgiyLLx3xpCE1cZJe1mQ9ed/LoqxhMe42Kg49jHz/c9eV0oijJf/j+E7y9A0cy2/9/A8AAAAAAC4tK/ntezz/n5KbSa1umto+77AAAAAAAMAJSv7yPxsXybezborF/B8AAAAAgMvGSq6xs0QkL7fT2ppYyeVS/BIAAAAAAIBLIvn7/624SNZAuS3W7nIpzP8BAAAAALgkvhu7xn7Yvmr98qsEwZS10176h7WRrM3rbFxJX3flcI9RfcaazjpJikpaTE66etbKpY12F8H8nBVr4+Kw9gJwdgP439cEcG1SfpA7aZs7q2m5mu35SzpKvm6auuD6zSdFcZzpiUgvRf95s/5fSQ7/e681beVkvdctvHzbW01i2Yl72dnIFlA8so7iiFjeJ+stJNdcDDziqeRCjGzcvCVr672u3V66mvXsbEyklYmDI36YHjHmR5lLW81lK97m+3vSMXPxmMXCsKPPoige88g/yt20zd35u2kxIIrSuChK+6MY/F4cP4ryuCjKx4wCAM7L2pgsZMmRvPsNZ7lvy+7yldn9o8ynbeZnkhPr5MyAM7o97oxuHzO7/XzkHkjDcmw87o+Hsuqn+AWfho4bNktW/BZeeb/xb7m+ubV9f31j5VX3VfdNqVSu2A9t+1FJppLDyApyDwBggP332LEG5v+xd+GxHmaz6p3Ds+os4/1t9ysFBXkpb6Unq7KQXG2QfONgYK/5fV9DWBgza80naTK9w8vCiFndn5KrHPr9lka2PRhD+Sx+FAAAnJm5MXn4S/L/wph598FcPnp2nN93tzYAAHA6dPDZykf/t4LAtF8Uq9WiEy1qFfjuMxWYWkMr40U6cBcdr6FVO/Aj3/WbceW5qelQhZ122w8iVfcD1fZDs5QsH6iyW7+HuuV4kXHDdlM7oVau70WOG6maCV3V7vyracJFHSQvDtvaNXXjOpHxPRX6ncDVBaVCrfc1NDXtRaZu4qqn2oFpOUFOPfebnZZWNR26gWlHftphfyzj1f2glXRbOO83GwCAC2Jza/v1Sq/XfXeKlYED5878UAEAQGZMlgYAAAAAAAAAAAAAAAAAAAAAABfAWVz/R+WSV/pLQV+UeKicQGXsqePDqZ+cAJyq3wMAAP//5sZO5Q==") syz_open_procfs(0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f00000000c0)='bfs\x00', 0x1) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 4.077139464s ago: executing program 2 (id=6): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x80000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141a42, 0x15) pwrite64(r0, &(0x7f0000000100)='\b', 0x1, 0x9400) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 4.055466474s ago: executing program 1 (id=7): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a8", 0x0, 0xfb, 0x60006000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x13) 3.924878377s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='2', 0x1) write(0xffffffffffffffff, &(0x7f0000000440)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000006c0)='6', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') 3.486050318s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='2', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='2', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000940)='dummy_udc.0', 0xb) 3.211988084s ago: executing program 0 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) 2.97638385s ago: executing program 2 (id=11): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r2], 0xfdef) 2.915602191s ago: executing program 0 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.164836602s ago: executing program 0 (id=13): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x301040, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8ca}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = getpid() sched_setaffinity(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4048850) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x1e000, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0xd007) 1.076118265s ago: executing program 3 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0xcc89, 0x80, 0x1024002, 0x1e7}, &(0x7f0000000000)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, 0x0, r5, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r3, r4, 0x0, r5, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2008, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x2000000, &(0x7f00000015c0)={[{@redirect_dir_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}], [{@smackfshat={'smackfshat', 0x3d, ',,*]}-1'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) r7 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r8, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x6, 0x3, 0x4, 0x0, 0x1, '&'}, 0xa, 0x1) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000014c0)=0xb) syz_mount_image$fuse(&(0x7f0000000180), 0x0, 0x40082, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB, @ANYRESDEC, @ANYRESDEC=0xee01, @ANYBLOB=',\x00'], 0x0, 0x0, &(0x7f0000000480)="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") 0s ago: executing program 3 (id=15): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299583dd996ddbf2923", 0x10}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 67.323828][ T5758] cgroup: Unknown subsys name 'net' [ 67.459255][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.822613][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.201297][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.223315][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.232158][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.240114][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.244410][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.248148][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.256099][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.269870][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.272539][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.277877][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.292751][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.300089][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.312723][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.315955][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.319919][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.335109][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.335275][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.353170][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.356794][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.368022][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.372879][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.382344][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.382974][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.398190][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.730071][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 70.857124][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 70.887573][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 70.936839][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 70.964102][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.971725][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.979575][ T5771] bridge_slave_0: entered allmulticast mode [ 70.986357][ T5771] bridge_slave_0: entered promiscuous mode [ 70.996248][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.003407][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.010558][ T5771] bridge_slave_1: entered allmulticast mode [ 71.017634][ T5771] bridge_slave_1: entered promiscuous mode [ 71.090897][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.120537][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.151753][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.159042][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.166703][ T5770] bridge_slave_0: entered allmulticast mode [ 71.174098][ T5770] bridge_slave_0: entered promiscuous mode [ 71.188050][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.195379][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.204805][ T5770] bridge_slave_1: entered allmulticast mode [ 71.211421][ T5770] bridge_slave_1: entered promiscuous mode [ 71.278257][ T5771] team0: Port device team_slave_0 added [ 71.287284][ T5771] team0: Port device team_slave_1 added [ 71.294345][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.301452][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.309912][ T5772] bridge_slave_0: entered allmulticast mode [ 71.317795][ T5772] bridge_slave_0: entered promiscuous mode [ 71.334938][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.342085][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.349343][ T5769] bridge_slave_0: entered allmulticast mode [ 71.358377][ T5769] bridge_slave_0: entered promiscuous mode [ 71.366114][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.373390][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.380569][ T5769] bridge_slave_1: entered allmulticast mode [ 71.387771][ T5769] bridge_slave_1: entered promiscuous mode [ 71.411522][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.418737][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.429852][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.433958][ T5772] bridge_slave_1: entered allmulticast mode [ 71.436461][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.451682][ T5772] bridge_slave_1: entered promiscuous mode [ 71.461282][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.472959][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.490352][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.497372][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.524101][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.570321][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.577408][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.603489][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.627602][ T5770] team0: Port device team_slave_0 added [ 71.637018][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.654275][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.665600][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.678943][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.689501][ T5770] team0: Port device team_slave_1 added [ 71.757736][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.764799][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.791361][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.807576][ T5769] team0: Port device team_slave_0 added [ 71.816002][ T5772] team0: Port device team_slave_0 added [ 71.823653][ T5769] team0: Port device team_slave_1 added [ 71.848173][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.855311][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.881269][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.894071][ T5772] team0: Port device team_slave_1 added [ 71.923100][ T5771] hsr_slave_0: entered promiscuous mode [ 71.929629][ T5771] hsr_slave_1: entered promiscuous mode [ 71.962866][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.969836][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.996021][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.008315][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.017126][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.043223][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.071225][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.078835][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.105175][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.141986][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.150713][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.179060][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.202052][ T5770] hsr_slave_0: entered promiscuous mode [ 72.208290][ T5770] hsr_slave_1: entered promiscuous mode [ 72.215308][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.223167][ T5770] Cannot create hsr debugfs directory [ 72.278642][ T5772] hsr_slave_0: entered promiscuous mode [ 72.284944][ T5772] hsr_slave_1: entered promiscuous mode [ 72.290932][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.299501][ T5772] Cannot create hsr debugfs directory [ 72.337009][ T5769] hsr_slave_0: entered promiscuous mode [ 72.343629][ T5769] hsr_slave_1: entered promiscuous mode [ 72.349716][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.357861][ T5769] Cannot create hsr debugfs directory [ 72.383434][ T5776] Bluetooth: hci1: command tx timeout [ 72.462740][ T5774] Bluetooth: hci3: command tx timeout [ 72.468536][ T5777] Bluetooth: hci2: command tx timeout [ 72.474578][ T5776] Bluetooth: hci0: command tx timeout [ 72.711368][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.725988][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.736191][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.747961][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.801806][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.812262][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.822300][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.844333][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.912410][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.925434][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.942361][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.959114][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.059271][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.078932][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.089464][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.101726][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.160353][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.206421][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.233967][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.251132][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.258468][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.289813][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.300787][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.307960][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.322286][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.350642][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.357911][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.382127][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.416194][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.423469][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.447524][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.454671][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.473921][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.481079][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.554598][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.648167][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.711551][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.718760][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.758459][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.765627][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.889491][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.029829][ T5771] veth0_vlan: entered promiscuous mode [ 74.058763][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.070212][ T5771] veth1_vlan: entered promiscuous mode [ 74.084346][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.211970][ T5770] veth0_vlan: entered promiscuous mode [ 74.238658][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.249488][ T5771] veth0_macvtap: entered promiscuous mode [ 74.263439][ T5771] veth1_macvtap: entered promiscuous mode [ 74.276637][ T5770] veth1_vlan: entered promiscuous mode [ 74.301006][ T5772] veth0_vlan: entered promiscuous mode [ 74.316047][ T5772] veth1_vlan: entered promiscuous mode [ 74.336419][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.370166][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.397398][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.408984][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.418743][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.427734][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.450255][ T5769] veth0_vlan: entered promiscuous mode [ 74.460774][ T5770] veth0_macvtap: entered promiscuous mode [ 74.472793][ T5777] Bluetooth: hci1: command tx timeout [ 74.478501][ T5770] veth1_macvtap: entered promiscuous mode [ 74.505061][ T5772] veth0_macvtap: entered promiscuous mode [ 74.521666][ T5772] veth1_macvtap: entered promiscuous mode [ 74.534977][ T5769] veth1_vlan: entered promiscuous mode [ 74.546455][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.558579][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.564339][ T5777] Bluetooth: hci2: command tx timeout [ 74.569171][ T5776] Bluetooth: hci0: command tx timeout [ 74.574046][ T5774] Bluetooth: hci3: command tx timeout [ 74.581924][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.611019][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.622097][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.635214][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.658216][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.670046][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.680577][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.693991][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.706482][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.717847][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.728534][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.738517][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.749404][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.760670][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.772970][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.781686][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.790891][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.803698][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.828510][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.838413][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.847755][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.856695][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.915110][ T5769] veth0_macvtap: entered promiscuous mode [ 74.927853][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.942157][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.970573][ T5769] veth1_macvtap: entered promiscuous mode [ 75.018315][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.030481][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.040846][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.051738][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.062887][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.073461][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.084449][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.101723][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.113804][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.123896][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.134367][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.144560][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.155700][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.166584][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.185620][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.196360][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.198047][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.214822][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.223785][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.234778][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.277729][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.289404][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.387894][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.409278][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.438109][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.461398][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.525204][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.540150][ T5831] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 75.551308][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.596111][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.613400][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.679253][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.730057][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.060553][ T5842] ceph: No mds server is up or the cluster is laggy [ 76.119225][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 76.179289][ T5845] ceph: No mds server is up or the cluster is laggy [ 76.204627][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 76.297006][ T2132] libceph: connect (1)[c::]:6789 error -101 [ 76.384336][ T2132] libceph: mon0 (1)[c::]:6789 connect error [ 76.542670][ T5774] Bluetooth: hci1: command tx timeout [ 76.623082][ T5774] Bluetooth: hci3: command tx timeout [ 76.628634][ T5774] Bluetooth: hci0: command tx timeout [ 76.634164][ T5777] Bluetooth: hci2: command tx timeout [ 76.763754][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 76.769841][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 76.776222][ T2132] libceph: connect (1)[c::]:6789 error -101 [ 76.782267][ T2132] libceph: mon0 (1)[c::]:6789 connect error [ 76.846027][ T5855] syz.0.1[5855]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 76.913212][ T5807] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 76.915598][ T5855] loop0: detected capacity change from 0 to 164 [ 77.323442][ T5807] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 77.700713][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.712596][ T5807] usb 4-1: Product: syz [ 77.716780][ T5807] usb 4-1: Manufacturer: syz [ 77.721377][ T5807] usb 4-1: SerialNumber: syz [ 77.760474][ T5807] usb 4-1: config 0 descriptor?? [ 78.014605][ T5807] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 79.242527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 79.772786][ T5807] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 79.773809][ T5776] Bluetooth: hci0: command tx timeout [ 79.781981][ T5777] Bluetooth: hci2: command tx timeout [ 79.785434][ T5776] Bluetooth: hci3: command tx timeout [ 79.796267][ T5774] Bluetooth: hci1: command tx timeout [ 79.802019][ T5808] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.916649][ T28] usb 4-1: USB disconnect, device number 2 [ 80.035174][ T5808] usb 1-1: Dual-Role OTG device on HNP port [ 80.236199][ T5808] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 80.247136][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.265035][ T5808] gspca_main: spca501-2.14.0 probing 0000:0000 [ 80.281788][ T5808] gspca_spca501: reg write: error -32 [ 80.291653][ T5808] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 80.299235][ T5808] spca501: probe of 1-1:1.0 failed with error -22 [ 81.011320][ C1] general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] PREEMPT SMP KASAN [ 81.023186][ C1] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 81.031651][ C1] CPU: 1 PID: 5808 Comm: kworker/1:3 Not tainted syzkaller #0 [ 81.039130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 81.049205][ C1] Workqueue: usb_hub_wq hub_event [ 81.054299][ C1] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 81.059972][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 81.079595][ C1] RSP: 0018:ffffc900001f0840 EFLAGS: 00010002 [ 81.085665][ C1] RAX: 00000000000000e6 RBX: ffff88802fb64120 RCX: ffff88802c255a00 [ 81.093642][ C1] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 81.101601][ C1] RBP: ffff88802fb64100 R08: 0000000000000000 R09: 00000000eed9a316 [ 81.109569][ C1] R10: 000000005c29093d R11: 0000000000000100 R12: ffff88802fb64730 [ 81.117532][ C1] R13: dffffc0000000000 R14: ffff88802fb64128 R15: 0000000000000730 [ 81.125491][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 81.134406][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.141000][ C1] CR2: 00007ffee4f04b78 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 81.148967][ C1] Call Trace: [ 81.152234][ C1] [ 81.155070][ C1] f_midi2_set_alt+0x100/0x800 [ 81.159854][ C1] composite_setup+0x1ffe/0x33a0 [ 81.164790][ C1] configfs_composite_setup+0xc7/0x100 [ 81.170267][ C1] dummy_timer+0x1309/0x3420 [ 81.174858][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 81.179870][ C1] ? lock_chain_count+0x20/0x20 [ 81.184727][ C1] ? dummy_free_streams+0x520/0x520 [ 81.189915][ C1] ? dummy_free_streams+0x520/0x520 [ 81.195107][ C1] __hrtimer_run_queues+0x525/0xc10 [ 81.200299][ C1] ? hrtimer_interrupt+0x980/0x980 [ 81.205400][ C1] ? read_tsc+0x9/0x20 [ 81.209462][ C1] hrtimer_run_softirq+0x177/0x290 [ 81.214563][ C1] handle_softirqs+0x27d/0x820 [ 81.219314][ C1] ? read_tsc+0x9/0x20 [ 81.223369][ C1] ? ktime_get+0x24b/0x280 [ 81.227773][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 81.232529][ C1] ? do_softirq+0x1a0/0x1a0 [ 81.237019][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 81.242207][ C1] __irq_exit_rcu+0xd3/0x190 [ 81.246785][ C1] ? irq_exit_rcu+0x20/0x20 [ 81.251280][ C1] irq_exit_rcu+0x9/0x20 [ 81.255509][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 81.261133][ C1] [ 81.264051][ C1] [ 81.266967][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.272935][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 81.279432][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2b 5f c6 f6 65 8b 05 9c 2d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 81.299039][ C1] RSP: 0018:ffffc900047be880 EFLAGS: 00000206 [ 81.305108][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: dfae654c37c11d00 [ 81.313077][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 81.321041][ C1] RBP: ffffc900047be910 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 81.329004][ C1] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: dffffc0000000000 [ 81.336963][ C1] R13: dffffc0000000000 R14: ffff8881437e0000 R15: 1ffff920008f7d10 [ 81.344932][ C1] ? _raw_spin_unlock+0x40/0x40 [ 81.349791][ C1] ? kobject_get+0xcc/0x120 [ 81.354288][ C1] dummy_urb_enqueue+0x587/0x780 [ 81.359221][ C1] usb_hcd_submit_urb+0x318/0x1aa0 [ 81.364322][ C1] ? __init_swait_queue_head+0xa8/0x140 [ 81.369882][ C1] usb_start_wait_urb+0x140/0x580 [ 81.374916][ C1] ? usb_api_blocking_completion+0xb0/0xb0 [ 81.380740][ C1] usb_control_msg+0x235/0x3e0 [ 81.385504][ C1] usb_set_interface+0x51f/0x13f0 [ 81.390531][ C1] snd_usb_midi_v2_create+0x62f/0x48a0 [ 81.395988][ C1] ? proc_audio_usbbus_read+0x170/0x170 [ 81.401523][ C1] ? snd_card_rw_proc_new+0x10d/0x130 [ 81.406900][ C1] ? validate_midi_out_jack+0xb0/0xb0 [ 81.412268][ C1] ? usb_ifnum_to_if+0x262/0x2e0 [ 81.417266][ C1] snd_usb_create_stream+0x262/0x5d0 [ 81.422546][ C1] usb_audio_probe+0xead/0x1f00 [ 81.427386][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 81.432404][ C1] ? snd_usb_autosuspend+0x1c0/0x1c0 [ 81.437700][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 81.443591][ C1] usb_probe_interface+0x5c2/0xaf0 [ 81.448706][ C1] ? usb_register_driver+0x3c0/0x3c0 [ 81.453987][ C1] really_probe+0x247/0xae0 [ 81.458493][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 81.463699][ C1] __driver_probe_device+0x1f5/0x390 [ 81.468983][ C1] driver_probe_device+0x4f/0x420 [ 81.474000][ C1] __device_attach_driver+0x2ca/0x510 [ 81.479367][ C1] bus_for_each_drv+0x252/0x2e0 [ 81.484227][ C1] ? coredump_store+0x90/0x90 [ 81.488916][ C1] ? bus_find_device+0x300/0x300 [ 81.493859][ C1] __device_attach+0x2c1/0x420 [ 81.498653][ C1] ? device_attach+0x20/0x20 [ 81.503244][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 81.508437][ C1] bus_probe_device+0x180/0x260 [ 81.513292][ C1] device_add+0x87c/0xc40 [ 81.517618][ C1] usb_set_configuration+0x1ad0/0x2150 [ 81.523088][ C1] usb_generic_driver_probe+0x8d/0x150 [ 81.528537][ C1] usb_probe_device+0x12a/0x260 [ 81.533382][ C1] ? usb_register_device_driver+0x230/0x230 [ 81.539269][ C1] really_probe+0x247/0xae0 [ 81.543765][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 81.548958][ C1] __driver_probe_device+0x1f5/0x390 [ 81.554237][ C1] driver_probe_device+0x4f/0x420 [ 81.559257][ C1] __device_attach_driver+0x2ca/0x510 [ 81.564625][ C1] bus_for_each_drv+0x252/0x2e0 [ 81.569468][ C1] ? coredump_store+0x90/0x90 [ 81.574140][ C1] ? bus_find_device+0x300/0x300 [ 81.579069][ C1] __device_attach+0x2c1/0x420 [ 81.583825][ C1] ? device_attach+0x20/0x20 [ 81.588417][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 81.593445][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 81.598637][ C1] bus_probe_device+0x180/0x260 [ 81.603494][ C1] device_add+0x87c/0xc40 [ 81.607823][ C1] usb_new_device+0x995/0x1550 [ 81.612580][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 81.617414][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.622693][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 81.627883][ C1] hub_event+0x29d5/0x4a80 [ 81.632304][ C1] ? hub_post_resume+0x120/0x120 [ 81.637229][ C1] ? read_lock_is_recursive+0x20/0x20 [ 81.642594][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.647789][ C1] ? process_scheduled_works+0x975/0x1600 [ 81.653590][ C1] ? process_scheduled_works+0x975/0x1600 [ 81.659319][ C1] process_scheduled_works+0xa60/0x1600 [ 81.664866][ C1] ? worker_attach_to_pool+0x370/0x370 [ 81.670316][ C1] ? assign_work+0x3cc/0x5d0 [ 81.674899][ C1] worker_thread+0xa5e/0xfe0 [ 81.679485][ C1] ? _raw_spin_unlock+0x40/0x40 [ 81.684329][ C1] ? __kthread_parkme+0x71/0x1c0 [ 81.689255][ C1] kthread+0x2fa/0x390 [ 81.693310][ C1] ? pr_cont_work+0x550/0x550 [ 81.697974][ C1] ? kthread_blkcg+0xd0/0xd0 [ 81.702554][ C1] ret_from_fork+0x48/0x80 [ 81.706976][ C1] ? kthread_blkcg+0xd0/0xd0 [ 81.711552][ C1] ret_from_fork_asm+0x11/0x20 [ 81.716312][ C1] [ 81.719331][ C1] Modules linked in: [ 81.723218][ C1] ---[ end trace 0000000000000000 ]--- [ 81.728674][ C1] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 81.734314][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 81.753918][ C1] RSP: 0018:ffffc900001f0840 EFLAGS: 00010002 [ 81.759976][ C1] RAX: 00000000000000e6 RBX: ffff88802fb64120 RCX: ffff88802c255a00 [ 81.767941][ C1] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 81.775906][ C1] RBP: ffff88802fb64100 R08: 0000000000000000 R09: 00000000eed9a316 [ 81.783864][ C1] R10: 000000005c29093d R11: 0000000000000100 R12: ffff88802fb64730 [ 81.791823][ C1] R13: dffffc0000000000 R14: ffff88802fb64128 R15: 0000000000000730 [ 81.799780][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 81.808715][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.815288][ C1] CR2: 00007ffee4f04b78 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 81.823253][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 81.830658][ C1] Kernel Offset: disabled [ 81.834964][ C1] Rebooting in 86400 seconds..