last executing test programs: 5.155661886s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='e&my_read_msr1 msr/r', 0x14) 4.950143692s ago: executing program 2 (id=6): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', 0x0, &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000000000000000", 0x84, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d535350000200000000000000000000000002082000"/124, 0x7c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002200)="00000048fe534d424000010000000000010001000100000000000000020000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8c0) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) 4.899482222s ago: executing program 3 (id=4): syz_open_procfs(0xffffffffffffffff, &(0x7f0000002440)='net/dev_mcast\x00') socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x40086607, 0x0) 3.784011879s ago: executing program 3 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 3.780683121s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0xfd) mount(0x0, &(0x7f0000000040)='./security\x00', 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_clone(0x102480, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r3 = semget$private(0x0, 0x1, 0x3) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)) semtimedop(r3, &(0x7f0000000040), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f0000000100)=""/9, 0xfffffd87) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYBLOB="9d00000000000000", @ANYRES64, @ANYRES32], 0x50) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r5, 0x0, r6, 0x0, 0x7c1c, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x3f00000000000000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) 2.179956907s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0xfd) mount(0x0, &(0x7f0000000040)='./security\x00', 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_clone(0x102480, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r3, 0x0, r4, 0x0, 0x7c1c, 0x8) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) 1.993356226s ago: executing program 3 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x1d6b\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r0, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee266", 0x5d) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='0123456789\n', 0xb) write(0xffffffffffffffff, &(0x7f0000000400)='syzkalle', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='HID Gadget\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r5, &(0x7f00000006c0)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000a40)='dummy_udc.0\n', 0xc) 1.929212116s ago: executing program 0 (id=1): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$alg(0x26, 0x5, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x57a, 0x1000, 0x40002, 0x2a7}, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x252}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2100, 0x1b4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3d88, 0x40000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587f, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[], 0xf0}}, 0x0) 1.500952941s ago: executing program 2 (id=11): fsopen(&(0x7f0000000000)='ceph\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x20) write(r4, &(0x7f0000000300)='1', 0x1) 1.394166786s ago: executing program 0 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x700, @loopback=0x7f000000}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x43f, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.373191258s ago: executing program 3 (id=13): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}}, 0x28) sendto$inet(r1, &(0x7f0000001a40)="17030300280000000000000001000a", 0xf, 0x8081, 0x0, 0x0) recvmsg(r2, 0x0, 0x0) 166.507858ms ago: executing program 3 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') 67.60451ms ago: executing program 0 (id=15): syz_open_procfs(0xffffffffffffffff, &(0x7f0000002440)='net/dev_mcast\x00') socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x40086607, 0x0) 0s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x700, @loopback=0x7f000000}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x43f, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. [ 71.826274][ T5596] cgroup: Unknown subsys name 'net' [ 71.981444][ T5596] cgroup: Unknown subsys name 'cpuset' [ 71.990186][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.636371][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.131356][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.131994][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.134472][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.134835][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.135145][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.137678][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.138430][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.152831][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.185314][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.209190][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.274526][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.275783][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.276717][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.278675][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.282093][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.285655][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.300505][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.304266][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.304744][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.305851][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.306290][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.309003][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.315155][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.329342][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.341888][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.197998][ T5610] Bluetooth: hci1: command tx timeout [ 78.222153][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.222256][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.222372][ T5607] bridge_slave_0: entered allmulticast mode [ 78.224186][ T5607] bridge_slave_0: entered promiscuous mode [ 78.238937][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.239080][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.239223][ T5607] bridge_slave_1: entered allmulticast mode [ 78.241379][ T5607] bridge_slave_1: entered promiscuous mode [ 78.281752][ T5610] Bluetooth: hci0: command tx timeout [ 78.357898][ T54] Bluetooth: hci2: command tx timeout [ 78.358114][ T5610] Bluetooth: hci4: command tx timeout [ 78.382380][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.425074][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.437569][ T5610] Bluetooth: hci3: command tx timeout [ 78.441051][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.441148][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.441272][ T5608] bridge_slave_0: entered allmulticast mode [ 78.442985][ T5608] bridge_slave_0: entered promiscuous mode [ 78.469219][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.469375][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.469817][ T5608] bridge_slave_1: entered allmulticast mode [ 78.471707][ T5608] bridge_slave_1: entered promiscuous mode [ 78.585782][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.586470][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.586762][ T5619] bridge_slave_0: entered allmulticast mode [ 78.610721][ T5619] bridge_slave_0: entered promiscuous mode [ 78.629186][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.629302][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.629820][ T5620] bridge_slave_0: entered allmulticast mode [ 78.631656][ T5620] bridge_slave_0: entered promiscuous mode [ 78.651054][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.651161][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.651552][ T5618] bridge_slave_0: entered allmulticast mode [ 78.653535][ T5618] bridge_slave_0: entered promiscuous mode [ 78.658326][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.658431][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.658554][ T5618] bridge_slave_1: entered allmulticast mode [ 78.660461][ T5618] bridge_slave_1: entered promiscuous mode [ 78.698154][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.701957][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.742244][ T5618] team0: Port device team_slave_0 added [ 78.744213][ T5607] team0: Port device team_slave_0 added [ 78.744457][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.744571][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.745010][ T5619] bridge_slave_1: entered allmulticast mode [ 78.746433][ T5619] bridge_slave_1: entered promiscuous mode [ 78.765403][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.765606][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.765706][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.765827][ T5620] bridge_slave_1: entered allmulticast mode [ 78.769142][ T5620] bridge_slave_1: entered promiscuous mode [ 78.820924][ T5618] team0: Port device team_slave_1 added [ 78.822723][ T5607] team0: Port device team_slave_1 added [ 78.839488][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.883960][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.910491][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.944035][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.945983][ T5608] team0: Port device team_slave_0 added [ 78.952243][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.977774][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.977791][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.977817][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.979743][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.979759][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.979779][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.980951][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.980962][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.980983][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.026291][ T5608] team0: Port device team_slave_1 added [ 79.055590][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.055609][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.055630][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.094388][ T5620] team0: Port device team_slave_0 added [ 79.110547][ T5619] team0: Port device team_slave_0 added [ 79.146365][ T5620] team0: Port device team_slave_1 added [ 79.151349][ T5619] team0: Port device team_slave_1 added [ 79.152274][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.152286][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.152307][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.237776][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.237793][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.237822][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.248884][ T5618] hsr_slave_0: entered promiscuous mode [ 79.250111][ T5618] hsr_slave_1: entered promiscuous mode [ 79.283658][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.283692][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.283714][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.288953][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.288968][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.288989][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.328857][ T5607] hsr_slave_0: entered promiscuous mode [ 79.331728][ T5607] hsr_slave_1: entered promiscuous mode [ 79.333983][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 79.334064][ T5607] Cannot create hsr debugfs directory [ 79.335054][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.335066][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.335088][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.362196][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.362212][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.362235][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.500557][ T5608] hsr_slave_0: entered promiscuous mode [ 79.501260][ T5608] hsr_slave_1: entered promiscuous mode [ 79.501720][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 79.501740][ T5608] Cannot create hsr debugfs directory [ 79.587117][ T5620] hsr_slave_0: entered promiscuous mode [ 79.594214][ T5620] hsr_slave_1: entered promiscuous mode [ 79.594730][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 79.594750][ T5620] Cannot create hsr debugfs directory [ 79.667912][ T5619] hsr_slave_0: entered promiscuous mode [ 79.668613][ T5619] hsr_slave_1: entered promiscuous mode [ 79.669131][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 79.669151][ T5619] Cannot create hsr debugfs directory [ 80.149193][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.170395][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.172214][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.177073][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.178599][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.190097][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.192677][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.203584][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.278142][ T5610] Bluetooth: hci1: command tx timeout [ 80.278410][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.300685][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.305813][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.323941][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.324829][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.339033][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.351069][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.354947][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.372133][ T5610] Bluetooth: hci0: command tx timeout [ 80.438038][ T54] Bluetooth: hci2: command tx timeout [ 80.439740][ T5610] Bluetooth: hci4: command tx timeout [ 80.471998][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.476665][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.499454][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.503958][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.504543][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.521893][ T5610] Bluetooth: hci3: command tx timeout [ 80.538378][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.543637][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.563029][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.640419][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.663414][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.680084][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.696874][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.709752][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.728544][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.734538][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.758071][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.762270][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.807886][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.852889][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.856059][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.882968][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.886656][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.896818][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.913843][ T604] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.914132][ T604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.932822][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.933090][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.935964][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.936873][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.972390][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.990878][ T604] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.990942][ T604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.020972][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.021037][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.045325][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.045396][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.179840][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.290702][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.333338][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.355956][ T604] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.356078][ T604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.420860][ T604] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.421598][ T604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.483286][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.527164][ T604] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.527323][ T604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.546865][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.588134][ T604] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.588266][ T604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.659872][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.736001][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.736118][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.763704][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.763828][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.359309][ T5610] Bluetooth: hci1: command tx timeout [ 82.438342][ T5610] Bluetooth: hci0: command tx timeout [ 82.517947][ T5610] Bluetooth: hci4: command tx timeout [ 82.517984][ T5610] Bluetooth: hci2: command tx timeout [ 82.597662][ T54] Bluetooth: hci3: command tx timeout [ 82.694824][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.946600][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.965769][ T5618] veth0_vlan: entered promiscuous mode [ 83.043340][ T5618] veth1_vlan: entered promiscuous mode [ 83.215047][ T5607] veth0_vlan: entered promiscuous mode [ 83.232497][ T5618] veth0_macvtap: entered promiscuous mode [ 83.259368][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.282913][ T5618] veth1_macvtap: entered promiscuous mode [ 83.313166][ T5607] veth1_vlan: entered promiscuous mode [ 83.341072][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.386086][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.434990][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.568810][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.568974][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.569014][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.586425][ T5608] veth0_vlan: entered promiscuous mode [ 83.623754][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.624325][ T5607] veth0_macvtap: entered promiscuous mode [ 83.645320][ T5607] veth1_macvtap: entered promiscuous mode [ 83.657769][ T1180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.681262][ T5608] veth1_vlan: entered promiscuous mode [ 83.723529][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.780847][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.842095][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.842112][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.921750][ T5608] veth0_macvtap: entered promiscuous mode [ 83.927539][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.927562][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.978680][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.000801][ T5608] veth1_macvtap: entered promiscuous mode [ 84.038236][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.087176][ T5619] veth0_vlan: entered promiscuous mode [ 84.125134][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.125159][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.139491][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.144760][ T5620] veth0_vlan: entered promiscuous mode [ 84.163274][ T5619] veth1_vlan: entered promiscuous mode [ 84.181749][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.184375][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.238237][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.238260][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.239769][ T5620] veth1_vlan: entered promiscuous mode [ 84.299065][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.300117][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.300160][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.300194][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.300229][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.300263][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.437897][ T54] Bluetooth: hci1: command tx timeout [ 84.491925][ T5619] veth0_macvtap: entered promiscuous mode [ 84.519128][ T54] Bluetooth: hci0: command tx timeout [ 84.543026][ T5619] veth1_macvtap: entered promiscuous mode [ 84.565597][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.565619][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.598116][ T54] Bluetooth: hci2: command tx timeout [ 84.598153][ T54] Bluetooth: hci4: command tx timeout [ 84.637178][ T5620] veth0_macvtap: entered promiscuous mode [ 84.679607][ T5610] Bluetooth: hci3: command tx timeout [ 84.821838][ T5620] veth1_macvtap: entered promiscuous mode [ 85.210382][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.323313][ T604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.323337][ T604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.395691][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.450119][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.548358][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.551010][ T1180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.551154][ T1180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.551192][ T1180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.551229][ T1180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.233019][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.233785][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.234326][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.234367][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.283831][ T9] cfg80211: failed to load regulatory.db [ 87.464977][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.465001][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.830650][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.830685][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.832780][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.832800][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.124943][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.124969][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.206975][ T5721] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.717829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.202326][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 89.248343][ T5721] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0000, bcdDevice=7.03 [ 89.256917][ T5721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.361125][ T5721] usb 1-1: Dual-Role OTG device on HNP port [ 89.363004][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.363029][ T5721] usb 1-1: Product: HID Gadget [ 89.363043][ T5721] usb 1-1: SerialNumber: 0123456789 [ 89.411752][ C1] ------------[ cut here ]------------ [ 89.411770][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 89.411788][ C1] WARNING: drivers/usb/gadget/udc/core.c:125 at usb_ep_enable+0x148/0x480, CPU#1: kworker/1:3/5721 [ 89.442511][ C1] Modules linked in: [ 89.446547][ C1] CPU: 1 UID: 0 PID: 5721 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 89.455960][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 89.466048][ C1] Workqueue: usb_hub_wq hub_event [ 89.471141][ C1] RIP: 0010:usb_ep_enable+0x1bc/0x480 [ 89.476564][ C1] Code: fa a4 6f fa 49 83 3f 00 48 c7 c0 00 70 d3 8c 49 c7 c0 20 70 d3 8c 4c 0f 44 c0 4c 89 f7 48 c7 c6 00 01 6c 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 60 57 fe f9 65 8b [ 89.496219][ C1] RSP: 0018:ffffc90000a38910 EFLAGS: 00010086 [ 89.502426][ C1] RAX: ffffffff8cd37000 RBX: ffff8880272c00e0 RCX: ffffffff8cd38e20 [ 89.510445][ C1] RDX: 0000000000000081 RSI: ffffffff8e6c0100 RDI: ffffffff90881080 [ 89.518471][ C1] RBP: dffffc0000000000 R08: ffffffff8cd37020 R09: 0000000000000002 [ 89.526491][ C1] R10: 0000000000000003 R11: 8000000000000100 R12: ffffffff8cd38e20 [ 89.534711][ C1] R13: 0000000000000081 R14: ffffffff90881080 R15: ffff8880272c00f8 [ 89.542808][ C1] FS: 0000000000000000(0000) GS:ffff888124daf000(0000) knlGS:0000000000000000 [ 89.551766][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.558393][ C1] CR2: 00007ffce7f69f70 CR3: 000000007f104000 CR4: 00000000003526f0 [ 89.566428][ C1] Call Trace: [ 89.569737][ C1] [ 89.572624][ C1] hidg_set_alt+0x12a/0xa60 [ 89.577266][ C1] ? usb_gadget_set_state+0x12c/0x2d0 [ 89.582689][ C1] set_config+0x749/0x1160 [ 89.587170][ C1] composite_setup+0x1de7/0x3480 [ 89.592160][ C1] configfs_composite_setup+0xc7/0x100 [ 89.597674][ C1] dummy_timer+0x2f43/0x4cf0 [ 89.602316][ C1] ? alloc_uevent_skb+0x7d/0x230 [ 89.607284][ C1] ? kobject_uevent_net_broadcast+0x2fa/0x560 [ 89.613375][ C1] ? kthread+0x38b/0x480 [ 89.617632][ C1] ? __lock_acquire+0x747/0x2de0 [ 89.622610][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 89.628000][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 89.632953][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 89.638803][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 89.643775][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 89.648998][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 89.654118][ C1] handle_softirqs+0x223/0x840 [ 89.658894][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 89.663674][ C1] __irq_exit_rcu+0xcb/0x220 [ 89.668277][ C1] irq_exit_rcu+0x9/0x30 [ 89.672553][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 89.678286][ C1] [ 89.681222][ C1] [ 89.684181][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.690178][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 89.696604][ C1] Code: f7 e8 6d fe b6 f5 f7 c3 00 02 00 00 74 05 e8 20 85 e3 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 0d a8 f5 65 48 8b 05 1c 61 a9 07 48 85 c0 74 18 5b 41 5e c3 [ 89.716565][ C1] RSP: 0018:ffffc90004976f50 EFLAGS: 00000206 [ 89.722643][ C1] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000001 [ 89.730708][ C1] RDX: 0000000000000006 RSI: ffffffff8e428461 RDI: 0000000000000001 [ 89.738686][ C1] RBP: 0000000000000007 R08: ffffffff907a1fbf R09: 1ffffffff20f43f7 [ 89.746673][ C1] R10: dffffc0000000000 R11: fffffbfff20f43f8 R12: 0000000000000000 [ 89.754649][ C1] R13: dffffc0000000000 R14: ffff8880272c0000 R15: 1ffff1100531ca94 [ 89.762757][ C1] dummy_urb_enqueue+0x587/0x780 [ 89.767730][ C1] usb_hcd_submit_urb+0x328/0x1b60 [ 89.773127][ C1] usb_start_wait_urb+0x13f/0x5b0 [ 89.778164][ C1] ? rcu_is_watching+0x16/0xb0 [ 89.783031][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 89.788617][ C1] usb_control_msg+0x234/0x3e0 [ 89.793398][ C1] ? kfree+0x1c5/0x650 [ 89.797499][ C1] usb_set_configuration+0x12b1/0x2180 [ 89.803004][ C1] usb_generic_driver_probe+0x8d/0x150 [ 89.808511][ C1] usb_probe_device+0x1c3/0x3b0 [ 89.813376][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 89.818756][ C1] really_probe+0x254/0xae0 [ 89.823272][ C1] __driver_probe_device+0x1e8/0x360 [ 89.828566][ C1] driver_probe_device+0x4f/0x240 [ 89.833605][ C1] __device_attach_driver+0x270/0x410 [ 89.838986][ C1] bus_for_each_drv+0x258/0x2f0 [ 89.843849][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 89.849753][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 89.855145][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 89.860974][ C1] __device_attach+0x2c4/0x450 [ 89.865746][ C1] ? __pfx___device_attach+0x10/0x10 [ 89.871122][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 89.876264][ C1] ? _raw_spin_unlock+0x28/0x50 [ 89.881131][ C1] device_initial_probe+0xa1/0xd0 [ 89.886162][ C1] bus_probe_device+0x12a/0x220 [ 89.891023][ C1] device_add+0x7d7/0xb80 [ 89.895462][ C1] usb_new_device+0x9aa/0x1690 [ 89.900247][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 89.905461][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.910691][ C1] hub_event+0x28e8/0x4d30 [ 89.917875][ C1] ? __pfx_hub_event+0x10/0x10 [ 89.922685][ C1] ? rcu_is_watching+0x16/0xb0 [ 89.927586][ C1] ? process_scheduled_works+0x97a/0x1630 [ 89.933511][ C1] process_scheduled_works+0xc3d/0x1630 [ 89.939189][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 89.945188][ C1] ? assign_work+0x3cf/0x5d0 [ 89.949809][ C1] worker_thread+0xa47/0xfb0 [ 89.954434][ C1] ? __kthread_parkme+0x71/0x1f0 [ 89.959415][ C1] kthread+0x38b/0x480 [ 89.963494][ C1] ? __pfx_worker_thread+0x10/0x10 [ 89.968626][ C1] ? __pfx_kthread+0x10/0x10 [ 89.973232][ C1] ret_from_fork+0x514/0xb70 [ 89.977862][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 89.983062][ C1] ? __switch_to+0xc78/0x1410 [ 89.987849][ C1] ? __pfx_kthread+0x10/0x10 [ 89.992479][ C1] ret_from_fork_asm+0x1a/0x30 [ 89.997269][ C1] [ 90.000307][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.007591][ C1] CPU: 1 UID: 0 PID: 5721 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 90.017002][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.027076][ C1] Workqueue: usb_hub_wq hub_event [ 90.032130][ C1] Call Trace: [ 90.035430][ C1] [ 90.038447][ C1] vpanic+0x26f/0x710 [ 90.042633][ C1] panic+0xc5/0xd0 [ 90.046385][ C1] ? __pfx_panic+0x10/0x10 [ 90.050823][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 90.055779][ C1] __warn+0x315/0x4c0 [ 90.059778][ C1] ? usb_ep_enable+0x148/0x480 [ 90.064573][ C1] ? usb_ep_enable+0x148/0x480 [ 90.069367][ C1] __report_bug+0x276/0x570 [ 90.073891][ C1] ? __driver_probe_device+0x1e8/0x360 [ 90.079363][ C1] ? driver_probe_device+0x4f/0x240 [ 90.084572][ C1] ? __device_attach_driver+0x270/0x410 [ 90.090128][ C1] ? usb_ep_enable+0x148/0x480 [ 90.094929][ C1] ? __pfx___report_bug+0x10/0x10 [ 90.100094][ C1] report_bug_entry+0x19b/0x290 [ 90.104958][ C1] ? usb_ep_enable+0x1bc/0x480 [ 90.109726][ C1] ? usb_ep_enable+0x1c1/0x480 [ 90.114495][ C1] handle_bug+0xce/0x200 [ 90.118744][ C1] exc_invalid_op+0x1a/0x50 [ 90.123252][ C1] asm_exc_invalid_op+0x1a/0x20 [ 90.128111][ C1] RIP: 0010:usb_ep_enable+0x1bc/0x480 [ 90.133496][ C1] Code: fa a4 6f fa 49 83 3f 00 48 c7 c0 00 70 d3 8c 49 c7 c0 20 70 d3 8c 4c 0f 44 c0 4c 89 f7 48 c7 c6 00 01 6c 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 60 57 fe f9 65 8b [ 90.153199][ C1] RSP: 0018:ffffc90000a38910 EFLAGS: 00010086 [ 90.159274][ C1] RAX: ffffffff8cd37000 RBX: ffff8880272c00e0 RCX: ffffffff8cd38e20 [ 90.167252][ C1] RDX: 0000000000000081 RSI: ffffffff8e6c0100 RDI: ffffffff90881080 [ 90.175234][ C1] RBP: dffffc0000000000 R08: ffffffff8cd37020 R09: 0000000000000002 [ 90.183296][ C1] R10: 0000000000000003 R11: 8000000000000100 R12: ffffffff8cd38e20 [ 90.191273][ C1] R13: 0000000000000081 R14: ffffffff90881080 R15: ffff8880272c00f8 [ 90.199359][ C1] hidg_set_alt+0x12a/0xa60 [ 90.203878][ C1] ? usb_gadget_set_state+0x12c/0x2d0 [ 90.209266][ C1] set_config+0x749/0x1160 [ 90.213804][ C1] composite_setup+0x1de7/0x3480 [ 90.218764][ C1] configfs_composite_setup+0xc7/0x100 [ 90.224244][ C1] dummy_timer+0x2f43/0x4cf0 [ 90.229105][ C1] ? alloc_uevent_skb+0x7d/0x230 [ 90.234052][ C1] ? kobject_uevent_net_broadcast+0x2fa/0x560 [ 90.240140][ C1] ? kthread+0x38b/0x480 [ 90.244398][ C1] ? __lock_acquire+0x747/0x2de0 [ 90.249375][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 90.254762][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 90.259731][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 90.265585][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 90.270539][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 90.275765][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 90.280976][ C1] handle_softirqs+0x223/0x840 [ 90.286110][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 90.291080][ C1] __irq_exit_rcu+0xcb/0x220 [ 90.295686][ C1] irq_exit_rcu+0x9/0x30 [ 90.299951][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 90.305602][ C1] [ 90.308546][ C1] [ 90.311505][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.317520][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 90.324012][ C1] Code: f7 e8 6d fe b6 f5 f7 c3 00 02 00 00 74 05 e8 20 85 e3 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 0d a8 f5 65 48 8b 05 1c 61 a9 07 48 85 c0 74 18 5b 41 5e c3 [ 90.343745][ C1] RSP: 0018:ffffc90004976f50 EFLAGS: 00000206 [ 90.349943][ C1] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000001 [ 90.357948][ C1] RDX: 0000000000000006 RSI: ffffffff8e428461 RDI: 0000000000000001 [ 90.365931][ C1] RBP: 0000000000000007 R08: ffffffff907a1fbf R09: 1ffffffff20f43f7 [ 90.378866][ C1] R10: dffffc0000000000 R11: fffffbfff20f43f8 R12: 0000000000000000 [ 90.386875][ C1] R13: dffffc0000000000 R14: ffff8880272c0000 R15: 1ffff1100531ca94 [ 90.394902][ C1] dummy_urb_enqueue+0x587/0x780 [ 90.399912][ C1] usb_hcd_submit_urb+0x328/0x1b60 [ 90.405045][ C1] usb_start_wait_urb+0x13f/0x5b0 [ 90.410085][ C1] ? rcu_is_watching+0x16/0xb0 [ 90.414882][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 90.420453][ C1] usb_control_msg+0x234/0x3e0 [ 90.425242][ C1] ? kfree+0x1c5/0x650 [ 90.429329][ C1] usb_set_configuration+0x12b1/0x2180 [ 90.434831][ C1] usb_generic_driver_probe+0x8d/0x150 [ 90.440309][ C1] usb_probe_device+0x1c3/0x3b0 [ 90.445184][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 90.450588][ C1] really_probe+0x254/0xae0 [ 90.455106][ C1] __driver_probe_device+0x1e8/0x360 [ 90.460499][ C1] driver_probe_device+0x4f/0x240 [ 90.465532][ C1] __device_attach_driver+0x270/0x410 [ 90.470916][ C1] bus_for_each_drv+0x258/0x2f0 [ 90.475917][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 90.481903][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 90.487290][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 90.493128][ C1] __device_attach+0x2c4/0x450 [ 90.497946][ C1] ? __pfx___device_attach+0x10/0x10 [ 90.503253][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 90.508434][ C1] ? _raw_spin_unlock+0x28/0x50 [ 90.513311][ C1] device_initial_probe+0xa1/0xd0 [ 90.518355][ C1] bus_probe_device+0x12a/0x220 [ 90.523228][ C1] device_add+0x7d7/0xb80 [ 90.527600][ C1] usb_new_device+0x9aa/0x1690 [ 90.532474][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 90.537688][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.542901][ C1] hub_event+0x28e8/0x4d30 [ 90.547364][ C1] ? __pfx_hub_event+0x10/0x10 [ 90.552140][ C1] ? rcu_is_watching+0x16/0xb0 [ 90.556918][ C1] ? process_scheduled_works+0x97a/0x1630 [ 90.562650][ C1] process_scheduled_works+0xc3d/0x1630 [ 90.568237][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 90.574248][ C1] ? assign_work+0x3cf/0x5d0 [ 90.578871][ C1] worker_thread+0xa47/0xfb0 [ 90.583490][ C1] ? __kthread_parkme+0x71/0x1f0 [ 90.588450][ C1] kthread+0x38b/0x480 [ 90.592610][ C1] ? __pfx_worker_thread+0x10/0x10 [ 90.597821][ C1] ? __pfx_kthread+0x10/0x10 [ 90.602423][ C1] ret_from_fork+0x514/0xb70 [ 90.607114][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 90.612233][ C1] ? __switch_to+0xc78/0x1410 [ 90.616929][ C1] ? __pfx_kthread+0x10/0x10 [ 90.621538][ C1] ret_from_fork_asm+0x1a/0x30 [ 90.626338][ C1] [ 90.629513][ C1] Kernel Offset: disabled [ 90.633843][ C1] Rebooting in 86400 seconds..