last executing test programs: 4.139026915s ago: executing program 0 (id=1): r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r1, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) 4.064511062s ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@setlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "01020202010200000101010101010101"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x100}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x3e8}]}}]}, 0x38}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000500)={0x11, 0x3, 0x2}, 0x14) sendto$packet(r1, &(0x7f0000000200)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x2}, 0x14) sendto$packet(r1, &(0x7f0000000200)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, &(0x7f0000000580)={0x11, 0x0, 0x2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) 3.850430733s ago: executing program 2 (id=5): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) 3.243388165s ago: executing program 3 (id=7): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0xe5cc, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xd, r1}, 0x38) 2.734020688s ago: executing program 1 (id=10): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r0, 0x0, 0x0) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') 2.639654174s ago: executing program 1 (id=11): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_setup(0x1, &(0x7f0000000b80)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfe, {0x2, 0x18, 0x51, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2.608200222s ago: executing program 2 (id=12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 2.31193149s ago: executing program 1 (id=13): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000140)=@random={'user.', 'memory.events.loccl\x00'}) 2.201232259s ago: executing program 3 (id=14): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x8, 0x0) splice(r1, 0x0, r4, 0x0, 0x84, 0xd) ppoll(&(0x7f0000000440)=[{r4, 0x4410}], 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)='F', 0x1) 2.126816045s ago: executing program 0 (id=15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000180)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) 1.922182355s ago: executing program 0 (id=16): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.859688565s ago: executing program 0 (id=17): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000200)={&(0x7f0000000100)=""/212, 0x0, 0xd4}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 1.337220701s ago: executing program 3 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r1, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r1, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 1.326395934s ago: executing program 2 (id=26): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x2) mknod(&(0x7f0000000180)='./bus\x00', 0x8000, 0x0) 1.239397668s ago: executing program 3 (id=19): socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x818f, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x2, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x80, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x2a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c4}, 0x4040) 817.84648ms ago: executing program 0 (id=20): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x3ff, 0x89, 0x0, 0x3, 0x8d], 0xffffffff, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 655.714661ms ago: executing program 1 (id=21): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f711010701313f303d0201013014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0x73, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x5, 0x1, 0xb, 0xa}, {}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000a80)='GPL\x00'}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r2], 0x34}}, 0x20042800) 654.460498ms ago: executing program 0 (id=22): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}]}, 0x1fffc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 268.762555ms ago: executing program 1 (id=23): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x885}, 0x240000d0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 268.457496ms ago: executing program 3 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='dummy_udc.0', 0xb) 239.094501ms ago: executing program 2 (id=25): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = gettid() timer_create(0x200000000000000, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r2, 0x3, 0x80000}) 92.714498ms ago: executing program 3 (id=27): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, 0x0, 0x0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r1 = syz_io_uring_setup(0x6210, &(0x7f0000000540)={0x0, 0x8000c6e6, 0x800, 0x1, 0x2bf, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 0s ago: executing program 1 (id=28): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15f19d0a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1, 0x1, 0xaadd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:29715' (ED25519) to the list of known hosts. [ 42.889144][ T5725] cgroup: Unknown subsys name 'net' [ 43.022944][ T5725] cgroup: Unknown subsys name 'cpuset' [ 43.029206][ T5725] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.132349][ T5725] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.288655][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 49.290685][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 49.290923][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.291654][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.291937][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.306486][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.307621][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.324427][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.325320][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.327549][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.329088][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.329502][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.332102][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.332868][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.333225][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.334792][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.349654][ T5755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.351472][ T5756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.353906][ T5755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.361787][ T5755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.012573][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.012936][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.013222][ T5740] bridge_slave_0: entered allmulticast mode [ 50.014761][ T5740] bridge_slave_0: entered promiscuous mode [ 50.055047][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.055196][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.055331][ T5740] bridge_slave_1: entered allmulticast mode [ 50.056667][ T5740] bridge_slave_1: entered promiscuous mode [ 50.117562][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.121002][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.121076][ T5744] bridge_slave_0: entered allmulticast mode [ 50.121793][ T5744] bridge_slave_0: entered promiscuous mode [ 50.128719][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.130927][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.136654][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.136743][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.136833][ T5744] bridge_slave_1: entered allmulticast mode [ 50.138077][ T5744] bridge_slave_1: entered promiscuous mode [ 50.215177][ T5740] team0: Port device team_slave_0 added [ 50.217850][ T5740] team0: Port device team_slave_1 added [ 50.229407][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.268307][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.292822][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.295973][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.296078][ T5746] bridge_slave_0: entered allmulticast mode [ 50.297468][ T5746] bridge_slave_0: entered promiscuous mode [ 50.325480][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.325571][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.325619][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.328244][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.328289][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.328310][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.335452][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.335538][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.335634][ T5746] bridge_slave_1: entered allmulticast mode [ 50.338967][ T5746] bridge_slave_1: entered promiscuous mode [ 50.361652][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.361699][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.361768][ T5745] bridge_slave_0: entered allmulticast mode [ 50.362828][ T5745] bridge_slave_0: entered promiscuous mode [ 50.365482][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.365550][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.365672][ T5745] bridge_slave_1: entered allmulticast mode [ 50.367132][ T5745] bridge_slave_1: entered promiscuous mode [ 50.386245][ T5744] team0: Port device team_slave_0 added [ 50.400520][ T5744] team0: Port device team_slave_1 added [ 50.401750][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.402802][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.403777][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.415028][ T5740] hsr_slave_0: entered promiscuous mode [ 50.415958][ T5740] hsr_slave_1: entered promiscuous mode [ 50.432602][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.449697][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.449755][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.449960][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.462670][ T5745] team0: Port device team_slave_0 added [ 50.464719][ T5745] team0: Port device team_slave_1 added [ 50.465193][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.465200][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.465213][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.526472][ T5746] team0: Port device team_slave_0 added [ 50.534986][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.535062][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.535089][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.547957][ T5746] team0: Port device team_slave_1 added [ 50.553626][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.553638][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.553651][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.616977][ T5744] hsr_slave_0: entered promiscuous mode [ 50.617727][ T5744] hsr_slave_1: entered promiscuous mode [ 50.618297][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 50.618367][ T5744] Cannot create hsr debugfs directory [ 50.630748][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.630798][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.630867][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.658266][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.658348][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.658408][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.707679][ T5745] hsr_slave_0: entered promiscuous mode [ 50.708475][ T5745] hsr_slave_1: entered promiscuous mode [ 50.708992][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 50.709007][ T5745] Cannot create hsr debugfs directory [ 50.786518][ T5746] hsr_slave_0: entered promiscuous mode [ 50.787341][ T5746] hsr_slave_1: entered promiscuous mode [ 50.787878][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 50.787895][ T5746] Cannot create hsr debugfs directory [ 50.961267][ T5740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.970433][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.989667][ T5740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.996546][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.027382][ T5740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.032339][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.033260][ T5740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.038020][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.159194][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.167393][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.168827][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.181724][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.182571][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.190603][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.191406][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.198163][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.272682][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.281380][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.282064][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.291053][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.291996][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.297722][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.304384][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.311688][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.348193][ T5755] Bluetooth: hci0: command tx timeout [ 51.394265][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.399640][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.400983][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.404618][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.406091][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.411785][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.412394][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.414103][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.416635][ T5755] Bluetooth: hci1: command tx timeout [ 51.416834][ T5755] Bluetooth: hci3: command tx timeout [ 51.418600][ T5742] Bluetooth: hci2: command tx timeout [ 51.433013][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.473985][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.485407][ T249] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.485547][ T249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.511053][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.517388][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.517461][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.555246][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.582639][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.584840][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.605694][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.605819][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.609627][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.609701][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.620503][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.620610][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.643375][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.643544][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.668695][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.718215][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.731917][ T5745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.739989][ T249] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.740096][ T249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.757257][ T249] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.757346][ T249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.825216][ T5746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.057733][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.097180][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.108559][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.122743][ T5744] veth0_vlan: entered promiscuous mode [ 52.133098][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.138905][ T5744] veth1_vlan: entered promiscuous mode [ 52.203008][ T5745] veth0_vlan: entered promiscuous mode [ 52.217763][ T5746] veth0_vlan: entered promiscuous mode [ 52.227508][ T5744] veth0_macvtap: entered promiscuous mode [ 52.240935][ T5746] veth1_vlan: entered promiscuous mode [ 52.245108][ T5745] veth1_vlan: entered promiscuous mode [ 52.252410][ T5744] veth1_macvtap: entered promiscuous mode [ 52.254943][ T5740] veth0_vlan: entered promiscuous mode [ 52.275037][ T5740] veth1_vlan: entered promiscuous mode [ 52.282721][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.299080][ T5745] veth0_macvtap: entered promiscuous mode [ 52.302566][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.325782][ T5745] veth1_macvtap: entered promiscuous mode [ 52.334540][ T5746] veth0_macvtap: entered promiscuous mode [ 52.348894][ T5746] veth1_macvtap: entered promiscuous mode [ 52.367113][ T5740] veth0_macvtap: entered promiscuous mode [ 52.383550][ T5740] veth1_macvtap: entered promiscuous mode [ 52.392526][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.401449][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.401466][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.401504][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.413493][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.427717][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.440886][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.457649][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.458645][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.458685][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.467244][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.467483][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.550267][ T5744] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.556096][ T5744] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.556602][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.556945][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.576909][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.577006][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.578080][ T5744] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.582871][ T5744] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.598032][ T5744] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.605119][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.605171][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.606802][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.607027][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.607047][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.607065][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.607083][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.607104][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.607122][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.607140][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.607158][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.626041][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.626058][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.650673][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.650728][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.706776][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.707182][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.717081][ T418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.717162][ T418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.727740][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.730527][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.730540][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.421992][ T5742] Bluetooth: hci0: command tx timeout [ 53.507937][ T5742] Bluetooth: hci2: command tx timeout [ 53.508002][ T5742] Bluetooth: hci3: command tx timeout [ 53.508025][ T5742] Bluetooth: hci1: command tx timeout [ 54.231759][ T5923] process 'syz.1.10' launched './file0' with NULL argv: empty string added [ 54.243063][ T5923] FAULT_INJECTION: forcing a failure. [ 54.243063][ T5923] name failslab, interval 1, probability 0, space 0, times 1 [ 54.243099][ T5923] CPU: 3 UID: 0 PID: 5923 Comm: syz.1.10 Not tainted syzkaller #0 PREEMPT(full) [ 54.243123][ T5923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.243131][ T5923] Call Trace: [ 54.243135][ T5923] [ 54.243141][ T5923] dump_stack_lvl+0x100/0x190 [ 54.243160][ T5923] should_fail_ex.cold+0x5/0xa [ 54.243174][ T5923] should_failslab+0xc2/0x120 [ 54.243189][ T5923] __kmalloc_noprof+0xfc/0x840 [ 54.243201][ T5923] ? tomoyo_profile+0x47/0x60 [ 54.243213][ T5923] ? tomoyo_supervisor+0x65d/0x1340 [ 54.243227][ T5923] tomoyo_supervisor+0x65d/0x1340 [ 54.243240][ T5923] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 54.243262][ T5923] ? tomoyo_check_path_acl+0x141/0x210 [ 54.243277][ T5923] ? tomoyo_check_acl+0x1f7/0x410 [ 54.243294][ T5923] tomoyo_path_permission+0x270/0x3b0 [ 54.243311][ T5923] tomoyo_check_open_permission+0x34d/0x3c0 [ 54.243327][ T5923] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 54.243346][ T5923] ? hook_file_open+0x248/0x8e0 [ 54.243382][ T5923] tomoyo_file_open+0x6b/0x90 [ 54.243396][ T5923] security_file_open+0xb5/0x1e0 [ 54.243413][ T5923] do_dentry_open+0x588/0x14d0 [ 54.243430][ T5923] vfs_open+0x82/0x3f0 [ 54.243448][ T5923] path_openat+0x19fa/0x2440 [ 54.243464][ T5923] ? __pfx_path_openat+0x10/0x10 [ 54.243482][ T5923] do_file_open+0x20e/0x430 [ 54.243497][ T5923] ? __pfx_do_file_open+0x10/0x10 [ 54.243515][ T5923] ? __pfx_kfree_link+0x10/0x10 [ 54.243529][ T5923] ? _raw_spin_unlock+0x28/0x50 [ 54.243542][ T5923] ? alloc_fd+0x471/0x7a0 [ 54.243558][ T5923] do_sys_openat2+0x10f/0x1e0 [ 54.243573][ T5923] ? __pfx_do_sys_openat2+0x10/0x10 [ 54.243587][ T5923] ? find_held_lock+0x2b/0x80 [ 54.243602][ T5923] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 54.243616][ T5923] __ia32_compat_sys_openat+0x12d/0x210 [ 54.243634][ T5923] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 54.243657][ T5923] do_int80_emulation+0x166/0x650 [ 54.243675][ T5923] asm_int80_emulation+0x1a/0x20 [ 54.243686][ T5923] RIP: 0023:0xf71675ab [ 54.243695][ T5923] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 54.243706][ T5923] RSP: 002b:00000000f54263cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 54.243717][ T5923] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5426490 [ 54.243724][ T5923] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.243731][ T5923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.243737][ T5923] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.243744][ T5923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.243758][ T5923] [ 55.015116][ T5940] binder_alloc: 5939: pid 5939 spamming oneway? 1 buffers allocated for a total size of 4096 [ 55.497847][ T5755] Bluetooth: hci0: command tx timeout [ 55.576272][ T5755] Bluetooth: hci1: command tx timeout [ 55.576354][ T5755] Bluetooth: hci3: command tx timeout [ 55.576392][ T5755] Bluetooth: hci2: command tx timeout [ 56.283549][ T5963] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 56.286385][ T5963] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 56.286398][ T5963] PKCS7: Unsupported data type 106 [ 56.292179][ T5963] bridge_slave_0: left allmulticast mode [ 56.292812][ T5963] bridge_slave_0: left promiscuous mode [ 56.293352][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.340144][ T5963] bridge_slave_1: left allmulticast mode [ 56.340229][ T5963] bridge_slave_1: left promiscuous mode [ 56.347500][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.381470][ T5963] bond0: (slave bond_slave_0): Releasing backup interface [ 56.420990][ T5963] bond0: (slave bond_slave_1): Releasing backup interface [ 56.473267][ T5963] team0: Port device team_slave_0 removed [ 56.484689][ T5963] team0: Port device team_slave_1 removed [ 56.485230][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.485244][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.506872][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.506930][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.512136][ T5963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 56.520200][ T5964] team0: Port device xfrm0 added [ 56.669825][ T43] audit: type=1800 audit(1788567586.759:2): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.24" name="direction" dev="configfs" ino=8112 res=0 errno=0 [ 56.672363][ T43] audit: type=1800 audit(1788567586.759:3): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.24" name="UDC" dev="configfs" ino=8114 res=0 errno=0 [ 56.976405][ T1752] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.145531][ T1752] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 57.152740][ T1752] usb 5-1: Dual-Role OTG device on HNP port [ 57.153662][ T1752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.172482][ T1752] gspca_main: spca501-2.14.0 probing 0000:0000 [ 57.173464][ T1752] gspca_spca501: reg write: error -32 [ 57.176827][ T1752] spca501 5-1 ** replaying previous printk message ** [ 57.176827][ T1752] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 57.176898][ T1752] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 57.181112][ C2] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 57.191033][ C2] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 57.193774][ C2] CPU: 2 UID: 0 PID: 1752 Comm: kworker/2:3 Not tainted syzkaller #0 PREEMPT(full) [ 57.196559][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.199810][ C2] Workqueue: usb_hub_wq hub_event [ 57.201689][ C2] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 57.203746][ C2] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 57.210606][ C2] RSP: 0018:ffffc900005489d8 EFLAGS: 00010002 [ 57.212820][ C2] RAX: dffffc0000000000 RBX: ffff888060174000 RCX: 0000000000000103 [ 57.215680][ C2] RDX: 00000000000000e6 RSI: ffffffff87f37c06 RDI: ffff888060174128 [ 57.218538][ C2] RBP: ffff888060174128 R08: 0000000000000004 R09: 0000000000000020 [ 57.221098][ C2] R10: 0000000000000020 R11: 00000000000075fb R12: ffff8880601740f0 [ 57.223480][ C2] R13: ffff888060174128 R14: ffff888060174740 R15: 0000000000000001 [ 57.225996][ C2] FS: 0000000000000000(0000) GS:ffff888096b63000(0000) knlGS:0000000000000000 [ 57.229071][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.231998][ C2] CR2: 00007f714a9b0140 CR3: 00000000216a3000 CR4: 0000000000352ef0 [ 57.235108][ C2] Call Trace: [ 57.236518][ C2] [ 57.237752][ C2] f_midi2_set_alt+0x444/0x5f0 [ 57.239682][ C2] composite_setup+0x16f8/0x9290 [ 57.241715][ C2] ? __lock_acquire+0x4c5/0x1ec0 [ 57.243846][ C2] ? __pfx_composite_setup+0x10/0x10 [ 57.246382][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.249081][ C2] ? do_raw_spin_lock+0x128/0x260 [ 57.251194][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.253491][ C2] ? configfs_composite_setup+0xfb/0x130 [ 57.255740][ C2] configfs_composite_setup+0xfb/0x130 [ 57.258027][ C2] dummy_timer+0x2039/0x3700 [ 57.259897][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 57.261973][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 57.263951][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 57.265902][ C2] ? mark_held_locks+0x40/0x70 [ 57.267995][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.270389][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 57.272486][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 57.274706][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 57.276831][ C2] handle_softirqs+0x1e6/0x9d0 [ 57.278779][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 57.280701][ C2] ? _raw_spin_unlock+0x28/0x50 [ 57.282650][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 57.284968][ C2] __irq_exit_rcu+0x194/0x210 [ 57.286951][ C2] irq_exit_rcu+0x9/0x30 [ 57.288946][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 57.291592][ C2] [ 57.292839][ C2] [ 57.293927][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 57.295717][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 57.297659][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 c5 15 f6 48 89 df e8 0e 1c 16 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 22 05 f6 65 48 83 3d e4 04 bb 08 00 74 16 5b [ 57.304335][ C2] RSP: 0018:ffffc9000c44e880 EFLAGS: 00000246 [ 57.306785][ C2] RAX: 0000000000000006 RBX: ffff8880242c0000 RCX: 0000000000000040 [ 57.310368][ C2] RDX: 0000000000000001 RSI: ffffffff8e3f03f7 RDI: ffffffff8c622480 [ 57.313803][ C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 57.317105][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 57.320056][ C2] R13: ffff888020e99478 R14: 0000000000000000 R15: ffff888020e99400 [ 57.322585][ C2] dummy_urb_enqueue+0x56c/0x880 [ 57.324102][ C2] ? __device_attach_driver+0x131/0x320 [ 57.325783][ C2] usb_hcd_submit_urb+0x268/0x2150 [ 57.327899][ C2] ? bus_for_each_drv+0x159/0x1e0 [ 57.330048][ C2] ? __device_attach+0x1e4/0x4d0 [ 57.332357][ C2] ? device_initial_probe+0xaf/0xd0 [ 57.334565][ C2] ? bus_probe_device+0x64/0x160 [ 57.336631][ C2] ? device_add+0x121d/0x1970 [ 57.338466][ C2] ? usb_new_device.part.0+0xcc2/0x1686 [ 57.340493][ C2] ? hub_event.cold+0x1e3/0xe90 [ 57.342440][ C2] usb_submit_urb+0x827/0x19b0 [ 57.344215][ C2] ? __init_swait_queue_head+0xca/0x150 [ 57.346568][ C2] usb_start_wait_urb+0x10e/0x580 [ 57.348643][ C2] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 57.350904][ C2] ? __asan_memset+0x23/0x50 [ 57.352604][ C2] usb_control_msg+0x328/0x4b0 [ 57.354597][ C2] ? __pfx_usb_control_msg+0x10/0x10 [ 57.356720][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.358966][ C2] usb_control_msg_send+0xca/0x130 [ 57.361101][ C2] usb_set_interface+0x9b6/0xe20 [ 57.363132][ C2] snd_usb_midi_v2_create+0x629/0x4070 [ 57.365464][ C2] ? irqentry_exit+0x24d/0xa10 [ 57.367431][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.369566][ C2] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 57.371865][ C2] ? usb_ifnum_to_if+0x16f/0x1d0 [ 57.373743][ C2] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 57.375927][ C2] usb_audio_probe+0xf0b/0x3b10 [ 57.377966][ C2] ? __pfx_usb_audio_probe+0x10/0x10 [ 57.380148][ C2] ? do_raw_spin_lock+0x128/0x260 [ 57.382292][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.384283][ C2] ? mark_held_locks+0x40/0x70 [ 57.385835][ C2] ? _raw_spin_lock_irqsave+0x52/0x60 [ 57.387570][ C2] ? find_held_lock+0x2b/0x80 [ 57.389103][ C2] ? mark_held_locks+0x40/0x70 [ 57.390946][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.393323][ C2] usb_probe_interface+0x386/0x9b0 [ 57.395347][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 57.397597][ C2] ? kernfs_put+0x3f/0x60 [ 57.399402][ C2] ? sysfs_create_link+0x68/0xc0 [ 57.401527][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 57.404047][ C2] really_probe+0x241/0xa60 [ 57.406262][ C2] __driver_probe_device+0x210/0x460 [ 57.408245][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.410583][ C2] driver_probe_device+0x4a/0x140 [ 57.412684][ C2] __device_attach_driver+0x1df/0x320 [ 57.414940][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 57.417384][ C2] bus_for_each_drv+0x159/0x1e0 [ 57.419411][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 57.421954][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.424749][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 57.427202][ C2] __device_attach+0x1e4/0x4d0 [ 57.429147][ C2] ? __pfx___device_attach+0x10/0x10 [ 57.431257][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 57.433362][ C2] device_initial_probe+0xaf/0xd0 [ 57.435396][ C2] bus_probe_device+0x64/0x160 [ 57.437310][ C2] device_add+0x121d/0x1970 [ 57.439174][ C2] ? __pfx_device_add+0x10/0x10 [ 57.441184][ C2] ? mark_held_locks+0x40/0x70 [ 57.443094][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.445625][ C2] usb_set_configuration+0xd97/0x1c60 [ 57.447991][ C2] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 57.450947][ C2] usb_generic_driver_probe+0xa1/0xe0 [ 57.453255][ C2] usb_probe_device+0xef/0x400 [ 57.455352][ C2] ? __pfx_usb_probe_device+0x10/0x10 [ 57.457548][ C2] really_probe+0x241/0xa60 [ 57.459435][ C2] __driver_probe_device+0x210/0x460 [ 57.461623][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.464093][ C2] driver_probe_device+0x4a/0x140 [ 57.466217][ C2] __device_attach_driver+0x1df/0x320 [ 57.468410][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 57.470841][ C2] bus_for_each_drv+0x159/0x1e0 [ 57.472999][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 57.475769][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.477832][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 57.479820][ C2] __device_attach+0x1e4/0x4d0 [ 57.481736][ C2] ? __pfx___device_attach+0x10/0x10 [ 57.483602][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 57.485473][ C2] device_initial_probe+0xaf/0xd0 [ 57.487266][ C2] bus_probe_device+0x64/0x160 [ 57.489070][ C2] device_add+0x121d/0x1970 [ 57.490716][ C2] ? __pfx_device_add+0x10/0x10 [ 57.492451][ C2] ? usb_detect_static_quirks+0x335/0x3e0 [ 57.494616][ C2] usb_new_device.part.0+0xcc2/0x1686 [ 57.496728][ C2] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 57.499078][ C2] ? mark_held_locks+0x40/0x70 [ 57.500997][ C2] hub_event.cold+0x1e3/0xe90 [ 57.502917][ C2] ? __pfx_hub_event+0x10/0x10 [ 57.504869][ C2] ? __pfx_debug_mutex_unlock+0x10/0x10 [ 57.506769][ C2] ? lock_acquire+0x1d1/0x380 [ 57.508549][ C2] ? process_one_work+0xa2c/0x1b10 [ 57.510442][ C2] ? process_one_work+0x906/0x1b10 [ 57.512162][ C2] ? process_one_work+0x906/0x1b10 [ 57.514418][ C2] process_one_work+0xac7/0x1b10 [ 57.516669][ C2] ? __pfx_process_one_work+0x10/0x10 [ 57.518926][ C2] ? lock_acquire+0x1d1/0x380 [ 57.520795][ C2] ? __pfx_hub_event+0x10/0x10 [ 57.522702][ C2] worker_thread+0x5ef/0xe50 [ 57.524612][ C2] ? __pfx_worker_thread+0x10/0x10 [ 57.526812][ C2] ? kthread+0x13a/0x450 [ 57.528918][ C2] ? __pfx_worker_thread+0x10/0x10 [ 57.531084][ C2] kthread+0x373/0x450 [ 57.532924][ C2] ? __pfx_kthread+0x10/0x10 [ 57.534780][ C2] ret_from_fork+0x730/0xd60 [ 57.536731][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 57.539334][ C2] ? __switch_to+0x800/0x10f0 [ 57.541255][ C2] ? __pfx_kthread+0x10/0x10 [ 57.543095][ C2] ret_from_fork_asm+0x1a/0x30 [ 57.545298][ C2] [ 57.546916][ C2] Modules linked in: [ 57.548836][ C2] ---[ end trace 0000000000000000 ]--- [ 57.551153][ C2] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 57.551183][ C2] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 57.551203][ C2] RSP: 0018:ffffc900005489d8 EFLAGS: 00010002 [ 57.551221][ C2] RAX: dffffc0000000000 RBX: ffff888060174000 RCX: 0000000000000103 [ 57.551235][ C2] RDX: 00000000000000e6 RSI: ffffffff87f37c06 RDI: ffff888060174128 [ 57.551249][ C2] RBP: ffff888060174128 R08: 0000000000000004 R09: 0000000000000020 [ 57.551263][ C2] R10: 0000000000000020 R11: 00000000000075fb R12: ffff8880601740f0 [ 57.551276][ C2] R13: ffff888060174128 R14: ffff888060174740 R15: 0000000000000001 [ 57.551289][ C2] FS: 0000000000000000(0000) GS:ffff888096b63000(0000) knlGS:0000000000000000 [ 57.551330][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.551346][ C2] CR2: 00007f714a9b0140 CR3: 00000000216a3000 CR4: 0000000000352ef0 [ 57.551363][ C2] Kernel panic - not syncing: Fatal exception in interrupt [ 57.591991][ C2] Kernel Offset: disabled [ 57.593332][ C2] Rebooting in 86400 seconds..