last executing test programs: 7.418864612s ago: executing program 0 (id=321): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/23, 0x17) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000001c0)="736178afc68225527df558f025b36dae7e62ec5b837645762c04aa4894a8bf9d9b1510786c8635afd791a953636c625b5b7366b103591fecfacfd5a6", 0x3c}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000003600)="c8e7976cbd5d75", 0x7}], 0x1}}], 0x3, 0xc000) 7.255212027s ago: executing program 0 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4a) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f0000000240)="c7", 0x1) sendfile(r4, r3, 0x0, 0x3ffff) 6.096000068s ago: executing program 0 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x84, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @val={0x3, 0x1, 0x84}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x68}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}, @beacon=[@NL80211_ATTR_PROBE_RESP={0xa, 0x91, "86be2cf76019"}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_BEACON_TAIL={0x4}]]}, 0x84}}, 0x0) 5.828484801s ago: executing program 0 (id=331): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) syz_io_uring_setup(0x27c9, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14}) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) write$proc_mixer(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='\"'], 0x33) close(r4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) 4.245362112s ago: executing program 3 (id=340): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) 4.17568245s ago: executing program 0 (id=341): io_setup(0x8, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x13, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0xdf, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x20, 0x8, 0x2b, {0x2b, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438db1787"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.063119246s ago: executing program 3 (id=344): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000300)="410800000037bc", 0x7}], 0x1) 3.994971771s ago: executing program 3 (id=345): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0xf) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 3.874982443s ago: executing program 3 (id=348): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5910fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0xc50, 0x30, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{0xc3c, 0x1, [@m_ipt={0xc38, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0xc0d, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xc50}}, 0x4000000) read$alg(r1, &(0x7f0000000a00)=""/4087, 0xff7) 3.747269804s ago: executing program 3 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x8c802) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0xeeee8000, 0x1000, 0x8}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x8201, 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa080007400000000078000680140005"], 0x10c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan1\x00'}) 3.616228013s ago: executing program 3 (id=350): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) 2.490696696s ago: executing program 1 (id=351): socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.407071408s ago: executing program 2 (id=352): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) 1.990600083s ago: executing program 2 (id=353): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x84, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @val={0x3, 0x1, 0x84}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x68}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}, @beacon=[@NL80211_ATTR_PROBE_RESP={0xa, 0x91, "86be2cf76019"}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_BEACON_TAIL={0x4}]]}, 0x84}}, 0x0) 1.932102468s ago: executing program 1 (id=354): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000300)="410800000037bc", 0x7}], 0x1) 1.800367095s ago: executing program 2 (id=355): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 1.7541797s ago: executing program 1 (id=356): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0xf) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1.647817188s ago: executing program 1 (id=357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x41000, 0x0, 0xfffffffd}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000003c0)={0xb000, 0xd000, 0x1}) 1.636035475s ago: executing program 2 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x8c802) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000040)={0xeeee8000, 0x1000, 0x8}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8201, 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa080007400000000078000680140005"], 0x10c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000440)={0x6c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xd}, @device_a, @device_b, @initial, {0x0, 0x8cd}}, 0x40, @val={0x8c, 0x10, {0x17b, "1c362be7e8fe", @short="cceb975708697785"}}}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x251}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x8800) 1.245497957s ago: executing program 2 (id=359): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, 0x0, 0x0) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1}}], 0x1, 0x2, 0x0) 1.13970172s ago: executing program 1 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f0000000240)="c7", 0x1) sendfile(r4, r3, 0x0, 0x3ffff) 77.841964ms ago: executing program 1 (id=361): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) 16.116628ms ago: executing program 2 (id=362): socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=363): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x84, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @val={0x3, 0x1, 0x84}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x68}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}, @beacon=[@NL80211_ATTR_PROBE_RESP={0xa, 0x91, "86be2cf76019"}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_BEACON_TAIL={0x4}]]}, 0x84}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 75.749541][ T5595] cgroup: Unknown subsys name 'net' [ 75.977809][ T5595] cgroup: Unknown subsys name 'cpuset' [ 76.043530][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.610364][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.960528][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.992727][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.004529][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.006607][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.007461][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.008155][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.018142][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.020549][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.024573][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.040072][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.041386][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.043751][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.044153][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.062120][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.062205][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.064411][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.076021][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.088552][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.090868][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.092521][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.144042][ T5615] Bluetooth: hci0: command tx timeout [ 82.144047][ T5624] Bluetooth: hci2: command tx timeout [ 82.199342][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.200071][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.200415][ T5607] bridge_slave_0: entered allmulticast mode [ 82.202275][ T5607] bridge_slave_0: entered promiscuous mode [ 82.212969][ T5624] Bluetooth: hci3: command tx timeout [ 82.223429][ T5624] Bluetooth: hci1: command tx timeout [ 82.278396][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.278638][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.278955][ T5607] bridge_slave_1: entered allmulticast mode [ 82.280576][ T5607] bridge_slave_1: entered promiscuous mode [ 82.302351][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.302608][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.304377][ T5608] bridge_slave_0: entered allmulticast mode [ 82.307806][ T5608] bridge_slave_0: entered promiscuous mode [ 82.313227][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.313481][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.314057][ T5609] bridge_slave_0: entered allmulticast mode [ 82.317909][ T5609] bridge_slave_0: entered promiscuous mode [ 82.365529][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.365791][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.366013][ T5608] bridge_slave_1: entered allmulticast mode [ 82.367860][ T5608] bridge_slave_1: entered promiscuous mode [ 82.369508][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.369655][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.369785][ T5609] bridge_slave_1: entered allmulticast mode [ 82.371620][ T5609] bridge_slave_1: entered promiscuous mode [ 82.409020][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.410571][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.410788][ T5606] bridge_slave_0: entered allmulticast mode [ 82.415231][ T5606] bridge_slave_0: entered promiscuous mode [ 82.464467][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.464835][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.465148][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.465379][ T5606] bridge_slave_1: entered allmulticast mode [ 82.467145][ T5606] bridge_slave_1: entered promiscuous mode [ 82.527156][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.554120][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.558218][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.688530][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.692337][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.718151][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.749747][ T5607] team0: Port device team_slave_0 added [ 82.758947][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.791022][ T5607] team0: Port device team_slave_1 added [ 82.811496][ T5608] team0: Port device team_slave_0 added [ 82.820013][ T5609] team0: Port device team_slave_0 added [ 82.850614][ T5608] team0: Port device team_slave_1 added [ 82.859120][ T5609] team0: Port device team_slave_1 added [ 82.876461][ T5606] team0: Port device team_slave_0 added [ 82.905580][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.905590][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.905604][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.909238][ T5606] team0: Port device team_slave_1 added [ 82.955916][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.955932][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.955955][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.987073][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.987089][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.987112][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.997455][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.997470][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.997493][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.040491][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.040506][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.040525][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.046281][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.046295][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.046318][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.052150][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.052163][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.052185][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.087341][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.087357][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.087380][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.249138][ T5607] hsr_slave_0: entered promiscuous mode [ 83.251247][ T5607] hsr_slave_1: entered promiscuous mode [ 83.325080][ T5608] hsr_slave_0: entered promiscuous mode [ 83.326182][ T5608] hsr_slave_1: entered promiscuous mode [ 83.327109][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 83.327182][ T5608] Cannot create hsr debugfs directory [ 83.350260][ T5609] hsr_slave_0: entered promiscuous mode [ 83.351601][ T5609] hsr_slave_1: entered promiscuous mode [ 83.353650][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 83.353673][ T5609] Cannot create hsr debugfs directory [ 83.401043][ T5606] hsr_slave_0: entered promiscuous mode [ 83.402136][ T5606] hsr_slave_1: entered promiscuous mode [ 83.403936][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 83.403958][ T5606] Cannot create hsr debugfs directory [ 84.213452][ T5624] Bluetooth: hci0: command tx timeout [ 84.213771][ T5624] Bluetooth: hci2: command tx timeout [ 84.293402][ T5624] Bluetooth: hci3: command tx timeout [ 84.293428][ T5624] Bluetooth: hci1: command tx timeout [ 84.381804][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.435429][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.448016][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.491181][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.492572][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.526104][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.550180][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.588641][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.691580][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.720797][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.727344][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.766734][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.768732][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.789836][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.820500][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.847247][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.954073][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.996932][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.009767][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.037352][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.064425][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.110763][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.124299][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.156896][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.295879][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.327763][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.339548][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.378828][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.382456][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.429248][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.440715][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.473930][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.579569][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.674791][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.680224][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.722573][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.724542][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.768997][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.769163][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.800191][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.843591][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.845397][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.845533][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.891710][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.891857][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.957015][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.983272][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.007682][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.007833][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.056772][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.056915][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.120663][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.191519][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.191696][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.270617][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.270781][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.295246][ T5615] Bluetooth: hci2: command tx timeout [ 86.295277][ T5615] Bluetooth: hci0: command tx timeout [ 86.372967][ T5624] Bluetooth: hci1: command tx timeout [ 86.372996][ T5624] Bluetooth: hci3: command tx timeout [ 86.738646][ T822] cfg80211: failed to load regulatory.db [ 87.071575][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.548736][ T5607] veth0_vlan: entered promiscuous mode [ 87.623318][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.658704][ T5607] veth1_vlan: entered promiscuous mode [ 87.701758][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.869814][ T5607] veth0_macvtap: entered promiscuous mode [ 87.917584][ T5607] veth1_macvtap: entered promiscuous mode [ 87.932361][ T5608] veth0_vlan: entered promiscuous mode [ 87.962628][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.974632][ T5606] veth0_vlan: entered promiscuous mode [ 88.004366][ T5608] veth1_vlan: entered promiscuous mode [ 88.019790][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.037769][ T5606] veth1_vlan: entered promiscuous mode [ 88.058940][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.092155][ T1071] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.111235][ T1071] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.130641][ T1071] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.146624][ T1071] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.310285][ T5608] veth0_macvtap: entered promiscuous mode [ 88.380688][ T5615] Bluetooth: hci0: command tx timeout [ 88.380717][ T5615] Bluetooth: hci2: command tx timeout [ 88.452228][ T5609] veth0_vlan: entered promiscuous mode [ 88.453128][ T5615] Bluetooth: hci1: command tx timeout [ 88.453166][ T5624] Bluetooth: hci3: command tx timeout [ 88.455262][ T5608] veth1_macvtap: entered promiscuous mode [ 88.473576][ T5606] veth0_macvtap: entered promiscuous mode [ 88.512777][ T5606] veth1_macvtap: entered promiscuous mode [ 88.566569][ T5609] veth1_vlan: entered promiscuous mode [ 88.606649][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.606671][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.645270][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.680247][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.690189][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.741848][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.764812][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.767333][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.768196][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.768211][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.771982][ T3064] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.806030][ T3064] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.819194][ T3064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.839408][ T3064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.892806][ T3064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.896937][ T3064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.899805][ T5609] veth0_macvtap: entered promiscuous mode [ 89.015142][ T5609] veth1_macvtap: entered promiscuous mode [ 89.395224][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.528433][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.550619][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.550637][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.602458][ T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.620187][ T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.622690][ T83] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.637141][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.658472][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.658490][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.763720][ T3064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.763738][ T3064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.864666][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.864685][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.457717][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.457736][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.904150][ T1452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.904169][ T1452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.718426][ T5624] Bluetooth: hci3: Unknown advertising packet type: 0x11 [ 94.718448][ T5624] Bluetooth: hci3: Unknown advertising packet type: 0x17 [ 95.032028][ T5846] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.227336][ T5876] binder: 5875:5876 ioctl c0306201 2000000002c0 returned -14 [ 98.177308][ T38] audit: type=1804 audit(1781163776.012:2): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.44" name="/newroot/14/bus/bus" dev="overlay" ino=98 res=1 errno=0 [ 98.438281][ T38] audit: type=1326 audit(1781163776.662:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.0.50" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f888161ce59 code=0x0 [ 99.505914][ T5883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.687773][ T5765] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.967135][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.967177][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.967197][ T5765] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.967238][ T5765] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.967259][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.046061][ T5906] binder: 5905:5906 ioctl c0306201 2000000002c0 returned -14 [ 100.047065][ T5765] usb 3-1: config 0 descriptor?? [ 100.204575][ T5911] 9p: Bad value for 'rfdno' [ 100.295366][ T5912] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 100.762850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.782852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.792848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.852850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.862846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.872842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.327389][ T5765] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 102.460472][ T5765] usb 3-1: USB disconnect, device number 2 [ 102.718749][ T38] audit: type=1804 audit(1781163780.882:4): pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.69" name="/newroot/21/bus/bus" dev="overlay" ino=134 res=1 errno=0 [ 103.276930][ T5946] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 103.304736][ T5624] Bluetooth: hci3: adv larger than maximum supported [ 103.304752][ T5624] Bluetooth: hci3: Malformed LE Event: 0x0d [ 103.424206][ T5947] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 103.424255][ T5947] overlayfs: overlapping lowerdir path [ 103.685545][ T5944] fido_id[5944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 104.812906][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.024107][ T9] usb 1-1: device descriptor read/64, error -71 [ 105.319709][ T38] audit: type=1326 audit(1781163783.532:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.2.79" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0700dce59 code=0x0 [ 105.355461][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.482961][ T9] usb 1-1: device descriptor read/64, error -71 [ 105.585709][ T5624] Bluetooth: hci0: adv larger than maximum supported [ 105.585725][ T5624] Bluetooth: hci0: Malformed LE Event: 0x0d [ 105.722609][ T9] usb usb1-port1: attempt power cycle [ 106.472965][ T38] audit: type=1804 audit(1781163784.242:6): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.80" name="/newroot/23/bus/bus" dev="overlay" ino=145 res=1 errno=0 [ 106.568407][ T5969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.683082][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.751299][ T9] usb 1-1: device descriptor read/8, error -71 [ 107.740463][ T5624] Bluetooth: hci0: adv larger than maximum supported [ 107.740479][ T5624] Bluetooth: hci0: Malformed LE Event: 0x0d [ 107.869136][ T6003] syz.1.92 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 108.272791][ T6019] binder_alloc: 6018: binder_alloc_buf, no vma [ 108.418924][ T5624] Bluetooth: hci0: adv larger than maximum supported [ 108.418941][ T5624] Bluetooth: hci0: Malformed LE Event: 0x0d [ 108.539444][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.493917][ T38] audit: type=1326 audit(1781163787.712:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.0.101" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f888161ce59 code=0x0 [ 109.504025][ T10] usb 2-1: device descriptor read/64, error -71 [ 109.772972][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.588513][ T6047] ======================================================= [ 110.588513][ T6047] WARNING: The mand mount option has been deprecated and [ 110.588513][ T6047] and is ignored by this kernel. Remove the mand [ 110.588513][ T6047] option from the mount to silence this warning. [ 110.588513][ T6047] ======================================================= [ 110.673073][ T10] usb 2-1: device descriptor read/64, error -71 [ 110.769732][ T6032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.783457][ T10] usb usb2-port1: attempt power cycle [ 110.874355][ T5624] Bluetooth: hci2: adv larger than maximum supported [ 110.874371][ T5624] Bluetooth: hci2: Malformed LE Event: 0x0d [ 113.485854][ T38] audit: type=1326 audit(1781163791.712:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6089 comm="syz.1.121" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc97d29ce59 code=0x0 [ 113.754221][ T37] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.022944][ T37] usb 4-1: device descriptor read/64, error -71 [ 114.766084][ T37] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.810129][ T6089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.893142][ T37] usb 4-1: device descriptor read/64, error -71 [ 114.938750][ T5624] Bluetooth: hci1: adv larger than maximum supported [ 114.938766][ T5624] Bluetooth: hci1: Malformed LE Event: 0x0d [ 115.005849][ T37] usb usb4-port1: attempt power cycle [ 115.110737][ T6119] Zero length message leads to an empty skb [ 115.345936][ T37] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.363646][ T37] usb 4-1: device descriptor read/8, error -71 [ 116.108190][ T37] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.221623][ T37] usb 4-1: device descriptor read/8, error -71 [ 116.329286][ T37] usb usb4-port1: unable to enumerate USB device [ 116.568816][ T38] audit: type=1326 audit(1781163794.792:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.143" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f888161ce59 code=0x0 [ 116.725684][ T6144] pim6reg: entered allmulticast mode [ 116.726133][ T6148] pim6reg: left allmulticast mode [ 116.922193][ T6160] overlay: Unknown parameter '/' [ 117.143879][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.272925][ T9] usb 2-1: device descriptor read/64, error -71 [ 117.435323][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.514212][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.622498][ T6179] overlay: Unknown parameter '/' [ 117.653916][ T9] usb 2-1: device descriptor read/64, error -71 [ 117.764895][ T9] usb usb2-port1: attempt power cycle [ 118.071450][ T6196] overlay: Unknown parameter '/' [ 118.155483][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 118.174699][ T9] usb 2-1: device descriptor read/8, error -71 [ 118.424621][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.428543][ T38] audit: type=1326 audit(1781163796.652:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.173" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f608569ce59 code=0x0 [ 118.445611][ T9] usb 2-1: device descriptor read/8, error -71 [ 118.558361][ T9] usb usb2-port1: unable to enumerate USB device [ 119.537279][ T6211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.568788][ T38] audit: type=1326 audit(1781163798.792:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.205" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f888161ce59 code=0x0 [ 120.644944][ T6286] binder: 6285:6286 ioctl c0306201 2000000002c0 returned -14 [ 120.693142][ T37] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.823647][ T37] usb 4-1: device descriptor read/64, error -71 [ 121.062909][ T37] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 121.193156][ T37] usb 4-1: device descriptor read/64, error -71 [ 121.303226][ T37] usb usb4-port1: attempt power cycle [ 121.316336][ T5716] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.472938][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 121.475282][ T5716] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 121.475349][ T5716] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.475372][ T5716] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.475395][ T5716] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.475419][ T5716] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.475461][ T5716] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.475484][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.538205][ T6281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.462937][ T37] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.487816][ T37] usb 4-1: device descriptor read/8, error -71 [ 122.645275][ T5716] usb 3-1: usb_control_msg returned -32 [ 122.645320][ T5716] usbtmc 3-1:16.0: can't read capabilities [ 122.723041][ T37] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.744792][ T37] usb 4-1: device descriptor read/8, error -71 [ 122.853390][ T37] usb usb4-port1: unable to enumerate USB device [ 122.941485][ T6326] binder: BINDER_SET_CONTEXT_MGR already set [ 122.941500][ T6326] binder: 6325:6326 ioctl 4018620d 200000004a80 returned -16 [ 123.001907][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.002502][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.027327][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.028067][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.060535][ T38] audit: type=1326 audit(1781163801.282:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.1.228" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc97d29ce59 code=0x0 [ 123.061783][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.081155][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.113652][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.117424][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.347164][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.453114][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.292101][ T6329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.472450][ T6301] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 124.474749][ T6327] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 124.526433][ T5716] usb 3-1: USB disconnect, device number 3 [ 124.639774][ T6350] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 124.854930][ T6356] binder: BINDER_SET_CONTEXT_MGR already set [ 124.854945][ T6356] binder: 6355:6356 ioctl 4018620d 200000004a80 returned -16 [ 125.166955][ T5781] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.697013][ T5781] usb 1-1: device descriptor read/64, error -71 [ 125.932992][ T5781] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.091424][ T5781] usb 1-1: device descriptor read/64, error -71 [ 126.127534][ T38] audit: type=1326 audit(1781163804.352:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.2.246" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0700dce59 code=0x0 [ 126.194758][ T5781] usb usb1-port1: attempt power cycle [ 126.239219][ T6379] binder: BINDER_SET_CONTEXT_MGR already set [ 126.239228][ T6379] binder: 6378:6379 ioctl 4018620d 200000004a80 returned -16 [ 126.543865][ T5781] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.574138][ T5781] usb 1-1: device descriptor read/8, error -71 [ 126.825748][ T5781] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.844908][ T5781] usb 1-1: device descriptor read/8, error -71 [ 126.891705][ T6403] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 126.953196][ T5781] usb usb1-port1: unable to enumerate USB device [ 126.999143][ T6371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.341546][ T6419] ALSA: mixer_oss: invalid OSS volume '' [ 127.699591][ T6428] syzkaller1: entered promiscuous mode [ 127.699614][ T6428] syzkaller1: entered allmulticast mode [ 127.949952][ T6440] netlink: 96 bytes leftover after parsing attributes in process `syz.0.276'. [ 128.090314][ T38] audit: type=1326 audit(1781163806.312:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.1.279" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc97d29ce59 code=0x0 [ 128.703006][ T5781] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 128.903869][ T5781] usb 4-1: Using ep0 maxpacket: 32 [ 128.905867][ T5781] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 128.905892][ T5781] usb 4-1: config 0 has no interface number 0 [ 128.905935][ T5781] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 128.905956][ T5781] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.905967][ T5781] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 128.905979][ T5781] usb 4-1: config 0 interface 196 has no altsetting 0 [ 128.908292][ T5781] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 128.908319][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.908338][ T5781] usb 4-1: Product: syz [ 128.908348][ T5781] usb 4-1: Manufacturer: syz [ 128.908356][ T5781] usb 4-1: SerialNumber: syz [ 129.834789][ T5781] usb 4-1: config 0 descriptor?? [ 129.843443][ T6459] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.882132][ T6445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.070672][ T6480] pim6reg: entered allmulticast mode [ 130.135098][ T6480] pim6reg: left allmulticast mode [ 130.234633][ T6484] binder_alloc: 6483: binder_alloc_buf, no vma [ 130.266674][ T5781] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 130.266971][ T5781] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 130.471604][ T5781] usb 4-1: USB disconnect, device number 10 [ 131.757845][ T5624] Bluetooth: hci2: adv larger than maximum supported [ 131.757860][ T5624] Bluetooth: hci2: Malformed LE Event: 0x0d [ 132.159334][ T6517] binder_alloc: 6516: binder_alloc_buf, no vma [ 133.369953][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.379225][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.653065][ T6535] ALSA: mixer_oss: invalid OSS volume '' [ 133.770581][ T6543] binder_alloc: 6542: binder_alloc_buf, no vma [ 135.530261][ T6568] ALSA: mixer_oss: invalid OSS volume '' [ 137.253247][ T5341] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 137.411674][ T5341] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 137.411722][ T5341] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 137.411750][ T5341] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.411783][ T5341] usb 1-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 137.411806][ T5341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.441704][ T6609] netlink: 96 bytes leftover after parsing attributes in process `syz.3.349'. [ 137.475053][ T5341] usb 1-1: config 0 descriptor?? [ 137.657341][ T6611] overlayfs: failed to resolve './file1': -2 [ 139.035908][ T5341] wacom 0003:056A:0013.0002: ignoring exceeding usage max [ 139.037169][ T5341] wacom 0003:056A:0013.0002: ignoring exceeding usage max [ 139.039800][ T5341] wacom 0003:056A:0013.0002: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 139.064452][ T5341] wacom 0003:056A:0013.0002: hidraw0: USB HID v0.81 Device [HID 056a:0013] on usb-dummy_hcd.0-1/input0 [ 139.161256][ T5341] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0013.0002/input/input5 [ 139.729066][ T6637] netlink: 96 bytes leftover after parsing attributes in process `syz.2.358'. [ 139.852361][ T5341] usb 1-1: USB disconnect, device number 10 [ 140.252815][ T6644] overlayfs: failed to resolve './file1': -2 [ 141.447328][ T0] ------------[ cut here ]------------ [ 141.447339][ T0] rq->clock_update_flags < RQCF_ACT_SKIP [ 141.447349][ T0] WARNING: kernel/sched/sched.h:1792 at update_curr_idle+0x1cf/0x260, CPU#1: swapper/1/0 [ 141.447383][ T0] Modules linked in: [ 141.447415][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.447435][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.447446][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 141.447468][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 5a 8b 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 3e [ 141.447479][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 141.447491][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 141.447501][ T0] RDX: ffff88802c315d00 RSI: ffffffff8dbde3b0 RDI: ffffffff8bcc4a80 [ 141.447511][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 141.447521][ T0] R10: ffff8880b873c910 R11: ffffffff8199f020 R12: dffffc0000000000 [ 141.447531][ T0] R13: ffffffff8dc14058 R14: ffff88801e2bdd00 R15: ffff8880b873c620 [ 141.447541][ T0] FS: 0000000000000000(0000) GS:ffff888125b6e000(0000) knlGS:0000000000000000 [ 141.447556][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.447565][ T0] CR2: 000020000008b030 CR3: 00000000223ea000 CR4: 00000000003526f0 [ 141.447578][ T0] Call Trace: [ 141.447587][ T0] [ 141.447597][ T0] put_prev_task_idle+0xd/0x20 [ 141.447618][ T0] __schedule+0x3da0/0x5550 [ 141.447654][ T0] ? __pfx___schedule+0x10/0x10 [ 141.447667][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.447691][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 141.447712][ T0] schedule_idle+0x51/0x90 [ 141.447728][ T0] do_idle+0x4a6/0x540 [ 141.447749][ T0] ? __pfx_do_idle+0x10/0x10 [ 141.447768][ T0] ? do_idle+0x11/0x540 [ 141.447791][ T0] cpu_startup_entry+0x43/0x60 [ 141.447810][ T0] start_secondary+0x101/0x110 [ 141.447827][ T0] common_startup_64+0x13e/0x157 [ 141.447859][ T0] [ 141.447867][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 141.447877][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.447893][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.447901][ T0] Call Trace: [ 141.447906][ T0] [ 141.447911][ T0] vpanic+0x56c/0xa60 [ 141.447932][ T0] ? __pfx__printk+0x10/0x10 [ 141.447947][ T0] ? __pfx_vpanic+0x10/0x10 [ 141.447965][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 141.447986][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 141.448011][ T0] panic+0xc5/0xd0 [ 141.448030][ T0] ? __pfx_panic+0x10/0x10 [ 141.448062][ T0] ? common_startup_64+0x13e/0x157 [ 141.448082][ T0] __warn+0x315/0x4c0 [ 141.448096][ T0] ? update_curr_idle+0x1cf/0x260 [ 141.448111][ T0] ? update_curr_idle+0x1cf/0x260 [ 141.448126][ T0] __report_bug+0x339/0x540 [ 141.448142][ T0] ? update_curr_idle+0x1cf/0x260 [ 141.448164][ T0] ? __pfx___report_bug+0x10/0x10 [ 141.448180][ T0] ? pick_task_fair+0x21a/0x1410 [ 141.448198][ T0] ? update_curr_idle+0x1cf/0x260 [ 141.448212][ T0] report_bug+0x16a/0x220 [ 141.448224][ T0] ? update_curr_idle+0x1cf/0x260 [ 141.448238][ T0] ? update_curr_idle+0x1d1/0x260 [ 141.448252][ T0] handle_bug+0x9c/0x200 [ 141.448266][ T0] exc_invalid_op+0x1a/0x50 [ 141.448280][ T0] asm_exc_invalid_op+0x1a/0x20 [ 141.448290][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 141.448305][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 5a 8b 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 3e [ 141.448313][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 141.448321][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 141.448328][ T0] RDX: ffff88802c315d00 RSI: ffffffff8dbde3b0 RDI: ffffffff8bcc4a80 [ 141.448335][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 141.448341][ T0] R10: ffff8880b873c910 R11: ffffffff8199f020 R12: dffffc0000000000 [ 141.448349][ T0] R13: ffffffff8dc14058 R14: ffff88801e2bdd00 R15: ffff8880b873c620 [ 141.448358][ T0] ? __pfx_put_prev_task_idle+0x10/0x10 [ 141.448377][ T0] ? update_curr_idle+0xab/0x260 [ 141.448393][ T0] put_prev_task_idle+0xd/0x20 [ 141.448407][ T0] __schedule+0x3da0/0x5550 [ 141.448429][ T0] ? __pfx___schedule+0x10/0x10 [ 141.448439][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.448454][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 141.448470][ T0] schedule_idle+0x51/0x90 [ 141.448480][ T0] do_idle+0x4a6/0x540 [ 141.448495][ T0] ? __pfx_do_idle+0x10/0x10 [ 141.448509][ T0] ? do_idle+0x11/0x540 [ 141.448525][ T0] cpu_startup_entry+0x43/0x60 [ 141.448539][ T0] start_secondary+0x101/0x110 [ 141.448550][ T0] common_startup_64+0x13e/0x157 [ 141.448572][ T0] [ 142.520645][ T0] Shutting down cpus with NMI [ 142.520833][ T0] Kernel Offset: disabled