last executing test programs: 881.130205ms ago: executing program 2 (id=3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b0, &(0x7f00000000c0)={'macvtap0\x00', @random='\x00\x00\x00\x00\x00 '}) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0xfff7fffffffffffe, 0x483c1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc0085666, &(0x7f0000000080)={0x4, 0x6}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0xfd, 0x8}}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) r2 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000001100)={&(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x8801, 0xff62, &(0x7f0000001140)="b5"}], 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) msync(&(0x7f000086d000/0xf000)=nil, 0xf000, 0x4) mmap$usbmon(&(0x7f0000faf000/0x1000)=nil, 0x1000, 0x4000001, 0x50, 0xffffffffffffffff, 0x401) r4 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x4d72, @mcast2, 0x1ff}, 0x1c) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000390400000000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="11980400419804001c001280090001007866726d000000000c00028008000200040000001554fad24b051d692fb954c6df80282cc3a9f07e7bea8136fede865dd20b58c327b74baae4c1367a94d8956a8ac917a1c29a9dd86c1268e80c0000000000000020bd2734571e6d8d59ea9b2f4a305c3ef091e39305365f10893f6fddb45a170f75"], 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x2c, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x2004000) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x80) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r11, 0xc2604110, &(0x7f0000000680)={0x0, [[0x5, 0x0, 0x9, 0x3, 0xfffffff5, 0x0, 0x0, 0x1], [0x4, 0x1, 0x0, 0x6], [0x100091, 0x4, 0x2, 0x0, 0xfffffffe, 0x0, 0xff]], '\x00', [{0x0, 0x3304}, {}, {0x4}, {}, {}, {0x8}, {}, {0x1}, {}, {0xb}, {0x2, 0xf7bb}, {0x0, 0x3}], '\x00', 0x303}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x20017}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="82", 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@deltfilter={0x45c, 0x2d, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x7, 0xd}, {0x9, 0x4}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0xf}, @filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "edf08d4020923acabeb3a9c87aff1bd9"}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private2}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x4}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x1d}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0xfb}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_bpf={{0x8}, {0x38c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_ACT={0x380, 0x1, [@m_nat={0xa0, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0x0, 0x3, 0xd6, 0x4}, @rand_addr=0x64010102, @private=0xa010101}}]}, {0x50, 0x6, "44f0a79c000000000000008037d015ce8e55707fd02dc891a7f721a7065b9805e86b2d98970f243848b6587628c8389c8ad603a64cd1518fb8c0d44340898e50502f273d7680f60000000000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x8c, 0x0, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x54, 0x6, "1c29b9a0acbbcea4031a89343600148161400c68eea9de2486bdc15b2832fd8fa550e97914f13a4437f20e1a06f2ed32ce5c245a619916672eea6b3d3f5495802fba4dae44b604f48b4b52cd7a8a7de6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x19c, 0x1f, 0x0, 0x0, {{0x7}, {0x124, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x11e, 0x6, {0x200, 'security\x00', 0x40, 0x6, "c55ffa3864a3d8dd7339791fdf1e66b9898dbe63dbc119299f1d173192fd11696b7231e55512933ae2af2b763dd7e1041d6c943476d8fcd8bdee6c3f9a4e603f4b347216a2c16788ca31a173dbb137897bfe0833d2a1682e1fee6437e205525c084910c8a85a48a01a6b3a0a8e713f982f5250ce732d71ff9375bf994bf506700e5d075309907d45dde2b6dd47367ce8dc957f63b2f5370ef2d0e47b1cd738ae9d91ca0ebcc2d877a4a65017ef5df99cdbdfb5823fc3c4605e59d9fa187f5c248586b8bc6084aae9b9d13db63bcdba136801487f3caafaa98bc944f77e18a9fdea9648693e864c50ae92e17fc8a3fd5e52ebc90a"}}]}, {0x52, 0x6, "0acabdfed185020ba310332dcddcb7f4fea34b70f4bb11513c865e28623c89fa26fd02ca0594a3fa3f8b54bdd553a1d63b6d2c2cc45777676ec6f5aacf786237a982c789a1fdfb34b97a974146f5"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0xb4, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x85, 0x6, "2dacc20a960edeb145ae21ef949ea900743e3c407e65d8eb08106e5be3d63602f077728ae6e9298d78edee15dd02896a5e08c8c0d009b89b18c741defa3fb675c3d9e2c099e66307293b490c447a1788b7a7795f21262f4fbff557a0f4579a439ce8db59266851e0b2bf651880b4a77edae1d1dd4d2e2d0d590152dd361cd8df34"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000000)) 810.822688ms ago: executing program 3 (id=4): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x289c2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x15) syz_usb_control_io(r1, 0x0, 0x0) writev(r2, &(0x7f0000001640)=[{&(0x7f0000000180)="b5", 0x1}], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) renameat2(r0, &(0x7f0000000040)='./bus\x00', r2, &(0x7f00000001c0)='./dev/ttyACM0\x00', 0x4) 653.468485ms ago: executing program 2 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000010c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550a, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) timer_create(0xfffffffffffffff8, 0x0, &(0x7f0000000100)) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x5, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x100000000000, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) capset(&(0x7f0000000600)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x400}) r5 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001400)=@newqdisc={0x50, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0x19}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x4}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x70bd27, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) 629.855615ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003280)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10221}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) write(r1, &(0x7f0000000500)='dummy_udc.0', 0xb) 366.093946ms ago: executing program 1 (id=6): r0 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)=0x1) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000200)=""/117, 0x75}], 0x1) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r4) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x200111, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xf03a0001) r5 = syz_create_resource$binfmt(&(0x7f0000000080)='./file1\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r6) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000377b58a08e51a404000080001000000000000000", @ANYRES32=r8, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r3, @ANYBLOB="dbd88c35a4d68068eaf7d65744d08733458315b5fe287a0ab3df15780c6e7eac15dcf22efe1f3a29cdcebd73127c47ff934b9ccf729fab691840cba0808a19fb6633806176b3695fa885fc4b7cb059131b36a78ec332224067bb7c86e751e776dc5181f613f30085c10eb4cada4cae96c29382b6dfb5bc6268f5991a552d065b1e83fb5a9ed0ed57a86cad09a4e474453eb5bba9c571ad80b2896f5baffb", @ANYBLOB="030029bd7000110000000100000008000100", @ANYRES32=r8, @ANYBLOB="0800020000dfff0000000000f41b380467fc81fc9700"], 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x20000000) execveat$binfmt(r3, r5, 0x0, 0x0, 0x1000) 260.320528ms ago: executing program 0 (id=8): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 130.108602ms ago: executing program 0 (id=9): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633", @ANYRES8=r1], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000010900), r3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000200)={0x0, 0x700, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050007000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) pread64(r2, &(0x7f0000001dc0)=""/102399, 0x18fff, 0xb5) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="e02742e86c0d85ff9783763a0a00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x3, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @local, 0x80, 0x40, 0x7, 0xfa19}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r2, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000800), &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x100003b, &(0x7f0000000880)=[{}, {}], 0x10, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x81, '\x00', 0x0, r2, 0x3, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="85100000feffffff0394040008000000b7080000000000007b8af8ff00000000b70800000000c0577b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="00f6ffffff000000b70500000800000085000000a50000000d00", @ANYRES32=r2, @ANYBLOB="000000000080000018680000020000000000000003000000"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x4a, &(0x7f0000000580)=""/74, 0x41000, 0x1, '\x00', r6, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x8, 0x200, 0x8}, 0x10, r7, r2, 0x4, &(0x7f0000000b40)=[r2, r8, r2, r2], &(0x7f0000000b80)=[{0x2, 0x5, 0x7, 0x4}, {0x4, 0x5, 0x5, 0x7}, {0x0, 0x5, 0xa, 0x9}, {0x0, 0x4, 0x1, 0x5}], 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 69.063656ms ago: executing program 0 (id=10): syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') (fail_nth: 19) 68.691133ms ago: executing program 0 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@setlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x100}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x3e8}]}}]}, 0x38}}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000500)={0x11, 0x3, 0x2}, 0x14) (async) sendto$packet(r1, &(0x7f0000000200)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x2}, 0x14) (async) socket$netlink(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "01010101010101010101010101010101"}}}]}, 0x48}}, 0x0) (async) sendto$packet(r1, &(0x7f0000000200)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, &(0x7f0000000680)={0x11, 0x0, 0x2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x38, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) 214.369µs ago: executing program 0 (id=12): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) clock_gettime(0x0, &(0x7f00000025c0)) r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000, 0x4000000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) 0s ago: executing program 0 (id=13): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) syz_open_dev$vbi(&(0x7f00000017c0), 0x2, 0x2) (async) r1 = syz_open_dev$vbi(&(0x7f00000017c0), 0x2, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000021c0)={0x0, @reserved}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x26}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:43139' (ED25519) to the list of known hosts. [ 40.338525][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.339194][ T43] audit: type=1400 audit(1788688971.412:138): avc: denied { name_bind } for pid=5713 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.368691][ T43] audit: type=1400 audit(1788688971.442:139): avc: denied { execute } for pid=5714 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.369014][ T43] audit: type=1400 audit(1788688971.442:140): avc: denied { execute_no_trans } for pid=5714 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.078398][ T43] audit: type=1400 audit(1788688974.152:141): avc: denied { mounton } for pid=5714 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.090582][ T43] audit: type=1400 audit(1788688974.162:142): avc: denied { mount } for pid=5714 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.093767][ T5714] cgroup: Unknown subsys name 'net' [ 43.095524][ T43] audit: type=1400 audit(1788688974.172:143): avc: denied { unmount } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.206428][ T5714] cgroup: Unknown subsys name 'cpuset' [ 43.210647][ T5714] cgroup: Unknown subsys name 'rlimit' [ 43.350466][ T43] audit: type=1400 audit(1788688974.422:144): avc: denied { setattr } for pid=5714 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.352510][ T43] audit: type=1400 audit(1788688974.422:145): avc: denied { create } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.352548][ T43] audit: type=1400 audit(1788688974.422:146): avc: denied { write } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.352575][ T43] audit: type=1400 audit(1788688974.422:147): avc: denied { read } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.425817][ T5718] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.433368][ T5714] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.042940][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 49.043069][ T43] audit: type=1400 audit(1788688980.112:156): avc: denied { execmem } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.275156][ T43] audit: type=1400 audit(1788688980.352:157): avc: denied { create } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.275307][ T43] audit: type=1400 audit(1788688980.352:158): avc: denied { read write } for pid=5725 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.275393][ T43] audit: type=1400 audit(1788688980.352:159): avc: denied { open } for pid=5725 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.283914][ T43] audit: type=1400 audit(1788688980.362:160): avc: denied { ioctl } for pid=5725 comm="syz-executor" path="socket:[2936]" dev="sockfs" ino=2936 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.320490][ T5728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 49.323866][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.326436][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 49.327187][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.330487][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.331007][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.331876][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.332758][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.335085][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.336564][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.336913][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.338407][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.341264][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.342238][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.342261][ T43] audit: type=1400 audit(1788688980.412:161): avc: denied { read } for pid=5725 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.343892][ T43] audit: type=1400 audit(1788688980.422:162): avc: denied { open } for pid=5725 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.345858][ T43] audit: type=1400 audit(1788688980.422:163): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.350712][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.351338][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.352260][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.352557][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.352886][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.354636][ T43] audit: type=1400 audit(1788688980.432:164): avc: denied { module_request } for pid=5725 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.356309][ T5728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.387970][ T43] audit: type=1400 audit(1788688980.462:165): avc: denied { sys_module } for pid=5725 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 50.142634][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.143683][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.143827][ T5727] bridge_slave_0: entered allmulticast mode [ 50.145757][ T5727] bridge_slave_0: entered promiscuous mode [ 50.180794][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.180900][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.180996][ T5731] bridge_slave_0: entered allmulticast mode [ 50.183396][ T5731] bridge_slave_0: entered promiscuous mode [ 50.184814][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.184887][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.184971][ T5727] bridge_slave_1: entered allmulticast mode [ 50.186333][ T5727] bridge_slave_1: entered promiscuous mode [ 50.209025][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.209189][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.209321][ T5731] bridge_slave_1: entered allmulticast mode [ 50.210668][ T5731] bridge_slave_1: entered promiscuous mode [ 50.252770][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.252903][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.253006][ T5733] bridge_slave_0: entered allmulticast mode [ 50.254550][ T5733] bridge_slave_0: entered promiscuous mode [ 50.256786][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.256834][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.256929][ T5725] bridge_slave_0: entered allmulticast mode [ 50.258047][ T5725] bridge_slave_0: entered promiscuous mode [ 50.268544][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.281473][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.281634][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.281681][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.281883][ T5733] bridge_slave_1: entered allmulticast mode [ 50.284569][ T5733] bridge_slave_1: entered promiscuous mode [ 50.296102][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.296178][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.296266][ T5725] bridge_slave_1: entered allmulticast mode [ 50.297560][ T5725] bridge_slave_1: entered promiscuous mode [ 50.302989][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.314531][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.353729][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.357190][ T5731] team0: Port device team_slave_0 added [ 50.365474][ T5727] team0: Port device team_slave_0 added [ 50.368524][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.372968][ T5727] team0: Port device team_slave_1 added [ 50.376532][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.378125][ T5731] team0: Port device team_slave_1 added [ 50.379322][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.435869][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.435952][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.436023][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.437804][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.437839][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.442525][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.467563][ T5733] team0: Port device team_slave_0 added [ 50.468247][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.468261][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.468283][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.471538][ T5733] team0: Port device team_slave_1 added [ 50.472041][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.472054][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.472071][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.484152][ T5725] team0: Port device team_slave_0 added [ 50.512075][ T5725] team0: Port device team_slave_1 added [ 50.513881][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.513894][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.513913][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.534309][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.534326][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.534345][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.548291][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.548307][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.548327][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.567940][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.567955][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.567975][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.579300][ T5731] hsr_slave_0: entered promiscuous mode [ 50.579831][ T5731] hsr_slave_1: entered promiscuous mode [ 50.601100][ T5727] hsr_slave_0: entered promiscuous mode [ 50.601634][ T5727] hsr_slave_1: entered promiscuous mode [ 50.601926][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 50.601988][ T5727] Cannot create hsr debugfs directory [ 50.635409][ T5733] hsr_slave_0: entered promiscuous mode [ 50.635964][ T5733] hsr_slave_1: entered promiscuous mode [ 50.636458][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 50.636475][ T5733] Cannot create hsr debugfs directory [ 50.718328][ T5725] hsr_slave_0: entered promiscuous mode [ 50.719466][ T5725] hsr_slave_1: entered promiscuous mode [ 50.720003][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 50.720020][ T5725] Cannot create hsr debugfs directory [ 51.011302][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.021388][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.025843][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.039207][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.039902][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.045039][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.054322][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.058711][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.110535][ T5727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.118462][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.119711][ T5727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.123663][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.128646][ T5727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.135350][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.135927][ T5727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.139648][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.204370][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.208911][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.210182][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.215253][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.216558][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.222286][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.225864][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.230943][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.310911][ T5725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.315912][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.321796][ T5725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.326983][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.333901][ T5725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.338147][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.338779][ T5725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.343205][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.349828][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.392766][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.406449][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.413283][ T5740] Bluetooth: hci2: command tx timeout [ 51.413290][ T5743] Bluetooth: hci3: command tx timeout [ 51.422170][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.422978][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.424425][ T5743] Bluetooth: hci0: command tx timeout [ 51.425228][ T5740] Bluetooth: hci1: command tx timeout [ 51.445563][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.456253][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.456360][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.467238][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.467317][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.486235][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.486366][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.492940][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.535220][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.561072][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.567492][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.567621][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.583717][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.583843][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.603294][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.620830][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.620967][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.637317][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.637426][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.666417][ T5733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.857611][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.865821][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.939290][ T5731] veth0_vlan: entered promiscuous mode [ 51.949788][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.954420][ T5727] veth0_vlan: entered promiscuous mode [ 51.963594][ T5727] veth1_vlan: entered promiscuous mode [ 51.968229][ T5731] veth1_vlan: entered promiscuous mode [ 51.988230][ T5727] veth0_macvtap: entered promiscuous mode [ 51.997318][ T5727] veth1_macvtap: entered promiscuous mode [ 52.015598][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.026210][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.034485][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.056273][ T5731] veth0_macvtap: entered promiscuous mode [ 52.070393][ T5731] veth1_macvtap: entered promiscuous mode [ 52.076590][ T5733] veth0_vlan: entered promiscuous mode [ 52.091998][ T5733] veth1_vlan: entered promiscuous mode [ 52.095915][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.113358][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.114950][ T5725] veth0_vlan: entered promiscuous mode [ 52.117125][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.134728][ T5725] veth1_vlan: entered promiscuous mode [ 52.135459][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.135517][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.197230][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.198823][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.225794][ T5733] veth0_macvtap: entered promiscuous mode [ 52.232786][ T5593] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.234741][ T5593] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.237971][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.237987][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.240700][ T5733] veth1_macvtap: entered promiscuous mode [ 52.249915][ T5725] veth0_macvtap: entered promiscuous mode [ 52.269179][ T5725] veth1_macvtap: entered promiscuous mode [ 52.272883][ T5593] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.274915][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.274934][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.278159][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.294361][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.318108][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.324981][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.325024][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.329745][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.336706][ T5727] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.343199][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.343238][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.343268][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.343297][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.472791][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.472849][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.493706][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.493782][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.530433][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.530475][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.555546][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.559234][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.583602][ T5806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.584390][ T5806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.584421][ T5806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.584450][ T5806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.584478][ T5806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.584507][ T5806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.731636][ T5886] dummy0: entered allmulticast mode [ 52.762474][ T5873] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.835675][ T5883] capability: warning: `syz.2.5' uses deprecated v2 capabilities in a way that may be insecure [ 52.867891][ T5883] netlink: 'syz.2.5': attribute type 2 has an invalid length. [ 52.915061][ T5873] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 52.917162][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.918722][ T5896] FAULT_INJECTION: forcing a failure. [ 52.918722][ T5896] name failslab, interval 1, probability 0, space 0, times 1 [ 52.918740][ T5896] CPU: 1 UID: 0 PID: 5896 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) [ 52.918754][ T5896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.918761][ T5896] Call Trace: [ 52.918764][ T5896] [ 52.918769][ T5896] dump_stack_lvl+0x100/0x190 [ 52.918811][ T5896] should_fail_ex.cold+0x5/0xa [ 52.918886][ T5896] should_failslab+0xc2/0x120 [ 52.918920][ T5896] kmem_cache_alloc_noprof+0x92/0x6a0 [ 52.918934][ T5896] ? alloc_empty_file+0x5b/0x1c0 [ 52.918952][ T5896] alloc_empty_file+0x5b/0x1c0 [ 52.918968][ T5896] path_openat+0xdb/0x2440 [ 52.918985][ T5896] ? __pfx_path_openat+0x10/0x10 [ 52.919002][ T5896] do_file_open+0x20e/0x430 [ 52.919017][ T5896] ? __pfx_do_file_open+0x10/0x10 [ 52.919039][ T5896] ? _raw_spin_unlock+0x28/0x50 [ 52.919051][ T5896] ? alloc_fd+0x471/0x7a0 [ 52.919069][ T5896] do_sys_openat2+0x10f/0x1e0 [ 52.919085][ T5896] ? __pfx_do_sys_openat2+0x10/0x10 [ 52.919100][ T5896] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 52.919119][ T5896] ? __fget_files+0x21f/0x3d0 [ 52.919134][ T5896] __x64_sys_openat+0x12d/0x210 [ 52.919150][ T5896] ? __pfx___x64_sys_openat+0x10/0x10 [ 52.919165][ T5896] ? ksys_write+0x1ac/0x250 [ 52.919180][ T5896] do_syscall_64+0x123/0x790 [ 52.919196][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.919209][ T5896] RIP: 0033:0x7f0588d9e159 [ 52.919222][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.919235][ T5896] RSP: 002b:00007f0589c2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.919248][ T5896] RAX: ffffffffffffffda RBX: 00007f0589025fa0 RCX: 00007f0588d9e159 [ 52.919255][ T5896] RDX: 0000000000000001 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 52.919262][ T5896] RBP: 00007f0589c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 52.919269][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.919275][ T5896] R13: 00007f0589026038 R14: 00007f0589025fa0 R15: 00007ffe237e33c8 [ 52.919289][ T5896] [ 52.975570][ T5897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 53.062590][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.087216][ T5903] openvswitch: netlink: Missing valid actions attribute. [ 53.087274][ T5903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 53.134071][ T5873] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 53.235735][ T35] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 53.236285][ T35] usb 5-1: Dual-Role OTG device on HNP port [ 53.236495][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.245722][ T35] gspca_main: spca501-2.14.0 probing 0000:0000 [ 53.246156][ T35] gspca_spca501: reg write: error -32 [ 53.246167][ T35] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 53.246222][ T35] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 53.258281][ C3] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 53.264264][ C3] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 53.267871][ C3] CPU: 3 UID: 0 PID: 35 Comm: kworker/3:0 Not tainted syzkaller #0 PREEMPT(full) [ 53.271678][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.276104][ C3] Workqueue: usb_hub_wq hub_event [ 53.279249][ C3] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 53.282303][ C3] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 53.290339][ C3] RSP: 0018:ffffc900007089d8 EFLAGS: 00010002 [ 53.292347][ C3] RAX: dffffc0000000000 RBX: ffff8880540c4000 RCX: 0000000000000103 [ 53.295054][ C3] RDX: 00000000000000e6 RSI: ffffffff87f56686 RDI: ffff8880540c4128 [ 53.298762][ C3] RBP: ffff8880540c4128 R08: 0000000000000004 R09: 0000000000000020 [ 53.302701][ C3] R10: 0000000000000020 R11: 000000000000762b R12: ffff8880540c40f0 [ 53.306053][ C3] R13: ffff8880540c4128 R14: ffff8880540c4740 R15: 0000000000000001 [ 53.309372][ C3] FS: 0000000000000000(0000) GS:ffff8880d5e5f000(0000) knlGS:0000000000000000 [ 53.313065][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.316187][ C3] CR2: 00007fc1a404b432 CR3: 0000000036ded000 CR4: 0000000000352ef0 [ 53.320324][ C3] Call Trace: [ 53.321794][ C3] [ 53.322963][ C3] f_midi2_set_alt+0x444/0x5f0 [ 53.325006][ C3] composite_setup+0x16f8/0x9290 [ 53.327127][ C3] ? __lock_acquire+0x4c5/0x1ec0 [ 53.329235][ C3] ? __kasan_mempool_unpoison_object+0xd1/0x160 [ 53.331885][ C3] ? __kasan_slab_free+0x5f/0x80 [ 53.334065][ C3] ? free_to_partial_list+0x311/0x4e0 [ 53.336709][ C3] ? __pfx_composite_setup+0x10/0x10 [ 53.339525][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 53.341979][ C3] ? do_raw_spin_lock+0x128/0x260 [ 53.344243][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 53.346557][ C3] ? configfs_composite_setup+0xfb/0x130 [ 53.348928][ C3] configfs_composite_setup+0xfb/0x130 [ 53.351258][ C3] dummy_timer+0x2039/0x3700 [ 53.353248][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 53.355940][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 53.358844][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 53.361316][ C3] ? mark_held_locks+0x40/0x70 [ 53.363418][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.365881][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 53.368013][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 53.370217][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 53.372549][ C3] handle_softirqs+0x1e6/0x9d0 [ 53.374628][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 53.377196][ C3] ? _raw_spin_unlock+0x28/0x50 [ 53.379693][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 53.382254][ C3] __irq_exit_rcu+0x194/0x210 [ 53.384275][ C3] irq_exit_rcu+0x9/0x30 [ 53.386056][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.388410][ C3] [ 53.389705][ C3] [ 53.391026][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.393824][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 53.397047][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 3d 14 f6 48 89 df e8 4e 93 14 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 9a 03 f6 65 48 83 3d e4 14 b9 08 00 74 16 5b [ 53.405574][ C3] RSP: 0018:ffffc900006ee6c8 EFLAGS: 00000246 [ 53.408220][ C3] RAX: 0000000000000006 RBX: ffffffff9bbc3a08 RCX: 0000000000000040 [ 53.411617][ C3] RDX: 0000000000000001 RSI: ffffffff8e3ebe0c RDI: ffffffff8c621080 [ 53.415727][ C3] RBP: 0000000000000206 R08: 0000000000000001 R09: 0000000000000000 [ 53.419506][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff920000ddce0 [ 53.422801][ C3] R13: ffffc900006ee830 R14: 0000000000000000 R15: ffffffff9bbc3a08 [ 53.426146][ C3] __debug_object_init+0x2de/0x3d0 [ 53.428386][ C3] ? __pfx___debug_object_init+0x10/0x10 [ 53.430942][ C3] ? __lock_acquire+0xe15/0x1ec0 [ 53.433734][ C3] ? __pfx_process_timeout+0x10/0x10 [ 53.436829][ C3] timer_init_key_on_stack+0x2e/0x120 [ 53.439197][ C3] schedule_timeout+0x115/0x280 [ 53.441268][ C3] ? __pfx_schedule_timeout+0x10/0x10 [ 53.443541][ C3] ? mark_held_locks+0x40/0x70 [ 53.445581][ C3] __wait_for_common+0x2e7/0x4c0 [ 53.447681][ C3] ? __pfx_schedule_timeout+0x10/0x10 [ 53.449951][ C3] ? __pfx___wait_for_common+0x10/0x10 [ 53.452266][ C3] usb_start_wait_urb+0x2ae/0x580 [ 53.454446][ C3] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 53.457174][ C3] ? __asan_memset+0x23/0x50 [ 53.459614][ C3] usb_control_msg+0x328/0x4b0 [ 53.462038][ C3] ? __pfx_usb_control_msg+0x10/0x10 [ 53.464353][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.466570][ C3] usb_control_msg_send+0xca/0x130 [ 53.468823][ C3] usb_set_interface+0x9b6/0xe20 [ 53.471011][ C3] snd_usb_midi_v2_create+0x629/0x4070 [ 53.473356][ C3] ? __mutex_unlock_slowpath+0x35d/0x930 [ 53.475837][ C3] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 53.478450][ C3] ? snd_info_create_entry+0x6f/0x400 [ 53.480962][ C3] ? lockdep_init_map_type+0x5c/0x250 [ 53.483537][ C3] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 53.486157][ C3] ? lockdep_init_map_type+0x5c/0x250 [ 53.488422][ C3] ? snd_info_create_entry+0x314/0x400 [ 53.490734][ C3] ? usb_ifnum_to_if+0x16f/0x1d0 [ 53.492642][ T5740] Bluetooth: hci2: command tx timeout [ 53.492689][ T5740] Bluetooth: hci3: command tx timeout [ 53.498052][ C3] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 53.500867][ C3] usb_audio_probe+0xf0b/0x3b10 [ 53.503056][ C3] ? __pfx_usb_audio_probe+0x10/0x10 [ 53.505327][ C3] ? do_raw_spin_lock+0x128/0x260 [ 53.507478][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 53.509728][ C3] ? mark_held_locks+0x40/0x70 [ 53.511778][ C3] ? _raw_spin_lock_irqsave+0x52/0x60 [ 53.514162][ C3] ? find_held_lock+0x2b/0x80 [ 53.517017][ C3] ? mark_held_locks+0x40/0x70 [ 53.519483][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.522053][ C3] usb_probe_interface+0x386/0x9b0 [ 53.524227][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 53.526608][ C3] ? kernfs_put+0x3f/0x60 [ 53.528471][ C3] ? sysfs_create_link+0x68/0xc0 [ 53.530581][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 53.532388][ C3] really_probe+0x241/0xa60 [ 53.533911][ C3] __driver_probe_device+0x210/0x460 [ 53.535732][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.537593][ C3] driver_probe_device+0x4a/0x140 [ 53.539216][ C3] __device_attach_driver+0x1df/0x320 [ 53.541106][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 53.543203][ C3] bus_for_each_drv+0x159/0x1e0 [ 53.545196][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 53.547707][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.549771][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 53.551685][ C3] __device_attach+0x1e4/0x4d0 [ 53.553203][ C3] ? __pfx___device_attach+0x10/0x10 [ 53.554952][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 53.556771][ C3] device_initial_probe+0xaf/0xd0 [ 53.558569][ C3] bus_probe_device+0x64/0x160 [ 53.560303][ C3] device_add+0x121d/0x1970 [ 53.561851][ C3] ? __pfx_device_add+0x10/0x10 [ 53.563483][ C3] ? mark_held_locks+0x40/0x70 [ 53.565168][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.566874][ C3] usb_set_configuration+0xd97/0x1c60 [ 53.568553][ C3] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 53.570574][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 53.572280][ C3] usb_probe_device+0xef/0x400 [ 53.573807][ C3] ? __pfx_usb_probe_device+0x10/0x10 [ 53.575718][ C3] really_probe+0x241/0xa60 [ 53.577236][ C3] __driver_probe_device+0x210/0x460 [ 53.579030][ C3] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 53.581015][ C3] driver_probe_device+0x4a/0x140 [ 53.582659][ C3] __device_attach_driver+0x1df/0x320 [ 53.584449][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 53.586476][ C3] bus_for_each_drv+0x159/0x1e0 [ 53.588077][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 53.590037][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.592221][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 53.594618][ C3] __device_attach+0x1e4/0x4d0 [ 53.596445][ C3] ? __pfx___device_attach+0x10/0x10 [ 53.598428][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 53.600475][ C3] device_initial_probe+0xaf/0xd0 [ 53.602467][ C3] bus_probe_device+0x64/0x160 [ 53.604303][ C3] device_add+0x121d/0x1970 [ 53.605861][ C3] ? __pfx_device_add+0x10/0x10 [ 53.607602][ C3] ? usb_detect_static_quirks+0x335/0x3e0 [ 53.609740][ C3] usb_new_device.part.0+0xcc2/0x1686 [ 53.611943][ C3] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 53.613904][ C3] ? mark_held_locks+0x40/0x70 [ 53.615703][ C3] hub_event.cold+0x1e3/0xe90 [ 53.617314][ C3] ? __pfx_hub_event+0x10/0x10 [ 53.618945][ C3] ? print_usage_bug.part.0+0x1f0/0x340 [ 53.620834][ C3] ? lock_acquire+0x1d1/0x380 [ 53.622411][ C3] ? process_one_work+0xa2c/0x1b10 [ 53.624056][ C3] ? process_one_work+0x906/0x1b10 [ 53.625764][ C3] ? process_one_work+0x906/0x1b10 [ 53.627232][ C3] process_one_work+0xac7/0x1b10 [ 53.628848][ C3] ? __pfx_process_one_work+0x10/0x10 [ 53.630721][ C3] ? lock_acquire+0x1d1/0x380 [ 53.632388][ C3] ? __pfx_hub_event+0x10/0x10 [ 53.634153][ C3] worker_thread+0x5ef/0xe50 [ 53.635941][ C3] ? kthread+0x13a/0x450 [ 53.637399][ C3] ? __pfx_worker_thread+0x10/0x10 [ 53.639047][ C3] kthread+0x373/0x450 [ 53.640352][ C3] ? __pfx_kthread+0x10/0x10 [ 53.641762][ C3] ret_from_fork+0x730/0xd60 [ 53.643186][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 53.645065][ C3] ? __switch_to+0x800/0x10f0 [ 53.646900][ C3] ? __pfx_kthread+0x10/0x10 [ 53.648812][ C3] ret_from_fork_asm+0x1a/0x30 [ 53.650424][ C3] [ 53.651455][ C3] Modules linked in: [ 53.652703][ C3] ---[ end trace 0000000000000000 ]--- [ 53.654455][ C3] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 53.654475][ C3] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 53.654485][ C3] RSP: 0018:ffffc900007089d8 EFLAGS: 00010002 [ 53.654493][ C3] RAX: dffffc0000000000 RBX: ffff8880540c4000 RCX: 0000000000000103 [ 53.654500][ C3] RDX: 00000000000000e6 RSI: ffffffff87f56686 RDI: ffff8880540c4128 [ 53.654507][ C3] RBP: ffff8880540c4128 R08: 0000000000000004 R09: 0000000000000020 [ 53.654513][ C3] R10: 0000000000000020 R11: 000000000000762b R12: ffff8880540c40f0 [ 53.654519][ C3] R13: ffff8880540c4128 R14: ffff8880540c4740 R15: 0000000000000001 [ 53.654525][ C3] FS: 0000000000000000(0000) GS:ffff8880d5e5f000(0000) knlGS:0000000000000000 [ 53.654547][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.654556][ C3] CR2: 00007fc1a404b432 CR3: 0000000036ded000 CR4: 0000000000352ef0 [ 53.654564][ C3] Kernel panic - not syncing: Fatal exception in interrupt [ 53.692319][ C3] Kernel Offset: disabled [ 53.693726][ C3] Rebooting in 86400 seconds..