last executing test programs: 3.046598051s ago: executing program 2 (id=36): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setuid(0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000086fec4d7bab54c8f4837aa17db000000000000000000ef8e473961000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000046d18af077d36d4b1"], 0x5000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x4, 0x0, 0x7ff9, 0x409, 0x4, 0x0, 0x2, 0x0, 0x1, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) io_uring_setup(0x5e4b, &(0x7f0000000040)={0x0, 0xc8a5, 0xc000, 0x8, 0x3dc, 0x0, r6}) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.276621731s ago: executing program 0 (id=46): syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @mcast2, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x11}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 2.055724972s ago: executing program 2 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write(r0, &(0x7f0000000d40)="7d0d47fca6cbe46d7339b1ce90", 0xd) 2.055590725s ago: executing program 2 (id=52): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f00000002c0)={0x20, 0x13, 0x2, "1504"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.536537318s ago: executing program 1 (id=66): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) 1.447572389s ago: executing program 1 (id=68): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) chdir(0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0xb19, 0x0) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r2 = socket(0x40000000015, 0x5, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 1.379974129s ago: executing program 0 (id=69): sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000100)=0x2) 1.146834596s ago: executing program 0 (id=70): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) 1.066937132s ago: executing program 1 (id=72): socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 985.810261ms ago: executing program 1 (id=74): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4dc, 0x7c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 985.636597ms ago: executing program 1 (id=75): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 985.508339ms ago: executing program 0 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) write(r0, &(0x7f0000000280)='1', 0x1) 906.536481ms ago: executing program 0 (id=77): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002f00)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x1, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xf}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) 496.733136ms ago: executing program 0 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) fcntl$setstatus(r0, 0x4, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x22, 0x6, 0x7) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x20}}, 0x8000) 416.194195ms ago: executing program 3 (id=82): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback, 0x3c7}, 0x7e) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f00000002c0)={0xa, 0x4e20, 0x4000, @empty, 0x4}, 0x1c, 0x0}, 0x4004000) 416.017865ms ago: executing program 2 (id=83): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 415.955544ms ago: executing program 3 (id=84): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) 345.672053ms ago: executing program 2 (id=85): r0 = inotify_init() open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x3ac}) close_range(r0, 0xffffffffffffffff, 0x0) 274.423547ms ago: executing program 3 (id=86): munlock(&(0x7f0000111000/0x6000)=nil, 0x6000) 274.157977ms ago: executing program 3 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='2', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='6', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) write(r5, &(0x7f0000000780)='2', 0x1) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000940)='dummy_udc.0', 0xb) 106.193097ms ago: executing program 3 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) 105.936006ms ago: executing program 1 (id=89): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917a", 0x6f}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423", 0x2f}], 0x3}}], 0x1, 0x4000000) write(r0, &(0x7f0000001f00)="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", 0x6be) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 86.434067ms ago: executing program 2 (id=90): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 0s ago: executing program 3 (id=91): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000700)='\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) read$char_usb(r1, &(0x7f0000000600)=""/64, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:30766' (ED25519) to the list of known hosts. [ 42.182224][ T5670] cgroup: Unknown subsys name 'net' [ 42.332553][ T5670] cgroup: Unknown subsys name 'cpuset' [ 42.336298][ T5670] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.386622][ T5670] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.519654][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.528263][ T5755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.533978][ T5755] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.537506][ T5755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.541327][ T5755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.541579][ T5760] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.542321][ T5761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.542823][ T5761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.544038][ T5761] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.544546][ T5755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.544887][ T5755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.549982][ T5760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.554877][ T5763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.556717][ T5760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.560406][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.562040][ T5763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.563900][ T5763] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.572650][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.575423][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.576284][ T5763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.207775][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.211007][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.213753][ T5746] bridge_slave_0: entered allmulticast mode [ 48.216377][ T5746] bridge_slave_0: entered promiscuous mode [ 48.243432][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.246692][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.249056][ T5746] bridge_slave_1: entered allmulticast mode [ 48.252681][ T5746] bridge_slave_1: entered promiscuous mode [ 48.322749][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.327174][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.341048][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.343232][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.345694][ T5758] bridge_slave_0: entered allmulticast mode [ 48.348270][ T5758] bridge_slave_0: entered promiscuous mode [ 48.353205][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.355447][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.357745][ T5758] bridge_slave_1: entered allmulticast mode [ 48.360439][ T5758] bridge_slave_1: entered promiscuous mode [ 48.368607][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.370788][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.372941][ T5747] bridge_slave_0: entered allmulticast mode [ 48.375418][ T5747] bridge_slave_0: entered promiscuous mode [ 48.378727][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.380895][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.383001][ T5748] bridge_slave_0: entered allmulticast mode [ 48.385458][ T5748] bridge_slave_0: entered promiscuous mode [ 48.393486][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.395661][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.397909][ T5748] bridge_slave_1: entered allmulticast mode [ 48.400507][ T5748] bridge_slave_1: entered promiscuous mode [ 48.408640][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.410810][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.412883][ T5747] bridge_slave_1: entered allmulticast mode [ 48.415375][ T5747] bridge_slave_1: entered promiscuous mode [ 48.448421][ T5746] team0: Port device team_slave_0 added [ 48.451621][ T5746] team0: Port device team_slave_1 added [ 48.454711][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.458945][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.463699][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.468478][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.495239][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.503897][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.507512][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.510021][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.519805][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.557502][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.561730][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.569846][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.575546][ T5758] team0: Port device team_slave_0 added [ 48.579384][ T5758] team0: Port device team_slave_1 added [ 48.590771][ T5748] team0: Port device team_slave_0 added [ 48.611332][ T5747] team0: Port device team_slave_0 added [ 48.615317][ T5748] team0: Port device team_slave_1 added [ 48.640033][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.642827][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.651258][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.660856][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.662976][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.670511][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.675357][ T5747] team0: Port device team_slave_1 added [ 48.679266][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.681537][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.690285][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.694188][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.696284][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.703889][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.740554][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.742761][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.750427][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.755130][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.757232][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.765270][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.779190][ T5746] hsr_slave_0: entered promiscuous mode [ 48.783198][ T5746] hsr_slave_1: entered promiscuous mode [ 48.806388][ T5748] hsr_slave_0: entered promiscuous mode [ 48.808644][ T5748] hsr_slave_1: entered promiscuous mode [ 48.810843][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 48.812794][ T5748] Cannot create hsr debugfs directory [ 48.855837][ T5758] hsr_slave_0: entered promiscuous mode [ 48.858939][ T5758] hsr_slave_1: entered promiscuous mode [ 48.861890][ T5758] debugfs: 'hsr0' already exists in 'hsr' [ 48.863779][ T5758] Cannot create hsr debugfs directory [ 48.880991][ T5747] hsr_slave_0: entered promiscuous mode [ 48.884065][ T5747] hsr_slave_1: entered promiscuous mode [ 48.886778][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 48.889089][ T5747] Cannot create hsr debugfs directory [ 49.220588][ T5746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.231090][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.234879][ T5746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.243586][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.248306][ T5746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.254742][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.268423][ T5746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.276911][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.322293][ T5758] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.327818][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.335605][ T5758] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.341126][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.344535][ T5758] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.350687][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.364742][ T5758] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.369021][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.418058][ T5747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.424422][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.427668][ T5747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.434651][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.439220][ T5747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.444662][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.447468][ T5747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.451976][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.539656][ T5748] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.543857][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.546447][ T5748] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.552787][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.555449][ T5748] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.559378][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.562519][ T5748] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.566109][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.582809][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.601184][ T5754] Bluetooth: hci3: command tx timeout [ 49.603907][ T5752] Bluetooth: hci2: command tx timeout [ 49.609718][ T5754] Bluetooth: hci0: command tx timeout [ 49.609892][ T5752] Bluetooth: hci1: command tx timeout [ 49.629344][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.644099][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.647664][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.659625][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.679380][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.682677][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.692947][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.697510][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.718087][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.720294][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.732143][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.736062][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.739072][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.760549][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.763193][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.778020][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.781038][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.838814][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.860908][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.884940][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.888141][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.903603][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.905700][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.145917][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.183173][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.196550][ T5758] veth0_vlan: entered promiscuous mode [ 50.204354][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.211929][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.217822][ T5758] veth1_vlan: entered promiscuous mode [ 50.270871][ T5747] veth0_vlan: entered promiscuous mode [ 50.276644][ T5758] veth0_macvtap: entered promiscuous mode [ 50.288568][ T5747] veth1_vlan: entered promiscuous mode [ 50.293015][ T5758] veth1_macvtap: entered promiscuous mode [ 50.298027][ T5746] veth0_vlan: entered promiscuous mode [ 50.311516][ T5746] veth1_vlan: entered promiscuous mode [ 50.320200][ T5748] veth0_vlan: entered promiscuous mode [ 50.326143][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.335023][ T5748] veth1_vlan: entered promiscuous mode [ 50.339212][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.356899][ T5747] veth0_macvtap: entered promiscuous mode [ 50.365410][ T5747] veth1_macvtap: entered promiscuous mode [ 50.395837][ T5746] veth0_macvtap: entered promiscuous mode [ 50.412518][ T5746] veth1_macvtap: entered promiscuous mode [ 50.416405][ T5748] veth0_macvtap: entered promiscuous mode [ 50.423286][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.429931][ T5558] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.439255][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.444398][ T5748] veth1_macvtap: entered promiscuous mode [ 50.474636][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.484781][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.485426][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.490482][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.491942][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.510299][ T5558] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.510958][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.516494][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.516574][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.585849][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.590909][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.591589][ T5758] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.610370][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.619177][ T5758] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.628320][ T5758] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.632166][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.637161][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.642917][ T5758] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.645808][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.650684][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.660120][ T5758] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.670423][ T5558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.702010][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.702311][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.707762][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.709972][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.751096][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.753344][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.770160][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.780298][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.783074][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.799577][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.817853][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.820742][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.823259][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.826913][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.832083][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.835101][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.837593][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.841020][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.931370][ T5901] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 50.931660][ T5903] vlan0: entered promiscuous mode [ 50.947192][ T5903] team0: Port device vlan0 added [ 51.679813][ T5752] Bluetooth: hci3: command tx timeout [ 51.680104][ T5754] Bluetooth: hci0: command tx timeout [ 51.690363][ T5752] Bluetooth: hci2: command tx timeout [ 51.690412][ T5754] Bluetooth: hci1: command tx timeout [ 52.106239][ T5929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.452953][ T5933] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9'. [ 53.096976][ T5929] Zero length message leads to an empty skb [ 53.126733][ T5940] Invalid ELF header magic: != ELF [ 53.389606][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.499752][ T5895] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.571658][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.575469][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 53.581544][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 53.584521][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 53.586963][ T29] usb 7-1: Product: syz [ 53.588263][ T29] usb 7-1: Manufacturer: syz [ 53.589814][ T29] usb 7-1: SerialNumber: syz [ 53.640904][ T5895] usb 8-1: device descriptor read/64, error -71 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x8c000) [ 53.731662][ T1131] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 53.733904][ T1131] ata1: failed to read log page 10h (errno=-5) [ 53.736132][ T1131] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 53.738580][ T1131] ata1.00: irq_stat 0x41000000 [ 53.740469][ T1131] ata1.00: failed command: READ FPDMA QUEUED [ 53.742626][ T1131] ata1.00: cmd 60/60:f0:8e:3b:01/04:00:00:00:00/40 tag 30 ncq dma 573440 in [ 53.742626][ T1131] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 53.748299][ T1131] ata1.00: status: { DRDY } [ 53.749989][ T1131] ata1.00: error: { ABRT } [ 53.756598][ T1131] ata1.00: configured for UDMA/100 [ 53.759683][ T5754] Bluetooth: hci2: command tx timeout [ 53.759724][ T5752] Bluetooth: hci3: command tx timeout [ 53.759762][ T5763] Bluetooth: hci1: command tx timeout [ 53.760013][ T5754] Bluetooth: hci0: command tx timeout [ 53.760932][ T1131] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 53.760974][ T1131] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 53.761009][ T1131] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 53.761049][ T1131] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 3b 8e 00 04 60 00 [ 53.761151][ T1131] I/O error, dev sda, sector 80782 op 0x0:(READ) flags 0x80700 phys_seg 140 prio class 2 [ 53.761531][ T1131] ata1: EH complete [ 53.889604][ T5895] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.019661][ T5895] usb 8-1: device descriptor read/64, error -71 [ 54.024294][ T5966] syz_tun: entered promiscuous mode [ 54.140840][ T5895] usb usb8-port1: attempt power cycle [ 54.162368][ T5850] usb 7-1: USB disconnect, device number 2 [ 54.378211][ T5979] process 'syz.0.21' launched '/dev/fd/5' with NULL argv: empty string added [ 54.476973][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.481211][ T5895] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 54.500837][ T5895] usb 8-1: device descriptor read/8, error -71 [ 54.751006][ T5895] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 54.771070][ T5895] usb 8-1: device descriptor read/8, error -71 [ 54.889771][ T5895] usb usb8-port1: unable to enumerate USB device [ 55.839765][ T5763] Bluetooth: hci3: command tx timeout [ 55.839765][ T64] Bluetooth: hci0: command tx timeout [ 55.839791][ T64] Bluetooth: hci2: command tx timeout [ 55.841368][ T5763] Bluetooth: hci1: command tx timeout [ 56.499510][ T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.528178][ T6071] netlink: 'syz.3.57': attribute type 4 has an invalid length. [ 56.603886][ T6075] Bluetooth: MGMT ver 1.23 [ 56.650675][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 56.655046][ T50] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 56.658045][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.663919][ T50] usb 7-1: Product: syz [ 56.665849][ T50] usb 7-1: Manufacturer: syz [ 56.667944][ T50] usb 7-1: SerialNumber: syz [ 56.687985][ T50] usb 7-1: config 0 descriptor?? [ 56.697618][ T50] gspca_main: sq930x-2.14.0 probing 2770:930c [ 57.145877][ T6101] syzkaller0: entered promiscuous mode [ 57.148195][ T6101] syzkaller0: entered allmulticast mode [ 57.350153][ T50] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 57.409898][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.483132][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.494292][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.589927][ T50] gspca_sq930x: Sensor ov9630 not yet treated [ 57.593478][ T50] sq930x 7-1:0.0: probe with driver sq930x failed with error -22 [ 57.599260][ T50] usb 7-1: USB disconnect, device number 3 [ 57.629608][ T5558] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.635393][ T5459] veth0_macvtap: left promiscuous mode [ 57.720642][ T5558] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.728728][ T5558] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.732967][ T5558] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.359515][ T41] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.540585][ T41] usb 5-1: Dual-Role OTG device on HNP port [ 58.543266][ T41] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 58.546143][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.555682][ T41] gspca_main: spca501-2.14.0 probing 0000:0000 [ 58.558136][ T41] gspca_spca501: reg write: error -32 [ 58.560126][ T41] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 58.562414][ T41] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 58.569622][ T50] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 58.572128][ C3] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 58.577544][ C3] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 58.581087][ C3] CPU: 3 UID: 0 PID: 41 Comm: kworker/3:1 Not tainted syzkaller #0 PREEMPT(full) [ 58.584890][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.588509][ C3] Workqueue: usb_hub_wq hub_event [ 58.590120][ C3] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 58.591972][ C3] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 58.597934][ C3] RSP: 0000:ffffc900005e89e8 EFLAGS: 00010002 [ 58.599843][ C3] RAX: dffffc0000000000 RBX: ffff88805d030000 RCX: ffffffff87e54ec9 [ 58.602299][ C3] RDX: 00000000000000e6 RSI: ffffffff87e54d06 RDI: ffff88805d030128 [ 58.604771][ C3] RBP: ffff88805d030128 R08: 0000000000000004 R09: 0000000000000020 [ 58.607326][ C3] R10: 0000000000000020 R11: 000000000000756b R12: ffff88805d0300f0 [ 58.609839][ C3] R13: ffff88805d030128 R14: ffff88805d030740 R15: 0000000000000001 [ 58.612321][ C3] FS: 0000000000000000(0000) GS:ffff888096ee1000(0000) knlGS:0000000000000000 [ 58.615237][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.617412][ C3] CR2: 00000000f50684b9 CR3: 0000000072ae7000 CR4: 0000000000352ef0 [ 58.619836][ C3] Call Trace: [ 58.620850][ C3] [ 58.621730][ C3] f_midi2_set_alt+0x444/0x5f0 [ 58.623315][ C3] composite_setup+0x16f8/0x9290 [ 58.624972][ C3] ? __lock_acquire+0x49f/0x1a40 [ 58.626544][ C3] ? __bfs+0x291/0x2a0 [ 58.627961][ C3] ? __pfx_composite_setup+0x10/0x10 [ 58.629590][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 58.631207][ C3] ? do_raw_spin_lock+0x128/0x260 [ 58.632739][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 58.634336][ C3] ? configfs_composite_setup+0xfb/0x130 [ 58.636085][ C3] configfs_composite_setup+0xfb/0x130 [ 58.637833][ C3] dummy_timer+0x2045/0x36f0 [ 58.639499][ C3] ? trace_fn_trace+0x191/0x200 [ 58.641051][ C3] ? do_raw_spin_lock+0x128/0x260 [ 58.642642][ C3] ? find_held_lock+0x2b/0x80 [ 58.644140][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 58.645897][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 58.647953][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 58.650357][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 58.652113][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 58.654000][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 58.655569][ C3] ? mark_held_locks+0x40/0x70 [ 58.657100][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 58.658966][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 58.660517][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 58.662147][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 58.663764][ C3] handle_softirqs+0x1ea/0x9b0 [ 58.665293][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 58.666983][ C3] ? _raw_spin_unlock+0x28/0x50 [ 58.668695][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 58.670559][ C3] __irq_exit_rcu+0x162/0x210 [ 58.672051][ C3] irq_exit_rcu+0x9/0x30 [ 58.673389][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 58.675158][ C3] [ 58.676099][ C3] [ 58.677073][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.679061][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 58.681077][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 68 29 f6 48 89 df e8 be b7 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 c6 18 f6 65 8b 05 4e f7 a7 08 85 c0 74 16 5b [ 58.688336][ C3] RSP: 0000:ffffc90000646928 EFLAGS: 00000246 [ 58.690266][ C3] RAX: 0000000000000006 RBX: ffff888025754000 RCX: 0000000000000040 [ 58.692719][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a92f6 RDI: ffffffff8c400a80 [ 58.695174][ C3] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 58.697796][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 58.700365][ C3] R13: ffff88802575f478 R14: 0000000000000000 R15: ffff88802575f400 [ 58.702995][ C3] dummy_urb_enqueue+0x56c/0x880 [ 58.704571][ C3] ? usb_remove_hcd+0x81/0x100 [ 58.706075][ C3] usb_hcd_submit_urb+0x268/0x2150 [ 58.707883][ C3] ? __device_attach+0x1e4/0x4d0 [ 58.709770][ C3] ? device_initial_probe+0xaf/0xd0 [ 58.711513][ C3] ? bus_probe_device+0x64/0x160 [ 58.713223][ C3] ? device_add+0x121d/0x1970 [ 58.715005][ C3] ? usb_new_device.cold+0x685/0x115c [ 58.717072][ C3] ? hub_event+0x30a3/0x4a60 [ 58.718572][ C3] ? process_one_work+0xa23/0x1940 [ 58.720195][ C3] usb_submit_urb+0x827/0x19b0 [ 58.721711][ C3] ? __init_swait_queue_head+0xca/0x150 [ 58.723463][ C3] usb_start_wait_urb+0x10e/0x580 [ 58.725102][ C3] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 58.726999][ C3] ? trace_kmalloc+0xeb/0x110 [ 58.728630][ C3] ? __asan_memset+0x23/0x50 [ 58.730095][ C3] usb_control_msg+0x328/0x4b0 [ 58.731620][ C3] ? __pfx_usb_control_msg+0x10/0x10 [ 58.733273][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 58.734912][ C3] usb_control_msg_send+0xca/0x130 [ 58.736524][ C3] usb_set_interface+0x9b6/0xe20 [ 58.738084][ C3] snd_usb_midi_v2_create+0x629/0x4070 [ 58.739802][ C3] ? __mutex_unlock_slowpath+0x35d/0x930 [ 58.741566][ C3] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 58.743447][ C3] ? snd_info_create_entry+0x6f/0x400 [ 58.745134][ C3] ? lockdep_init_map_type+0x5c/0x250 [ 58.746817][ C3] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 58.748814][ C3] ? snd_info_create_entry+0x314/0x400 [ 58.750548][ C3] ? usb_ifnum_to_if+0x16f/0x1d0 [ 58.752107][ C3] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 58.753956][ C3] usb_audio_probe+0xf05/0x3b10 [ 58.755602][ C3] ? __pfx_usb_audio_probe+0x10/0x10 [ 58.757297][ C3] ? do_raw_spin_lock+0x128/0x260 [ 58.758898][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 58.760576][ C3] ? mark_held_locks+0x40/0x70 [ 58.762078][ C3] ? _raw_spin_lock_irqsave+0x52/0x60 [ 58.763756][ C3] ? mark_held_locks+0x40/0x70 [ 58.765269][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 58.767126][ C3] usb_probe_interface+0x303/0x8f0 [ 58.768764][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 58.770525][ C3] really_probe+0x241/0xa60 [ 58.771960][ C3] __driver_probe_device+0x20e/0x450 [ 58.773614][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.775472][ C3] driver_probe_device+0x4a/0x140 [ 58.777094][ C3] __device_attach_driver+0x1df/0x320 [ 58.779339][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 58.781290][ C3] bus_for_each_drv+0x159/0x1e0 [ 58.782851][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 58.784542][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 58.786173][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 58.788062][ C3] __device_attach+0x1e4/0x4d0 [ 58.789568][ C3] ? __pfx___device_attach+0x10/0x10 [ 58.791231][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 58.792857][ C3] device_initial_probe+0xaf/0xd0 [ 58.794457][ C3] bus_probe_device+0x64/0x160 [ 58.795958][ C3] device_add+0x121d/0x1970 [ 58.797481][ C3] ? __pfx_device_add+0x10/0x10 [ 58.799032][ C3] ? mark_held_locks+0x40/0x70 [ 58.800537][ C3] usb_set_configuration+0xd97/0x1c60 [ 58.802245][ C3] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 58.803256][ T50] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.804631][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 58.804659][ C3] usb_probe_device+0xef/0x400 [ 58.809125][ T50] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.811072][ C3] ? __pfx_usb_probe_device+0x10/0x10 [ 58.811104][ C3] really_probe+0x241/0xa60 [ 58.811132][ C3] __driver_probe_device+0x20e/0x450 [ 58.811157][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.815532][ T50] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 58.818428][ C3] driver_probe_device+0x4a/0x140 [ 58.818458][ C3] __device_attach_driver+0x1df/0x320 [ 58.818482][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 58.821023][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.822654][ C3] bus_for_each_drv+0x159/0x1e0 [ 58.822683][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 58.822704][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 58.825115][ T50] usb 8-1: Product: syz [ 58.827331][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 58.827359][ C3] __device_attach+0x1e4/0x4d0 [ 58.827386][ C3] ? __pfx___device_attach+0x10/0x10 [ 58.831374][ T50] usb 8-1: Manufacturer: syz [ 58.833144][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 58.833174][ C3] device_initial_probe+0xaf/0xd0 [ 58.835634][ T50] usb 8-1: SerialNumber: syz [ 58.837932][ C3] bus_probe_device+0x64/0x160 [ 58.837959][ C3] device_add+0x121d/0x1970 [ 58.861447][ C3] ? __pfx_device_add+0x10/0x10 [ 58.862992][ C3] ? usb_detect_static_quirks+0x335/0x3e0 [ 58.864761][ C3] usb_new_device.cold+0x685/0x115c [ 58.866401][ C3] ? _mutex_trylock_nest_lock+0x241/0x310 [ 58.868249][ C3] ? __pfx_usb_new_device+0x10/0x10 [ 58.869885][ C3] ? mark_held_locks+0x40/0x70 [ 58.871407][ C3] hub_event+0x30a3/0x4a60 [ 58.872815][ C3] ? __pfx_hub_event+0x10/0x10 [ 58.874332][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 58.876089][ C3] ? rcu_is_watching+0x12/0xc0 [ 58.877610][ C3] process_one_work+0xa23/0x1940 [ 58.879174][ C3] ? __pfx_process_one_work+0x10/0x10 [ 58.880889][ C3] ? __pfx_hub_event+0x10/0x10 [ 58.882406][ C3] worker_thread+0x5ef/0xe50 [ 58.883871][ C3] ? kthread+0x13a/0x450 [ 58.885222][ C3] ? __pfx_worker_thread+0x10/0x10 [ 58.886835][ C3] kthread+0x370/0x450 [ 58.888357][ C3] ? __pfx_kthread+0x10/0x10 [ 58.890013][ C3] ret_from_fork+0x72b/0xd50 [ 58.891507][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 58.893111][ C3] ? __switch_to+0x800/0x10f0 [ 58.894597][ C3] ? __pfx_kthread+0x10/0x10 [ 58.896065][ C3] ret_from_fork_asm+0x1a/0x30 [ 58.897617][ C3] [ 58.898615][ C3] Modules linked in: [ 58.899941][ C3] ---[ end trace 0000000000000000 ]--- [ 58.901657][ C3] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 58.903500][ C3] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 58.910211][ C3] RSP: 0000:ffffc900005e89e8 EFLAGS: 00010002 [ 58.912760][ C3] RAX: dffffc0000000000 RBX: ffff88805d030000 RCX: ffffffff87e54ec9 [ 58.916026][ C3] RDX: 00000000000000e6 RSI: ffffffff87e54d06 RDI: ffff88805d030128 [ 58.919331][ C3] RBP: ffff88805d030128 R08: 0000000000000004 R09: 0000000000000020 [ 58.922590][ C3] R10: 0000000000000020 R11: 000000000000756b R12: ffff88805d0300f0 [ 58.925835][ C3] R13: ffff88805d030128 R14: ffff88805d030740 R15: 0000000000000001 [ 58.929054][ C3] FS: 0000000000000000(0000) GS:ffff888096ee1000(0000) knlGS:0000000000000000 [ 58.932631][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.935372][ C3] CR2: 00000000f50684b9 CR3: 0000000072ae7000 CR4: 0000000000352ef0 [ 58.938631][ C3] Kernel panic - not syncing: Fatal exception in interrupt [ 58.941872][ C3] Kernel Offset: disabled [ 58.943247][ C3] Rebooting in 86400 seconds..