last executing test programs: 1.187118343s ago: executing program 0 (id=1): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRES8=0x0, @ANYRES8=r0, @ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x221240, 0x22) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWTABLE={0x130, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x71, 0x6, "0d88c4371997f61d6fcd10f9a20c339e2032fe28897effb94c8ad5ebaf082ca1858ca9fab35da876f06e5c907880aa2a70b9d321d39240f775ebef21d2b98fa3e34c860028af7ce53e2f9124e48db8844bc8c2daed115c05adef8251242871a86f42d561e17063b55a3e3ea63d"}, @NFTA_TABLE_USERDATA={0x7a, 0x6, "ca0291b6a3bb19ee243fb6cf9ca79c8d0cf8b19c3577ad62395e699491c9cb6ff430dd62f350fa676dd2c6bab795972d7afabb8423d571be2ed4b0dccc90378ca2c72e120f6b1972ad491c2cd8eb701a4777c6bbec1ae327a4c00d43cad43d5e8ffa8b1ee1c3255d2bf752f29f77a402298bf1608383"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1a4}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000010c0)={0x7, {"a2e3ad21ed0d52f91b5d520987f70e06d038e7ff7fc6e5539b0d47078b089b3307386d090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e470dea05918b41243513f000800000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3e3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14d9fdb8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129afde2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a19000000000000006f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d44400009a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc01008cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f144b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c16c02ed4b5d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6b14effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6815d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3c115c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc248850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cc009fc074bb6b68a1f0c4649820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948998cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2fd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5dc4ff8f0104000000000000df72279fdb0d2b9e936e5a983c12fded79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d3700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa6e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0960600daf60af93109eb1dee72e4363f51af62af6fb2a6df3fec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c2990f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) 592.656948ms ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (fail_nth: 1) 498.829598ms ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000021c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000010c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/4084, 0xff4, 0x2102, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x6, 0xbdea, 0xffffde0000000001, 0xfa15, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xf, &(0x7f0000001000)=ANY=[@ANYBLOB="0300", @ANYRES32, @ANYRES64=r3, @ANYRESHEX=r6, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0xfffffc01, 0x3f, &(0x7f0000000140)=""/63, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xd, 0x1, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000240), &(0x7f00000002c0)=[{0x5, 0x5, 0x9, 0x1}, {0x2, 0x3, 0xd, 0x7}, {0x0, 0x3, 0xc, 0x4}, {0x7, 0x4, 0x0, 0x5}], 0x10, 0xb9}, 0x94) openat$cgroup_root(0xffffff9c, &(0x7f0000001080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7ffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf660}, 0x94) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f140100000000000000"], 0x1c}}, 0x0) r8 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000780)={0x7, 0x0, [{0x4, 0xffffffff, 0x1, 0x7, 0x40006, 0x6, 0x2}, {0x40000000, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}, {0x7, 0x8, 0x0, 0x2, 0xbb69, 0x5, 0xffff}, {0xb, 0xf5f, 0x0, 0x7, 0x0, 0x6, 0x80000001}, {0xd, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x2, 0x1, 0x5, 0x6, 0x4, 0x4, 0x3}, {0x1, 0x8d3d, 0x6, 0x9, 0x3ff, 0x1, 0x3}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32=r1], 0xb8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) 0s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xbbce}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xe4598c9ec5ac0917}, 0x2000400c) unlinkat(r0, &(0x7f0000001140)='./file1\x00', 0x0) unlinkat(r0, &(0x7f0000000300)='./file2\x00', 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001fff"], 0x40}}, 0x4000080) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001200)={r4, 0x6, 0xdbf, 0x6}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001240)={{{@in6=@local, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000001340)=0xe4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x4, 0x30, 0x5, 0x15}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000001180), &(0x7f00000011c0)=0xe) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r7, &(0x7f0000000140)=""/4096, 0x1000) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 55.256020][ T5488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.274074][ T5488] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. syzkaller login: [ 80.960658][ T5809] cgroup: Unknown subsys name 'net' [ 81.072884][ T5809] cgroup: Unknown subsys name 'cpuset' [ 81.082532][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.726393][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.090040][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.095043][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.102407][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.107917][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.119185][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.127636][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.135968][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.136019][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.146142][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.155677][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.164047][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.170930][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.176835][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.186453][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.194808][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.203286][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.208512][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.218405][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.226517][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.235048][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.276153][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.289842][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.297947][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.308143][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.316209][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.806745][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 85.968227][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 86.109154][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.116518][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.124822][ T5836] bridge_slave_0: entered allmulticast mode [ 86.132590][ T5836] bridge_slave_0: entered promiscuous mode [ 86.166566][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.174040][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.182703][ T5836] bridge_slave_1: entered allmulticast mode [ 86.190363][ T5836] bridge_slave_1: entered promiscuous mode [ 86.204921][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.317415][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.349603][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 86.362106][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.369519][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.376902][ T5840] bridge_slave_0: entered allmulticast mode [ 86.384535][ T5840] bridge_slave_0: entered promiscuous mode [ 86.394517][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.440804][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.456940][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.465406][ T5840] bridge_slave_1: entered allmulticast mode [ 86.474494][ T5840] bridge_slave_1: entered promiscuous mode [ 86.540773][ T5836] team0: Port device team_slave_0 added [ 86.597832][ T5836] team0: Port device team_slave_1 added [ 86.606369][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.616475][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 86.629057][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.636555][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.644240][ T5837] bridge_slave_0: entered allmulticast mode [ 86.651698][ T5837] bridge_slave_0: entered promiscuous mode [ 86.677852][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.716685][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.724120][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.731705][ T5837] bridge_slave_1: entered allmulticast mode [ 86.739786][ T5837] bridge_slave_1: entered promiscuous mode [ 86.766965][ T5840] team0: Port device team_slave_0 added [ 86.810289][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.817716][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.844206][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.858954][ T5840] team0: Port device team_slave_1 added [ 86.903972][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.911112][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.937370][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.961194][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.039718][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.067133][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.074516][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.082298][ T5839] bridge_slave_0: entered allmulticast mode [ 87.090725][ T5839] bridge_slave_0: entered promiscuous mode [ 87.105477][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.113296][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.120851][ T5839] bridge_slave_1: entered allmulticast mode [ 87.129948][ T5839] bridge_slave_1: entered promiscuous mode [ 87.153794][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.160967][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.188514][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.228980][ T51] Bluetooth: hci0: command tx timeout [ 87.272289][ T5836] hsr_slave_0: entered promiscuous mode [ 87.279557][ T5836] hsr_slave_1: entered promiscuous mode [ 87.287053][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.294975][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.321352][ T51] Bluetooth: hci2: command tx timeout [ 87.327094][ T51] Bluetooth: hci1: command tx timeout [ 87.327150][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.334079][ T5827] Bluetooth: hci3: command tx timeout [ 87.359444][ T5837] team0: Port device team_slave_0 added [ 87.388204][ T51] Bluetooth: hci4: command tx timeout [ 87.422821][ T5837] team0: Port device team_slave_1 added [ 87.443863][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.451679][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.459520][ T5838] bridge_slave_0: entered allmulticast mode [ 87.467370][ T5838] bridge_slave_0: entered promiscuous mode [ 87.477839][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.518617][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.525834][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.533698][ T5838] bridge_slave_1: entered allmulticast mode [ 87.541226][ T5838] bridge_slave_1: entered promiscuous mode [ 87.550465][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.565200][ T5840] hsr_slave_0: entered promiscuous mode [ 87.572047][ T5840] hsr_slave_1: entered promiscuous mode [ 87.578505][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 87.584320][ T5840] Cannot create hsr debugfs directory [ 87.590872][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.597851][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.624133][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.675654][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.682911][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.709818][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.755627][ T5839] team0: Port device team_slave_0 added [ 87.780064][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.815198][ T5839] team0: Port device team_slave_1 added [ 87.823146][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.902416][ T5837] hsr_slave_0: entered promiscuous mode [ 87.909213][ T5837] hsr_slave_1: entered promiscuous mode [ 87.915529][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 87.921588][ T5837] Cannot create hsr debugfs directory [ 87.982144][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.989212][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.015774][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.032750][ T5838] team0: Port device team_slave_0 added [ 88.069181][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.076272][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.102439][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.116015][ T5838] team0: Port device team_slave_1 added [ 88.252401][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.259545][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.286070][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.342456][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.349664][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.376412][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.411481][ T5839] hsr_slave_0: entered promiscuous mode [ 88.417905][ T5839] hsr_slave_1: entered promiscuous mode [ 88.424457][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 88.430676][ T5839] Cannot create hsr debugfs directory [ 88.547380][ T5838] hsr_slave_0: entered promiscuous mode [ 88.554121][ T5838] hsr_slave_1: entered promiscuous mode [ 88.560787][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 88.566673][ T5838] Cannot create hsr debugfs directory [ 88.675921][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.713051][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.737596][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.772123][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.915882][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.926772][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.938475][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.951692][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.056589][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.073631][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.103755][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.116683][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.190457][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.214665][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.256090][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.267610][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.288398][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.320308][ T51] Bluetooth: hci0: command tx timeout [ 89.355401][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.382218][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.391227][ T51] Bluetooth: hci2: command tx timeout [ 89.396729][ T51] Bluetooth: hci1: command tx timeout [ 89.399704][ T5827] Bluetooth: hci3: command tx timeout [ 89.411435][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.426022][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.443416][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.468685][ T5827] Bluetooth: hci4: command tx timeout [ 89.472957][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.481847][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.511353][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.518584][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.566145][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.667325][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.694615][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.710899][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.718489][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.748941][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.756094][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.785755][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.809774][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.817112][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.849792][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.860941][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.868412][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.901218][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.930890][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.969316][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.014143][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.021695][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.056278][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.063669][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.088522][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.103106][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.110417][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.133248][ T5836] veth0_vlan: entered promiscuous mode [ 90.155078][ T5836] veth1_vlan: entered promiscuous mode [ 90.174920][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.182798][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.240778][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.252959][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.303935][ T5836] veth0_macvtap: entered promiscuous mode [ 90.317258][ T5836] veth1_macvtap: entered promiscuous mode [ 90.384627][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.411685][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.435345][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.459457][ T5837] veth0_vlan: entered promiscuous mode [ 90.473996][ T5837] veth1_vlan: entered promiscuous mode [ 90.485581][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.494515][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.504715][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.527376][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.537281][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.579923][ T5840] veth0_vlan: entered promiscuous mode [ 90.605750][ T5840] veth1_vlan: entered promiscuous mode [ 90.703075][ T5838] veth0_vlan: entered promiscuous mode [ 90.721553][ T5837] veth0_macvtap: entered promiscuous mode [ 90.746357][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.757838][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.774792][ T5839] veth0_vlan: entered promiscuous mode [ 90.793945][ T5838] veth1_vlan: entered promiscuous mode [ 90.806657][ T5837] veth1_macvtap: entered promiscuous mode [ 90.826601][ T5840] veth0_macvtap: entered promiscuous mode [ 90.838048][ T5840] veth1_macvtap: entered promiscuous mode [ 90.859981][ T5839] veth1_vlan: entered promiscuous mode [ 90.877543][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.889498][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.900791][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.930427][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.945676][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.972387][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.983384][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.000397][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.030974][ T5838] veth0_macvtap: entered promiscuous mode [ 91.040197][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.050243][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.072740][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.111350][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.121965][ T5838] veth1_macvtap: entered promiscuous mode [ 91.135190][ T5839] veth0_macvtap: entered promiscuous mode [ 91.143540][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.154750][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.164887][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.183178][ T5839] veth1_macvtap: entered promiscuous mode [ 91.285604][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.332626][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.361643][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.386354][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.397684][ T5827] Bluetooth: hci0: command tx timeout [ 91.404166][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.429937][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.442189][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.454749][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.469922][ T5827] Bluetooth: hci1: command tx timeout [ 91.472487][ T51] Bluetooth: hci3: command tx timeout [ 91.481857][ T5824] Bluetooth: hci2: command tx timeout [ 91.504574][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.517700][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.536008][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.543986][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.552500][ T51] Bluetooth: hci4: command tx timeout [ 91.570246][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.580976][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.604341][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.612424][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.622304][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.623032][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.642524][ T796] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.676173][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.684634][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.798293][ T796] usb 1-1: Using ep0 maxpacket: 16 [ 91.822334][ T796] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 91.849275][ T796] usb 1-1: config 0 has no interface number 0 [ 91.855462][ T796] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 91.867688][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.898812][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.948822][ T796] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 91.958020][ T796] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 91.988866][ T796] usb 1-1: Product: syz [ 92.000143][ T796] usb 1-1: SerialNumber: syz [ 92.030879][ T796] usb 1-1: config 0 descriptor?? [ 92.040674][ T5921] FAULT_INJECTION: forcing a failure. [ 92.040674][ T5921] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.062603][ T5921] CPU: 1 UID: 0 PID: 5921 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 92.062630][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.062651][ T5921] Call Trace: [ 92.062659][ T5921] [ 92.062667][ T5921] dump_stack_lvl+0xe8/0x150 [ 92.062710][ T5921] should_fail_ex+0x412/0x560 [ 92.062744][ T5921] _copy_from_user+0x2d/0xb0 [ 92.062767][ T5921] get_compat_msghdr+0xb3/0x4c0 [ 92.062789][ T5921] ? __lock_acquire+0x6b5/0x2cf0 [ 92.062819][ T5921] ? __pfx_get_compat_msghdr+0x10/0x10 [ 92.062841][ T5921] ? kstrtoull+0x12f/0x1d0 [ 92.062875][ T5921] ___sys_sendmsg+0x201/0x360 [ 92.062905][ T5921] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.062939][ T5921] ? get_pid_task+0x20/0x1f0 [ 92.062957][ T5921] ? get_pid_task+0x20/0x1f0 [ 92.062973][ T5921] ? get_pid_task+0x20/0x1f0 [ 92.063017][ T5921] ? __fget_files+0x2a/0x420 [ 92.063043][ T5921] ? __fget_files+0x3a0/0x420 [ 92.063076][ T5921] __sys_sendmsg+0x183/0x260 [ 92.063098][ T5921] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.063134][ T5921] __do_fast_syscall_32+0x20d/0x640 [ 92.063157][ T5921] ? do_fast_syscall_32+0x33/0x70 [ 92.063177][ T5921] ? asm_int80_emulation+0x1a/0x20 [ 92.063194][ T5921] ? do_int80_emulation+0x274/0x4d0 [ 92.063213][ T5921] ? trace_irq_disable+0x3b/0x150 [ 92.063244][ T5921] do_fast_syscall_32+0x33/0x70 [ 92.063264][ T5921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.063285][ T5921] RIP: 0023:0xf70bef6c [ 92.063310][ T5921] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 92.063325][ T5921] RSP: 002b:00000000f548c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 92.063343][ T5921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 92.063355][ T5921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.063365][ T5921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.063374][ T5921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 92.063383][ T5921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.063408][ T5921] [ 92.076448][ T796] cm109 1-1:0.8: invalid payload size 768, expected 4 [ 92.123620][ T24] cfg80211: failed to load regulatory.db [ 92.159699][ T796] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 92.210091][ T5922] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.347612][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.407211][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.438380][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.448165][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.508970][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.528575][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.650180][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 92.657357][ C0] ------------[ cut here ]------------ [ 92.663045][ C0] URB ffff888025676f00 submitted while active [ 92.669174][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#0: syz.0.1/5916 [ 92.679041][ C0] Modules linked in: [ 92.683081][ C0] CPU: 0 UID: 0 PID: 5916 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 92.692233][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.702751][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 92.708259][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 c7 f3 f8 fa 49 83 3e 00 74 40 e8 8c b1 8e fa 48 8d 3d c5 e8 e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 71 b1 8e fa eb 05 e8 6a b1 [ 92.729719][ C0] RSP: 0018:ffffc90000007960 EFLAGS: 00010083 [ 92.735987][ C0] RAX: ffffffff8736ef54 RBX: ffff888025676f00 RCX: 0000000000040000 [ 92.743992][ C0] RDX: ffffc90002141000 RSI: ffff888025676f00 RDI: ffffffff901ed820 [ 92.752696][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 92.760731][ C0] R10: dffffc0000000000 R11: fffff52000000f2c R12: 0000000000000820 [ 92.768734][ C0] R13: ffff888056c8f830 R14: ffff888025676f08 R15: dffffc0000000000 [ 92.776735][ C0] FS: 0000000000000000(0000) GS:ffff888125460000(0063) knlGS:00000000582e1480 [ 92.785714][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 92.792336][ C0] CR2: 000000008001e018 CR3: 000000007bffa000 CR4: 00000000003526f0 [ 92.800337][ C0] Call Trace: [ 92.803727][ C0] [ 92.806586][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 92.812441][ C0] ? ___ratelimit+0x58c/0x8d0 [ 92.817231][ C0] cm109_urb_irq_callback+0x6e2/0xcb0 [ 92.822656][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 92.828095][ C0] dummy_timer+0xbbd/0x45d0 [ 92.832651][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 92.837681][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 92.843654][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 92.849435][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 92.854621][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 92.860494][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 92.865477][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 92.870451][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 92.875699][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 92.881503][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 92.887891][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 92.893047][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.898299][ C0] handle_softirqs+0x22a/0x870 [ 92.903104][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 92.907907][ C0] __irq_exit_rcu+0x5f/0x150 [ 92.912525][ C0] irq_exit_rcu+0x9/0x30 [ 92.916801][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 92.922455][ C0] [ 92.925500][ C0] [ 92.928807][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 92.934896][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 92.941441][ C0] Code: f7 e8 cd 3f f1 f5 f7 c3 00 02 00 00 74 05 e8 d0 97 1c f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 fc e2 f5 65 8b 05 0d 10 6b 07 85 c0 74 18 5b 41 5e c3 cc cc [ 92.961601][ C0] RSP: 0018:ffffc90003eb7a28 EFLAGS: 00000206 [ 92.967711][ C0] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 0000000000000001 [ 92.975714][ C0] RDX: 0000000000000006 RSI: ffffffff8def714b RDI: 0000000000000001 [ 92.983715][ C0] RBP: ffffc90003eb7b08 R08: ffffffff90119cb7 R09: 1ffffffff2023396 [ 92.991719][ C0] R10: dffffc0000000000 R11: fffffbfff2023397 R12: ffff88802968b018 [ 92.999999][ C0] R13: ffff88802968b000 R14: ffffffff8f479d80 R15: 0000000000000001 [ 93.008013][ C0] usb_hcd_poll_rh_status+0x40c/0x620 [ 93.013428][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 93.019385][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 93.025694][ C0] dummy_pullup+0x19b/0x200 [ 93.030414][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 93.035466][ C0] usb_gadget_disconnect_locked+0x143/0x4d0 [ 93.042089][ C0] gadget_unbind_driver+0xc7/0x450 [ 93.047242][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 93.053102][ C0] device_release_driver_internal+0x46f/0x860 [ 93.059303][ C0] driver_detach+0x1f3/0x2d0 [ 93.064022][ C0] bus_remove_driver+0x226/0x320 [ 93.069363][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 93.075159][ C0] raw_release+0xd7/0x260 [ 93.079612][ C0] ? __pfx_raw_release+0x10/0x10 [ 93.084669][ C0] __fput+0x44f/0xa70 [ 93.088768][ C0] task_work_run+0x1d9/0x270 [ 93.093470][ C0] ? __pfx_task_work_run+0x10/0x10 [ 93.098632][ C0] exit_to_user_mode_loop+0xed/0x480 [ 93.103976][ C0] ? rcu_is_watching+0x15/0xb0 [ 93.108895][ C0] __do_fast_syscall_32+0x415/0x640 [ 93.114334][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 93.119591][ C0] ? do_fast_syscall_32+0x33/0x70 [ 93.124668][ C0] ? irqentry_exit+0x10e/0x620 [ 93.129504][ C0] do_fast_syscall_32+0x33/0x70 [ 93.134390][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.140836][ C0] RIP: 0023:0xf709ef6c [ 93.144929][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 93.164652][ C0] RSP: 002b:00000000f75bfb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 93.173215][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 93.181494][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.189754][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.197847][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 93.205844][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.214030][ C0] [ 93.217085][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.224404][ C0] CPU: 0 UID: 0 PID: 5916 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 93.233471][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.243924][ C0] Call Trace: [ 93.247266][ C0] [ 93.250165][ C0] vpanic+0x56c/0xa60 [ 93.254196][ C0] ? __pfx__printk+0x10/0x10 [ 93.259873][ C0] ? __pfx_vpanic+0x10/0x10 [ 93.264437][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 93.270010][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 93.275258][ C0] panic+0xc5/0xd0 [ 93.279103][ C0] ? __pfx_panic+0x10/0x10 [ 93.283561][ C0] __warn+0x315/0x4f0 [ 93.287569][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 93.292442][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 93.297317][ C0] __report_bug+0x29a/0x540 [ 93.301843][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 93.307250][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 93.312134][ C0] ? __pfx___report_bug+0x10/0x10 [ 93.317196][ C0] ? dev_printk_emit+0xee/0x140 [ 93.322168][ C0] report_bug_entry+0x19a/0x290 [ 93.327076][ C0] ? usb_submit_urb+0x7e/0x18b0 [ 93.332035][ C0] ? usb_submit_urb+0x83/0x18b0 [ 93.336909][ C0] handle_bug+0xce/0x200 [ 93.341185][ C0] exc_invalid_op+0x1a/0x50 [ 93.345722][ C0] asm_exc_invalid_op+0x1a/0x20 [ 93.350684][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 93.356514][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 c7 f3 f8 fa 49 83 3e 00 74 40 e8 8c b1 8e fa 48 8d 3d c5 e8 e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 71 b1 8e fa eb 05 e8 6a b1 [ 93.376152][ C0] RSP: 0018:ffffc90000007960 EFLAGS: 00010083 [ 93.382252][ C0] RAX: ffffffff8736ef54 RBX: ffff888025676f00 RCX: 0000000000040000 [ 93.391126][ C0] RDX: ffffc90002141000 RSI: ffff888025676f00 RDI: ffffffff901ed820 [ 93.399341][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 93.407336][ C0] R10: dffffc0000000000 R11: fffff52000000f2c R12: 0000000000000820 [ 93.415506][ C0] R13: ffff888056c8f830 R14: ffff888025676f08 R15: dffffc0000000000 [ 93.423540][ C0] ? usb_submit_urb+0x74/0x18b0 [ 93.428520][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 93.434459][ C0] ? ___ratelimit+0x58c/0x8d0 [ 93.439341][ C0] cm109_urb_irq_callback+0x6e2/0xcb0 [ 93.444755][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 93.450274][ C0] dummy_timer+0xbbd/0x45d0 [ 93.454920][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 93.459998][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 93.465850][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 93.471572][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 93.476666][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 93.482701][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 93.487678][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 93.492740][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 93.497994][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 93.503832][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 93.510037][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 93.515227][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.520456][ C0] handle_softirqs+0x22a/0x870 [ 93.525343][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 93.530268][ C0] __irq_exit_rcu+0x5f/0x150 [ 93.534924][ C0] irq_exit_rcu+0x9/0x30 [ 93.539223][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 93.544886][ C0] [ 93.547838][ C0] [ 93.550795][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.556840][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 93.563383][ C0] Code: f7 e8 cd 3f f1 f5 f7 c3 00 02 00 00 74 05 e8 d0 97 1c f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 fc e2 f5 65 8b 05 0d 10 6b 07 85 c0 74 18 5b 41 5e c3 cc cc [ 93.583283][ C0] RSP: 0018:ffffc90003eb7a28 EFLAGS: 00000206 [ 93.589397][ C0] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 0000000000000001 [ 93.597414][ C0] RDX: 0000000000000006 RSI: ffffffff8def714b RDI: 0000000000000001 [ 93.605496][ C0] RBP: ffffc90003eb7b08 R08: ffffffff90119cb7 R09: 1ffffffff2023396 [ 93.613593][ C0] R10: dffffc0000000000 R11: fffffbfff2023397 R12: ffff88802968b018 [ 93.621592][ C0] R13: ffff88802968b000 R14: ffffffff8f479d80 R15: 0000000000000001 [ 93.629783][ C0] usb_hcd_poll_rh_status+0x40c/0x620 [ 93.635214][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 93.641327][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 93.647265][ C0] dummy_pullup+0x19b/0x200 [ 93.651795][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 93.656845][ C0] usb_gadget_disconnect_locked+0x143/0x4d0 [ 93.662788][ C0] gadget_unbind_driver+0xc7/0x450 [ 93.668151][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 93.674968][ C0] device_release_driver_internal+0x46f/0x860 [ 93.681107][ C0] driver_detach+0x1f3/0x2d0 [ 93.685753][ C0] bus_remove_driver+0x226/0x320 [ 93.690734][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 93.696507][ C0] raw_release+0xd7/0x260 [ 93.700959][ C0] ? __pfx_raw_release+0x10/0x10 [ 93.705944][ C0] __fput+0x44f/0xa70 [ 93.710078][ C0] task_work_run+0x1d9/0x270 [ 93.714716][ C0] ? __pfx_task_work_run+0x10/0x10 [ 93.719870][ C0] exit_to_user_mode_loop+0xed/0x480 [ 93.725197][ C0] ? rcu_is_watching+0x15/0xb0 [ 93.729997][ C0] __do_fast_syscall_32+0x415/0x640 [ 93.735411][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 93.740644][ C0] ? do_fast_syscall_32+0x33/0x70 [ 93.745701][ C0] ? irqentry_exit+0x10e/0x620 [ 93.750499][ C0] do_fast_syscall_32+0x33/0x70 [ 93.755501][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.761882][ C0] RIP: 0023:0xf709ef6c [ 93.765983][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 93.786259][ C0] RSP: 002b:00000000f75bfb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 93.794726][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 93.802857][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.810867][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.819211][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 93.827491][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.835523][ C0] [ 93.839186][ C0] Kernel Offset: disabled [ 93.843536][ C0] Rebooting in 86400 seconds..