last executing test programs: 33.778418049s ago: executing program 0 (id=6): mkdir(&(0x7f0000000000)='./nfsd_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd_mnt\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/portlist\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd_mnt/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='udp 2', 0x5) write(r1, &(0x7f0000000700)='1', 0x1) 32.183890405s ago: executing program 0 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0xffffffffffffffff}]}) 30.521100014s ago: executing program 0 (id=10): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x15, r0, 0x800004, 0x1fffff) 30.240903972s ago: executing program 0 (id=12): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) rmdir(&(0x7f0000000000)='./config/cluster/mycluster/node/mynode\x00') 30.092621446s ago: executing program 0 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x22, 0x0, 0x0, @multicast2, "0000000104000001e000000101"}}}}}, 0x0) 29.33236468s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_final\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys_final\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_final/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0', 0x7) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 13.967967351s ago: executing program 32 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_final\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys_final\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_final/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0', 0x7) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.904546935s ago: executing program 1 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x100) 4.346576392s ago: executing program 1 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 3.9458743s ago: executing program 1 (id=142): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0xc0340, 0x30) 2.977747123s ago: executing program 1 (id=146): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close(0xffffffffffffffff) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) 2.922808156s ago: executing program 2 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='0\x00', 0x2) close(r2) 2.66585142s ago: executing program 1 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6) 2.366550527s ago: executing program 3 (id=152): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a300000000009000300737966320000000090000000060a010400000000000000000100000308000b400000000068000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000003000018008000100636d700024000280100003800a0001001fbabdae00000000080001400000000208000240000000000900010073797a300000000014000000"], 0x104}}, 0x0) 2.094749894s ago: executing program 3 (id=155): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') 1.914963058s ago: executing program 4 (id=156): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000140)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/file0\x00', 0x0) 1.885037366s ago: executing program 3 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) 1.832842163s ago: executing program 1 (id=158): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000440)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 1.753459079s ago: executing program 2 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add', 0x3) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 1.484038165s ago: executing program 4 (id=160): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0xffffffffffffffff}]}) 1.423981252s ago: executing program 2 (id=161): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0017"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 1.277404258s ago: executing program 4 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 1.138914306s ago: executing program 4 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add', 0x3) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 1.110305922s ago: executing program 2 (id=164): mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_dir/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='-2', 0x2) 991.775718ms ago: executing program 4 (id=165): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @loopback, 0x1}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x24050040) 814.554463ms ago: executing program 2 (id=166): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') 800.768538ms ago: executing program 3 (id=167): mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6) 583.751846ms ago: executing program 2 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='0\x00', 0x2) close(r2) 419.466136ms ago: executing program 4 (id=169): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) add_key(0x0, 0x0, &(0x7f0000002240), 0x0, 0xfffffffffffffffe) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x106}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 93.135697ms ago: executing program 3 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add', 0x3) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 0s ago: executing program 3 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='usbip-vudc.0\n', 0xd) write(r0, &(0x7f0000000540)='\n', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 85.462429][ T5584] cgroup: Unknown subsys name 'net' [ 85.711781][ T5584] cgroup: Unknown subsys name 'cpuset' [ 85.757889][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.559190][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.627607][ T32] cfg80211: failed to load regulatory.db [ 91.255841][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.285583][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.286999][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.328398][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.367897][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.399180][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.404192][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.404606][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.440058][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.446411][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.454067][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.458110][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.458373][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.464262][ T4912] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.465346][ T4912] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.465848][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.468475][ T4912] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.476776][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.483564][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.484321][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.485750][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.624054][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.641009][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.650635][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.655093][ T4912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.558971][ T5611] Bluetooth: hci4: command tx timeout [ 93.637654][ T5611] Bluetooth: hci3: command tx timeout [ 93.717385][ T5611] Bluetooth: hci2: command tx timeout [ 93.717409][ T4912] Bluetooth: hci0: command tx timeout [ 93.717603][ T5611] Bluetooth: hci1: command tx timeout [ 94.114732][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.115761][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.115913][ T5604] bridge_slave_0: entered allmulticast mode [ 94.118473][ T5604] bridge_slave_0: entered promiscuous mode [ 94.176018][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.176116][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.176412][ T5602] bridge_slave_0: entered allmulticast mode [ 94.182737][ T5602] bridge_slave_0: entered promiscuous mode [ 94.214704][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.214803][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.214978][ T5604] bridge_slave_1: entered allmulticast mode [ 94.216985][ T5604] bridge_slave_1: entered promiscuous mode [ 94.224420][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.224637][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.224799][ T5605] bridge_slave_0: entered allmulticast mode [ 94.230290][ T5605] bridge_slave_0: entered promiscuous mode [ 94.259888][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.260116][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.260599][ T5602] bridge_slave_1: entered allmulticast mode [ 94.263178][ T5602] bridge_slave_1: entered promiscuous mode [ 94.322910][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.323068][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.323185][ T5605] bridge_slave_1: entered allmulticast mode [ 94.324574][ T5605] bridge_slave_1: entered promiscuous mode [ 94.325748][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.325846][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.326145][ T5603] bridge_slave_0: entered allmulticast mode [ 94.332105][ T5603] bridge_slave_0: entered promiscuous mode [ 94.361643][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.361767][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.362276][ T5606] bridge_slave_0: entered allmulticast mode [ 94.366598][ T5606] bridge_slave_0: entered promiscuous mode [ 94.431232][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.431321][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.431434][ T5603] bridge_slave_1: entered allmulticast mode [ 94.432879][ T5603] bridge_slave_1: entered promiscuous mode [ 94.455382][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.455500][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.456017][ T5606] bridge_slave_1: entered allmulticast mode [ 94.459531][ T5606] bridge_slave_1: entered promiscuous mode [ 94.473243][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.541568][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.561731][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.564402][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.591568][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.633486][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.636378][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.664387][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.718192][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.720562][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.722550][ T5604] team0: Port device team_slave_0 added [ 94.755340][ T5602] team0: Port device team_slave_0 added [ 94.790018][ T5604] team0: Port device team_slave_1 added [ 94.791631][ T5605] team0: Port device team_slave_0 added [ 94.793604][ T5602] team0: Port device team_slave_1 added [ 94.837405][ T5605] team0: Port device team_slave_1 added [ 94.854880][ T5603] team0: Port device team_slave_0 added [ 94.856943][ T5606] team0: Port device team_slave_0 added [ 94.906292][ T5603] team0: Port device team_slave_1 added [ 94.908935][ T5606] team0: Port device team_slave_1 added [ 94.912500][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.912516][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.912550][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.985012][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.985028][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.985050][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.038359][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.038369][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.038382][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.039278][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.039287][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.039300][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.040271][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.040284][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.040306][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.105497][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.105518][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.105541][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.128725][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.128741][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.128775][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.130093][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.130105][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.130127][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.167114][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.167131][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.167794][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.169958][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.169973][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.169996][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.351371][ T5604] hsr_slave_0: entered promiscuous mode [ 95.352937][ T5604] hsr_slave_1: entered promiscuous mode [ 95.396237][ T5602] hsr_slave_0: entered promiscuous mode [ 95.398711][ T5602] hsr_slave_1: entered promiscuous mode [ 95.402152][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 95.402259][ T5602] Cannot create hsr debugfs directory [ 95.454667][ T5605] hsr_slave_0: entered promiscuous mode [ 95.455517][ T5605] hsr_slave_1: entered promiscuous mode [ 95.456103][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 95.456137][ T5605] Cannot create hsr debugfs directory [ 95.502938][ T5603] hsr_slave_0: entered promiscuous mode [ 95.503687][ T5603] hsr_slave_1: entered promiscuous mode [ 95.504227][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 95.504240][ T5603] Cannot create hsr debugfs directory [ 95.552042][ T5606] hsr_slave_0: entered promiscuous mode [ 95.552828][ T5606] hsr_slave_1: entered promiscuous mode [ 95.553342][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 95.553358][ T5606] Cannot create hsr debugfs directory [ 95.637423][ T59] Bluetooth: hci4: command tx timeout [ 95.717378][ T59] Bluetooth: hci3: command tx timeout [ 95.797587][ T59] Bluetooth: hci0: command tx timeout [ 95.797601][ T5611] Bluetooth: hci2: command tx timeout [ 95.797626][ T59] Bluetooth: hci1: command tx timeout [ 96.716358][ T5604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.772082][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.791775][ T5604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.832955][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.843127][ T5604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.872747][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.901995][ T5604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.934274][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.081323][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.123676][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.132391][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.180282][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.184176][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.212650][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.244205][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.262496][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.431453][ T5603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.462357][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.481279][ T5603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.522621][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.531293][ T5603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.562802][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.600691][ T5603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.626800][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.719172][ T4912] Bluetooth: hci4: command tx timeout [ 97.799422][ T4912] Bluetooth: hci3: command tx timeout [ 97.845373][ T5606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.877414][ T4912] Bluetooth: hci0: command tx timeout [ 97.882341][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.887601][ T4912] Bluetooth: hci1: command tx timeout [ 97.887631][ T4912] Bluetooth: hci2: command tx timeout [ 97.890740][ T5606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.951089][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.975490][ T5606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.011122][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.037807][ T5606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.072536][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.100273][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.294208][ T5602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.331424][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.352298][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.352617][ T5602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.384429][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.417512][ T5602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.441031][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.445081][ T5602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.491863][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.521730][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.524010][ T1418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.578956][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.584456][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.584575][ T1479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.694929][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.737493][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.745435][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.745561][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.833486][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.833561][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.950019][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.015215][ T1479] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.016032][ T1479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.055244][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.084532][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.084754][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.209379][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.274590][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.292095][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.292287][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.356876][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.358978][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.450734][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.513733][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.513938][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.569431][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.569619][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.797346][ T59] Bluetooth: hci4: command tx timeout [ 99.887446][ T59] Bluetooth: hci3: command tx timeout [ 99.967339][ T59] Bluetooth: hci2: command tx timeout [ 99.967372][ T59] Bluetooth: hci1: command tx timeout [ 99.967392][ T59] Bluetooth: hci0: command tx timeout [ 100.184152][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.922783][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.927104][ T5604] veth0_vlan: entered promiscuous mode [ 100.995075][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.037764][ T5604] veth1_vlan: entered promiscuous mode [ 101.291737][ T5604] veth0_macvtap: entered promiscuous mode [ 101.344486][ T5605] veth0_vlan: entered promiscuous mode [ 101.359314][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.377067][ T5604] veth1_macvtap: entered promiscuous mode [ 101.431630][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.436280][ T5603] veth0_vlan: entered promiscuous mode [ 101.473067][ T5605] veth1_vlan: entered promiscuous mode [ 101.532950][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.533677][ T5603] veth1_vlan: entered promiscuous mode [ 101.565572][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.626700][ T1500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.659160][ T1500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.684052][ T1500] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.703447][ T1500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.816346][ T5605] veth0_macvtap: entered promiscuous mode [ 101.926576][ T5605] veth1_macvtap: entered promiscuous mode [ 102.011375][ T5603] veth0_macvtap: entered promiscuous mode [ 102.026231][ T5602] veth0_vlan: entered promiscuous mode [ 102.103278][ T5603] veth1_macvtap: entered promiscuous mode [ 102.185122][ T5602] veth1_vlan: entered promiscuous mode [ 102.219749][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.306832][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.320583][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.336589][ T1389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.336610][ T1389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.435734][ T5606] veth0_vlan: entered promiscuous mode [ 102.452929][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.456536][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.482724][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.512353][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.523742][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.558728][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.563910][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.578225][ T1500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.578247][ T1500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.644065][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.653890][ T5606] veth1_vlan: entered promiscuous mode [ 102.666232][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.672853][ T5602] veth0_macvtap: entered promiscuous mode [ 102.802147][ T5602] veth1_macvtap: entered promiscuous mode [ 103.550269][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.593433][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.593452][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.729123][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.730909][ T5606] veth0_macvtap: entered promiscuous mode [ 103.747284][ T1389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.747303][ T1389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.962185][ T5606] veth1_macvtap: entered promiscuous mode [ 103.965580][ T1389] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.994266][ T1389] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.994793][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.994818][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.996274][ T1389] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.039733][ T1389] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.043820][ T5795] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 104.116338][ T5794] bridge_slave_0: left allmulticast mode [ 104.116378][ T5794] bridge_slave_0: left promiscuous mode [ 104.131276][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.156110][ T5795] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 104.171012][ T5795] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1'. [ 104.329576][ T5794] bridge_slave_1: left allmulticast mode [ 104.329598][ T5794] bridge_slave_1: left promiscuous mode [ 104.329724][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.480634][ T5794] bond0: (slave bond_slave_0): Releasing backup interface [ 104.558071][ T5794] bond0: (slave bond_slave_1): Releasing backup interface [ 104.666318][ T5794] team0: Port device team_slave_0 removed [ 104.706066][ T5794] team0: Port device team_slave_1 removed [ 104.706855][ T5794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.706872][ T5794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.754061][ T5794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.754085][ T5794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.786305][ T5794] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.987812][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.987832][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.253026][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.558478][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.831353][ T1418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.856557][ T1418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.862054][ T1418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.881596][ T1418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.769613][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.769633][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.872245][ T5604] svc: failed to register nfsdv3 RPC service (errno 111). [ 106.963285][ T5604] svc: failed to register nfsaclv3 RPC service (errno 111). [ 106.963306][ T5604] failed to unregister udp with rpcbind [ 106.964196][ T5604] svc: failed to register nfsdv3 RPC service (errno 97). [ 106.964214][ T5604] svc: failed to register nfsaclv3 RPC service (errno 97). [ 106.964225][ T5604] failed to unregister udp with rpcbind [ 107.613616][ T1479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.613634][ T1479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.668275][ T5811] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.739846][ T1500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.739867][ T1500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.138643][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.138663][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.104740][ T5828] bridge0: port 1(syz_tun) entered blocking state [ 109.104867][ T5828] bridge0: port 1(syz_tun) entered disabled state [ 109.105053][ T5828] syz_tun: entered allmulticast mode [ 109.146592][ T5828] syz_tun: entered promiscuous mode [ 109.155120][ T5828] bridge0: port 1(syz_tun) entered blocking state [ 109.166052][ T5828] bridge0: port 1(syz_tun) entered forwarding state [ 110.132932][ T5849] bridge0: port 3(syz_tun) entered blocking state [ 110.133035][ T5849] bridge0: port 3(syz_tun) entered disabled state [ 110.133211][ T5849] syz_tun: entered allmulticast mode [ 110.343520][ T5849] syz_tun: entered promiscuous mode [ 110.344281][ T5849] bridge0: port 3(syz_tun) entered blocking state [ 110.364347][ T5849] bridge0: port 3(syz_tun) entered forwarding state [ 110.928101][ T5841] vivid-000: unregistering video7 [ 111.274873][ T5848] UDC core: g1: couldn't find an available UDC or it's busy [ 111.373177][ T5841] vivid-000: unregistering video8 [ 111.503651][ T5841] vivid-000: unregistering vbi0 [ 111.596319][ T5739] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.831163][ T5841] vivid-000: unregistering vbi1 [ 111.925802][ T5841] vivid-000: unregistering swradio0 [ 112.021517][ T5739] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.092534][ T5739] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 112.092562][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.092580][ T5739] usb 1-1: Product: syz [ 112.092593][ T5739] usb 1-1: Manufacturer: syz [ 112.092606][ T5739] usb 1-1: SerialNumber: syz [ 112.483540][ T5841] vivid-000: unregistering radio0 [ 112.502146][ T5841] vivid-000: unregistering radio1 [ 112.510673][ T5841] vivid-000: unregistering video9 [ 112.647671][ T5841] vivid-000: unregistering video10 [ 112.668602][ T5841] vivid-000: unregistering v4l-touch0 [ 114.111789][ T5841] vivid-001: unregistering video11 [ 114.128630][ T5841] vivid-001: unregistering video12 [ 114.129980][ T5739] hackrf 1-1:1.0: usb_control_msg() failed -110 request 0e [ 114.130004][ T5739] hackrf 1-1:1.0: Could not detect board [ 114.130061][ T5739] hackrf 1-1:1.0: probe with driver hackrf failed with error -110 [ 114.153411][ T5841] vivid-001: unregistering vbi2 [ 114.208149][ T5841] vivid-001: unregistering vbi3 [ 114.249222][ T5841] vivid-001: unregistering swradio1 [ 114.375994][ T5841] vivid-001: unregistering radio2 [ 114.512380][ T5841] vivid-001: unregistering radio3 [ 114.580474][ T5841] vivid-001: unregistering video13 [ 114.601520][ T5894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 114.660278][ T5841] vivid-001: unregistering video14 [ 114.661891][ T5841] vivid-001: unregistering v4l-touch1 [ 115.132479][ T5841] vivid-002: unregistering video15 [ 115.263964][ T5841] vivid-002: unregistering video16 [ 115.273197][ T5841] vivid-002: unregistering vbi4 [ 115.336542][ T5841] vivid-002: unregistering vbi5 [ 115.370324][ T5841] vivid-002: unregistering swradio2 [ 115.382820][ T5841] vivid-002: unregistering radio4 [ 115.400727][ T5841] vivid-002: unregistering radio5 [ 115.450085][ T5841] vivid-002: unregistering video17 [ 115.573437][ T5841] vivid-002: unregistering video18 [ 115.663523][ T5841] vivid-002: unregistering v4l-touch2 [ 116.046697][ T5841] vivid-003: unregistering video19 [ 116.055184][ T5841] vivid-003: unregistering video20 [ 116.072616][ T5841] vivid-003: unregistering vbi6 [ 116.093667][ T5841] vivid-003: unregistering vbi7 [ 116.111723][ T5841] vivid-003: unregistering swradio3 [ 116.188498][ T5841] vivid-003: unregistering radio6 [ 116.222983][ T5841] vivid-003: unregistering radio7 [ 116.240943][ T5841] vivid-003: unregistering video21 [ 116.298538][ T5841] vivid-003: unregistering video22 [ 116.329183][ T5841] vivid-003: unregistering v4l-touch3 [ 116.449218][ T5841] vivid-004: unregistering video23 [ 116.480409][ T5841] vivid-004: unregistering video24 [ 116.493948][ T5841] vivid-004: unregistering vbi8 [ 116.531602][ T5841] vivid-004: unregistering vbi9 [ 116.564345][ T5841] vivid-004: unregistering swradio4 [ 116.567006][ T5841] vivid-004: unregistering radio8 [ 116.592717][ T5841] vivid-004: unregistering radio9 [ 116.612500][ T5841] vivid-004: unregistering video25 [ 116.689991][ T5841] vivid-004: unregistering video26 [ 116.738726][ T5841] vivid-004: unregistering v4l-touch4 [ 117.069765][ T5841] vivid-005: unregistering video27 [ 117.071796][ T5841] vivid-005: unregistering video28 [ 117.076131][ T5841] vivid-005: unregistering vbi10 [ 117.108475][ T5841] vivid-005: unregistering vbi11 [ 117.193598][ T5841] vivid-005: unregistering swradio5 [ 117.220832][ T5841] vivid-005: unregistering radio10 [ 117.312046][ T5841] vivid-005: unregistering radio11 [ 117.368982][ T5930] netlink: 'syz.1.43': attribute type 13 has an invalid length. [ 117.395589][ T5841] vivid-005: unregistering video29 [ 117.406371][ T5841] vivid-005: unregistering video30 [ 117.419302][ T5841] vivid-005: unregistering v4l-touch5 [ 117.544457][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.44'. [ 117.739166][ T5841] vivid-006: unregistering video31 [ 117.745060][ T5841] vivid-006: unregistering video32 [ 117.764414][ T5841] vivid-006: unregistering vbi12 [ 117.850245][ T5841] vivid-006: unregistering vbi13 [ 117.861217][ T5841] vivid-006: unregistering swradio6 [ 117.874132][ T5841] vivid-006: unregistering radio12 [ 117.907932][ T5841] vivid-006: unregistering radio13 [ 117.963700][ T5841] vivid-006: unregistering video33 [ 117.977771][ T5841] vivid-006: unregistering video34 [ 117.984214][ T5841] vivid-006: unregistering v4l-touch6 [ 118.323250][ T5841] vivid-007: unregistering video35 [ 118.351542][ T5841] vivid-007: unregistering video36 [ 118.440226][ T5841] vivid-007: unregistering vbi14 [ 118.464699][ T5841] vivid-007: unregistering vbi15 [ 118.483030][ T5841] vivid-007: unregistering swradio7 [ 118.508517][ T5841] vivid-007: unregistering radio14 [ 118.515639][ T5841] vivid-007: unregistering radio15 [ 118.584449][ T5841] vivid-007: unregistering video37 [ 118.651892][ T5841] vivid-007: unregistering video38 [ 118.659617][ T5841] vivid-007: unregistering v4l-touch7 [ 118.957981][ T5841] vivid-008: unregistering video39 [ 118.959360][ T5841] vivid-008: unregistering video40 [ 118.962521][ T5841] vivid-008: unregistering vbi16 [ 118.982847][ T5841] vivid-008: unregistering vbi17 [ 118.999627][ T5841] vivid-008: unregistering swradio8 [ 119.049282][ T5841] vivid-008: unregistering radio16 [ 119.122480][ T5841] vivid-008: unregistering radio17 [ 119.136180][ T5841] vivid-008: unregistering video41 [ 119.157836][ T5841] vivid-008: unregistering video42 [ 119.216217][ T5841] vivid-008: unregistering v4l-touch8 [ 119.523903][ T5841] vivid-009: unregistering video43 [ 119.534607][ T5841] vivid-009: unregistering video44 [ 119.548896][ T5930] bridge0: port 3(syz_tun) entered disabled state [ 119.564651][ T5841] vivid-009: unregistering vbi18 [ 119.592644][ T5841] vivid-009: unregistering vbi19 [ 119.621863][ T5841] vivid-009: unregistering swradio9 [ 119.691374][ T5841] vivid-009: unregistering radio18 [ 119.708022][ T5841] vivid-009: unregistering radio19 [ 119.730349][ T5841] vivid-009: unregistering video45 [ 119.731504][ T5841] vivid-009: unregistering video46 [ 119.738966][ T5841] vivid-009: unregistering v4l-touch9 [ 119.901783][ T5841] vivid-010: unregistering video47 [ 119.903571][ T5841] vivid-010: unregistering video48 [ 119.905180][ T5841] vivid-010: unregistering vbi20 [ 119.911288][ T5841] vivid-010: unregistering vbi21 [ 119.916193][ T5841] vivid-010: unregistering swradio10 [ 119.923935][ T5841] vivid-010: unregistering radio20 [ 119.946990][ T5841] vivid-010: unregistering radio21 [ 119.966365][ T5841] vivid-010: unregistering video49 [ 120.012113][ T5841] vivid-010: unregistering video50 [ 120.037987][ T5841] vivid-010: unregistering v4l-touch10 [ 120.152673][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.173708][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.412687][ T5841] vivid-011: unregistering video51 [ 120.426869][ T5841] vivid-011: unregistering video52 [ 120.447616][ T5841] vivid-011: unregistering vbi22 [ 120.500636][ T5841] vivid-011: unregistering vbi23 [ 120.632050][ T5841] vivid-011: unregistering swradio11 [ 120.649136][ T5841] vivid-011: unregistering radio22 [ 120.754171][ T5841] vivid-011: unregistering radio23 [ 120.764344][ T5841] vivid-011: unregistering video53 [ 120.768149][ T5841] vivid-011: unregistering video54 [ 120.780662][ T5841] vivid-011: unregistering v4l-touch11 [ 120.903017][ T5841] vivid-012: unregistering video55 [ 120.906368][ T5841] vivid-012: unregistering video56 [ 120.930178][ T5841] vivid-012: unregistering vbi24 [ 120.963741][ T5841] vivid-012: unregistering vbi25 [ 120.970515][ T5841] vivid-012: unregistering swradio12 [ 120.991237][ T5841] vivid-012: unregistering radio24 [ 120.996733][ T5841] vivid-012: unregistering radio25 [ 121.062124][ T5841] vivid-012: unregistering video57 [ 121.070813][ T5841] vivid-012: unregistering video58 [ 121.079556][ T5841] vivid-012: unregistering v4l-touch12 [ 121.355308][ T5841] vivid-013: unregistering video59 [ 121.356917][ T5841] vivid-013: unregistering video60 [ 121.361243][ T5841] vivid-013: unregistering vbi26 [ 121.403825][ T5841] vivid-013: unregistering vbi27 [ 121.410511][ T5841] vivid-013: unregistering swradio13 [ 121.417003][ T5841] vivid-013: unregistering radio26 [ 121.422333][ T5841] vivid-013: unregistering radio27 [ 121.429275][ T5841] vivid-013: unregistering video61 [ 121.442237][ T5841] vivid-013: unregistering video62 [ 121.447115][ T5841] vivid-013: unregistering v4l-touch13 [ 121.701022][ T5841] vivid-014: unregistering video63 [ 121.706109][ T5841] vivid-014: unregistering video64 [ 121.721234][ T5841] vivid-014: unregistering vbi28 [ 121.750096][ T5841] vivid-014: unregistering vbi29 [ 121.755733][ T5732] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.779391][ T5841] vivid-014: unregistering swradio14 [ 121.794157][ T5841] vivid-014: unregistering radio28 [ 121.827919][ T5841] vivid-014: unregistering radio29 [ 121.853314][ T5841] vivid-014: unregistering video65 [ 121.860094][ T5841] vivid-014: unregistering video66 [ 121.882356][ T5841] vivid-014: unregistering v4l-touch14 [ 122.080238][ T5732] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 122.080273][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.131832][ T5841] vivid-015: unregistering video67 [ 122.136794][ T5841] vivid-015: unregistering video68 [ 122.155238][ T5841] vivid-015: unregistering vbi30 [ 122.283913][ T5841] vivid-015: unregistering vbi31 [ 122.294623][ T5841] vivid-015: unregistering swradio15 [ 122.484711][ T5841] vivid-015: unregistering radio30 [ 122.487971][ T5732] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 122.520703][ T5841] vivid-015: unregistering radio31 [ 122.559391][ T5841] vivid-015: unregistering video69 [ 122.584970][ T5841] vivid-015: unregistering video70 [ 122.614745][ T5841] vivid-015: unregistering v4l-touch15 [ 122.634098][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.708591][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.749260][ T5841] vivid-016: unregistering video71 [ 122.751583][ T5841] vivid-016: unregistering video72 [ 122.765304][ T5841] vivid-016: unregistering vbi32 [ 122.830390][ T5841] vivid-016: unregistering vbi33 [ 122.850918][ T5841] vivid-016: unregistering swradio16 [ 122.863198][ T5841] vivid-016: unregistering radio32 [ 122.883703][ T5732] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 122.883729][ T5732] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw [ 122.972221][ T5841] vivid-016: unregistering radio33 [ 122.988352][ T5841] vivid-016: unregistering video73 [ 123.010843][ T5841] vivid-016: unregistering video74 [ 123.012443][ T5841] vivid-016: unregistering v4l-touch16 [ 123.302732][ T5841] vivid-017: unregistering video75 [ 123.306355][ T5841] vivid-017: unregistering video76 [ 123.328551][ T5841] vivid-017: unregistering vbi34 [ 123.360424][ T5841] vivid-017: unregistering vbi35 [ 123.364926][ T5841] vivid-017: unregistering swradio17 [ 123.377384][ T5841] vivid-017: unregistering radio34 [ 123.411620][ T5841] vivid-017: unregistering radio35 [ 123.480655][ T5841] vivid-017: unregistering video77 [ 123.483101][ T5841] vivid-017: unregistering video78 [ 123.484586][ T5841] vivid-017: unregistering v4l-touch17 [ 123.635099][ T5841] vivid-018: unregistering video79 [ 123.636821][ T5841] vivid-018: unregistering video80 [ 123.640899][ T5841] vivid-018: unregistering vbi36 [ 123.649663][ T5841] vivid-018: unregistering vbi37 [ 123.652890][ T5841] vivid-018: unregistering swradio18 [ 123.656240][ T5841] vivid-018: unregistering radio36 [ 123.682021][ T5841] vivid-018: unregistering radio37 [ 123.710018][ T5841] vivid-018: unregistering video81 [ 123.716167][ T5841] vivid-018: unregistering video82 [ 123.722537][ T5841] vivid-018: unregistering v4l-touch18 [ 123.936704][ T5841] vivid-019: unregistering video83 [ 123.982762][ T5841] vivid-019: unregistering video84 [ 123.996152][ T5841] vivid-019: unregistering vbi38 [ 124.027499][ T5841] vivid-019: unregistering vbi39 [ 124.029707][ T5841] vivid-019: unregistering swradio19 [ 124.067829][ T5841] vivid-019: unregistering radio38 [ 124.095847][ T5841] vivid-019: unregistering radio39 [ 124.103783][ T5841] vivid-019: unregistering video85 [ 124.106685][ T5841] vivid-019: unregistering video86 [ 124.150937][ T5841] vivid-019: unregistering v4l-touch19 [ 124.364208][ T5841] vivid-020: unregistering video87 [ 124.379108][ T5841] vivid-020: unregistering video88 [ 124.381003][ T5841] vivid-020: unregistering vbi40 [ 124.396186][ T5841] vivid-020: unregistering vbi41 [ 124.407627][ T5841] vivid-020: unregistering swradio20 [ 124.423863][ T5841] vivid-020: unregistering radio40 [ 124.450442][ T5841] vivid-020: unregistering radio41 [ 124.453004][ T5841] vivid-020: unregistering video89 [ 124.469612][ T5841] vivid-020: unregistering video90 [ 124.486057][ T5841] vivid-020: unregistering v4l-touch20 [ 124.549841][ T5841] vivid-021: unregistering video91 [ 124.553617][ T5841] vivid-021: unregistering video92 [ 124.572367][ T5841] vivid-021: unregistering vbi42 [ 124.613435][ T5841] vivid-021: unregistering vbi43 [ 124.638086][ T5841] vivid-021: unregistering swradio21 [ 124.644069][ T5841] vivid-021: unregistering radio42 [ 124.656326][ T5841] vivid-021: unregistering radio43 [ 124.675856][ T5841] vivid-021: unregistering video93 [ 124.691412][ T5841] vivid-021: unregistering video94 [ 124.700192][ T5841] vivid-021: unregistering v4l-touch21 [ 125.002383][ T5841] vivid-022: unregistering video95 [ 125.042113][ T5841] vivid-022: unregistering video96 [ 125.044328][ T5841] vivid-022: unregistering vbi44 [ 125.071622][ T5841] vivid-022: unregistering vbi45 [ 125.090800][ T5841] vivid-022: unregistering swradio22 [ 125.113159][ T5841] vivid-022: unregistering radio44 [ 125.126930][ T5841] vivid-022: unregistering radio45 [ 125.156264][ T5841] vivid-022: unregistering video97 [ 125.191871][ T5841] vivid-022: unregistering video98 [ 125.195137][ T5841] vivid-022: unregistering v4l-touch22 [ 125.325013][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.359992][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.364339][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.388385][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.414291][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.492293][ T5841] vivid-023: unregistering video99 [ 125.506513][ T5841] vivid-023: unregistering video100 [ 125.516976][ T5841] vivid-023: unregistering vbi46 [ 125.546746][ T5841] vivid-023: unregistering vbi47 [ 125.553183][ T5841] vivid-023: unregistering swradio23 [ 125.568420][ T5841] vivid-023: unregistering radio46 [ 125.595184][ T5841] vivid-023: unregistering radio47 [ 125.603562][ T5841] vivid-023: unregistering video101 [ 125.613919][ T5841] vivid-023: unregistering video102 [ 125.631436][ T5841] vivid-023: unregistering v4l-touch23 [ 125.789988][ T6017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.925388][ T1418] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.014640][ T1418] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.373246][ T1418] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.433928][ T1418] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.560659][ T6028] openvswitch: netlink: Message has 8 unknown bytes. [ 126.560684][ T6028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.562570][ T4912] Bluetooth: hci5: command tx timeout [ 127.645674][ T6053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.723045][ T6053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.725792][ T6053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.785665][ T6055] openvswitch: netlink: Message has 8 unknown bytes. [ 127.785686][ T6055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.043585][ T5841] bridge0: port 1(syz_tun) entered disabled state [ 128.149936][ T5841] syz_tun (unregistering): left allmulticast mode [ 128.149960][ T5841] syz_tun (unregistering): left promiscuous mode [ 128.150036][ T5841] bridge0: port 1(syz_tun) entered disabled state [ 128.779677][ T9] usb 1-1: USB disconnect, device number 2 [ 129.289810][ T6090] bridge0: port 3(syz_tun) entered blocking state [ 129.290520][ T6090] bridge0: port 3(syz_tun) entered disabled state [ 129.292748][ T6090] syz_tun: entered allmulticast mode [ 129.399085][ T6090] syz_tun: entered promiscuous mode [ 129.417060][ T6090] bridge0: port 3(syz_tun) entered blocking state [ 129.426600][ T6090] bridge0: port 3(syz_tun) entered forwarding state [ 129.640035][ T4912] Bluetooth: hci5: command tx timeout [ 129.786538][ T6098] zram0: detected capacity change from 0 to 24 [ 129.860749][ T6096] netlink: 'syz.3.93': attribute type 12 has an invalid length. [ 129.860773][ T6096] netlink: 'syz.3.93': attribute type 29 has an invalid length. [ 129.860786][ T6096] netlink: 148 bytes leftover after parsing attributes in process `syz.3.93'. [ 129.861245][ T6096] Zero length message leads to an empty skb [ 130.372308][ T1128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.400038][ T6119] openvswitch: netlink: Message has 8 unknown bytes. [ 130.400068][ T6119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.578698][ T6103] gtp0: entered promiscuous mode [ 131.432456][ T1128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.509748][ T6152] openvswitch: netlink: Message has 8 unknown bytes. [ 131.509781][ T6152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.718529][ T4912] Bluetooth: hci5: command tx timeout [ 131.802863][ T6156] gtp0: entered promiscuous mode [ 132.514503][ T1128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.813129][ T6185] openvswitch: netlink: Message has 8 unknown bytes. [ 132.813252][ T6185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.246741][ T5732] usb 5-1: Direct firmware load for emi26/bitstream.fw failed with error -2 [ 133.246767][ T5732] usb 5-1: Falling back to sysfs fallback for: emi26/bitstream.fw [ 133.252700][ T1128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.657854][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.657947][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.797447][ T59] Bluetooth: hci5: command tx timeout [ 135.231519][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.231641][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.231874][ T6009] bridge_slave_0: entered allmulticast mode [ 135.247444][ T6009] bridge_slave_0: entered promiscuous mode [ 135.302159][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.302286][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.302514][ T6009] bridge_slave_1: entered allmulticast mode [ 135.336244][ T6009] bridge_slave_1: entered promiscuous mode [ 135.504677][ T38] audit: type=1800 audit(1785202919.082:2): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.142" name="start_block" dev="configfs" ino=9739 res=0 errno=0 [ 135.759104][ T6009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.795034][ T6009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.132880][ T6249] ======================================================= [ 136.132880][ T6249] WARNING: The mand mount option has been deprecated and [ 136.132880][ T6249] and is ignored by this kernel. Remove the mand [ 136.132880][ T6249] option from the mount to silence this warning. [ 136.132880][ T6249] ======================================================= [ 136.216979][ T6252] openvswitch: netlink: Message has 8 unknown bytes. [ 136.217021][ T6252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.759132][ T6009] team0: Port device team_slave_0 added [ 136.776967][ T6009] team0: Port device team_slave_1 added [ 137.523452][ T6286] openvswitch: netlink: Message has 8 unknown bytes. [ 137.523482][ T6286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.813541][ T6272] udc dummy_udc.0: failed to start g1: -4 [ 137.813571][ T6272] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4 [ 137.899251][ T6272] UDC core: g1: couldn't find an available UDC or it's busy [ 138.893270][ T6307] ================================================================== [ 138.893282][ T6307] BUG: KASAN: slab-use-after-free in pn_bind+0x106/0xb20 [ 138.893310][ T6307] Write of size 8 at addr ffff888042ea4900 by task syz.3.171/6307 [ 138.893319][ T6307] [ 138.893333][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.3.171 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.893349][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 138.893362][ T6307] Call Trace: [ 138.893366][ T6307] [ 138.893371][ T6307] dump_stack_lvl+0xe8/0x150 [ 138.893389][ T6307] print_address_description+0x55/0x1e0 [ 138.893405][ T6307] ? pn_bind+0x106/0xb20 [ 138.893418][ T6307] print_report+0x58/0x70 [ 138.893431][ T6307] kasan_report+0x117/0x150 [ 138.893443][ T6307] ? pn_bind+0x106/0xb20 [ 138.893458][ T6307] pn_bind+0x106/0xb20 [ 138.893472][ T6307] usb_add_function+0x290/0x930 [ 138.893483][ T6307] ? check_remote_wakeup_config+0x58/0x1c0 [ 138.893495][ T6307] configfs_composite_bind+0xde0/0x1410 [ 138.893509][ T6307] ? __pfx_configfs_composite_bind+0x10/0x10 [ 138.893520][ T6307] gadget_bind_driver+0x2ca/0x9e0 [ 138.893536][ T6307] ? __pfx_gadget_bind_driver+0x10/0x10 [ 138.893549][ T6307] really_probe+0x254/0xae0 [ 138.893564][ T6307] __driver_probe_device+0x1e8/0x360 [ 138.893585][ T6307] driver_probe_device+0x4f/0x240 [ 138.893600][ T6307] __driver_attach+0x339/0x600 [ 138.893614][ T6307] bus_for_each_dev+0x23e/0x2c0 [ 138.893624][ T6307] ? __pfx___driver_attach+0x10/0x10 [ 138.893644][ T6307] ? __pfx_bus_for_each_dev+0x10/0x10 [ 138.893655][ T6307] ? rt_spin_unlock+0x163/0x200 [ 138.893676][ T6307] bus_add_driver+0x348/0x670 [ 138.893689][ T6307] driver_register+0x23a/0x320 [ 138.893704][ T6307] usb_gadget_register_driver_owner+0xf9/0x270 [ 138.893719][ T6307] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 138.893734][ T6307] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 138.893751][ T6307] configfs_write_iter+0x33a/0x430 [ 138.893763][ T6307] vfs_write+0x61e/0xbb0 [ 138.893777][ T6307] ? __pfx_vfs_write+0x10/0x10 [ 138.893789][ T6307] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 138.893800][ T6307] ? lockdep_hardirqs_on+0x7a/0x110 [ 138.893813][ T6307] ? mutex_lock_nested+0x152/0x1d0 [ 138.893827][ T6307] ? fdget_pos+0x252/0x320 [ 138.893840][ T6307] ksys_write+0x156/0x270 [ 138.893852][ T6307] ? __pfx_ksys_write+0x10/0x10 [ 138.893865][ T6307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.893876][ T6307] do_syscall_64+0x174/0x580 [ 138.893888][ T6307] ? trace_irq_disable+0x3b/0x140 [ 138.893898][ T6307] ? clear_bhb_loop+0x40/0x90 [ 138.893909][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.893919][ T6307] RIP: 0033:0x7f274982de99 [ 138.893934][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.893943][ T6307] RSP: 002b:00007f2747a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.893960][ T6307] RAX: ffffffffffffffda RBX: 00007f2749ab5fa0 RCX: 00007f274982de99 [ 138.893968][ T6307] RDX: 000000000000000d RSI: 0000200000000540 RDI: 0000000000000003 [ 138.893974][ T6307] RBP: 00007f27498c3eaf R08: 0000000000000000 R09: 0000000000000000 [ 138.893980][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.893986][ T6307] R13: 00007f2749ab6038 R14: 00007f2749ab5fa0 R15: 00007ffe745a2bf8 [ 138.893998][ T6307] [ 138.894002][ T6307] [ 138.894005][ T6307] Allocated by task 6267: [ 138.894010][ T6307] kasan_save_track+0x3e/0x80 [ 138.894020][ T6307] __kasan_kmalloc+0x93/0xb0 [ 138.894029][ T6307] __kvmalloc_node_noprof+0x5be/0x8a0 [ 138.894040][ T6307] alloc_netdev_mqs+0xa9/0x12c0 [ 138.894053][ T6307] phonet_alloc_inst+0xa4/0x190 [ 138.894066][ T6307] usb_get_function_instance+0xe3/0x2f0 [ 138.894081][ T6307] function_make+0x127/0x360 [ 138.894093][ T6307] configfs_mkdir+0x4f6/0x9e0 [ 138.894104][ T6307] vfs_mkdir+0x402/0x620 [ 138.894119][ T6307] filename_mkdirat+0x289/0x520 [ 138.894130][ T6307] __se_sys_mkdirat+0x35/0x150 [ 138.894141][ T6307] do_syscall_64+0x174/0x580 [ 138.894152][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.894160][ T6307] [ 138.894162][ T6307] Freed by task 6272: [ 138.894167][ T6307] kasan_save_track+0x3e/0x80 [ 138.894175][ T6307] kasan_save_free_info+0x40/0x50 [ 138.894187][ T6307] __kasan_slab_free+0x5c/0x80 [ 138.894196][ T6307] kfree+0x1c5/0x6c0 [ 138.894203][ T6307] pn_bind+0x131/0xb20 [ 138.894214][ T6307] usb_add_function+0x290/0x930 [ 138.894223][ T6307] configfs_composite_bind+0xde0/0x1410 [ 138.894232][ T6307] gadget_bind_driver+0x2ca/0x9e0 [ 138.894245][ T6307] really_probe+0x254/0xae0 [ 138.894257][ T6307] __driver_probe_device+0x1e8/0x360 [ 138.894271][ T6307] driver_probe_device+0x4f/0x240 [ 138.894292][ T6307] __driver_attach+0x339/0x600 [ 138.894313][ T6307] bus_for_each_dev+0x23e/0x2c0 [ 138.894329][ T6307] bus_add_driver+0x348/0x670 [ 138.894345][ T6307] driver_register+0x23a/0x320 [ 138.894369][ T6307] usb_gadget_register_driver_owner+0xf9/0x270 [ 138.894393][ T6307] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 138.894409][ T6307] configfs_write_iter+0x33a/0x430 [ 138.894419][ T6307] vfs_write+0x61e/0xbb0 [ 138.894429][ T6307] ksys_write+0x156/0x270 [ 138.894439][ T6307] do_syscall_64+0x174/0x580 [ 138.894450][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.894458][ T6307] [ 138.894461][ T6307] The buggy address belongs to the object at ffff888042ea4000 [ 138.894461][ T6307] which belongs to the cache kmalloc-cg-8k of size 8192 [ 138.894470][ T6307] The buggy address is located 2304 bytes inside of [ 138.894470][ T6307] freed 8192-byte region [ffff888042ea4000, ffff888042ea6000) [ 138.894480][ T6307] [ 138.894482][ T6307] The buggy address belongs to the physical page: [ 138.894500][ T6307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42ea0 [ 138.894510][ T6307] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 138.894518][ T6307] memcg:ffff888042ea2011 [ 138.894524][ T6307] flags: 0x80000000000040(head|node=0|zone=1) [ 138.894533][ T6307] page_type: f5(slab) [ 138.894542][ T6307] raw: 0080000000000040 ffff88813ffbb640 dead000000000100 dead000000000122 [ 138.894551][ T6307] raw: 0000000000000000 0000400000020002 00000000f5000000 ffff888042ea2011 [ 138.894560][ T6307] head: 0080000000000040 ffff88813ffbb640 dead000000000100 dead000000000122 [ 138.894569][ T6307] head: 0000000000000000 0000400000020002 00000000f5000000 ffff888042ea2011 [ 138.894584][ T6307] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 138.894593][ T6307] head: 00000007fb5f003f 0000000000000000 00000000ffffffff 0000000000000008 [ 138.894598][ T6307] page dumped because: kasan: bad access detected [ 138.894614][ T6307] page_owner tracks the page as allocated [ 138.894618][ T6307] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1128, tgid 1128 (kworker/u8:9), ts 134421628953, free_ts 133700386317 [ 138.894665][ T6307] post_alloc_hook+0x1f9/0x250 [ 138.894675][ T6307] get_page_from_freelist+0x262a/0x26a0 [ 138.894692][ T6307] __alloc_frozen_pages_noprof+0x18d/0x380 [ 138.894704][ T6307] allocate_slab+0x79/0x5e0 [ 138.894722][ T6307] refill_objects+0x2d8/0x350 [ 138.894734][ T6307] __pcs_replace_empty_main+0x330/0x690 [ 138.894746][ T6307] __kvmalloc_node_noprof+0x703/0x8a0 [ 138.894756][ T6307] alloc_netdev_mqs+0xa9/0x12c0 [ 138.894768][ T6307] nsim_create+0x87/0x1160 [ 138.894781][ T6307] __nsim_dev_port_add+0x7f8/0xcd0 [ 138.894791][ T6307] nsim_dev_port_add_all+0x37/0xf0 [ 138.894800][ T6307] nsim_dev_reload_up+0x4dd/0x880 [ 138.894810][ T6307] devlink_reload+0x4bb/0x890 [ 138.894823][ T6307] devlink_pernet_pre_exit+0x1ff/0x420 [ 138.894834][ T6307] ops_undo_list+0x17d/0x8d0 [ 138.894843][ T6307] cleanup_net+0x575/0x810 [ 138.894852][ T6307] page last free pid 5623 tgid 5623 stack trace: [ 138.894857][ T6307] __free_frozen_pages+0x10e7/0x11c0 [ 138.894866][ T6307] __slab_free+0x252/0x2a0 [ 138.894875][ T6307] qlist_free_all+0x99/0x100 [ 138.894883][ T6307] kasan_quarantine_reduce+0x148/0x160 [ 138.894891][ T6307] __kasan_slab_alloc+0x22/0x80 [ 138.894906][ T6307] kmem_cache_alloc_noprof+0x355/0x650 [ 138.894915][ T6307] do_getname+0x2e/0x250 [ 138.894922][ T6307] do_sys_openat2+0xcc/0x200 [ 138.894930][ T6307] __x64_sys_openat+0x138/0x170 [ 138.894938][ T6307] do_syscall_64+0x174/0x580 [ 138.894953][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.894962][ T6307] [ 138.894964][ T6307] Memory state around the buggy address: [ 138.894970][ T6307] ffff888042ea4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.894977][ T6307] ffff888042ea4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.894983][ T6307] >ffff888042ea4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.894988][ T6307] ^ [ 138.894993][ T6307] ffff888042ea4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.894999][ T6307] ffff888042ea4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.895004][ T6307] ================================================================== [ 138.895126][ T6307] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 138.895142][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.3.171 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.895164][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 138.895170][ T6307] Call Trace: [ 138.895175][ T6307] [ 138.895180][ T6307] vpanic+0x56c/0xa60 [ 138.895193][ T6307] ? rcu_is_watching+0x15/0xb0 [ 138.895207][ T6307] ? __pfx_vpanic+0x10/0x10 [ 138.895218][ T6307] panic+0xc5/0xd0 [ 138.895227][ T6307] ? __pfx_panic+0x10/0x10 [ 138.895237][ T6307] ? preempt_schedule_thunk+0x16/0x40 [ 138.895250][ T6307] ? pn_bind+0x106/0xb20 [ 138.895263][ T6307] ? preempt_schedule_thunk+0x16/0x40 [ 138.895274][ T6307] ? pn_bind+0x106/0xb20 [ 138.895287][ T6307] check_panic_on_warn+0x89/0xb0 [ 138.895297][ T6307] ? pn_bind+0x106/0xb20 [ 138.895309][ T6307] end_report+0x73/0x170 [ 138.895320][ T6307] ? pn_bind+0x106/0xb20 [ 138.895332][ T6307] kasan_report+0x128/0x150 [ 138.895344][ T6307] ? pn_bind+0x106/0xb20 [ 138.895358][ T6307] pn_bind+0x106/0xb20 [ 138.895372][ T6307] usb_add_function+0x290/0x930 [ 138.895383][ T6307] ? check_remote_wakeup_config+0x58/0x1c0 [ 138.895395][ T6307] configfs_composite_bind+0xde0/0x1410 [ 138.895409][ T6307] ? __pfx_configfs_composite_bind+0x10/0x10 [ 138.895424][ T6307] gadget_bind_driver+0x2ca/0x9e0 [ 138.895490][ T6307] ? __pfx_gadget_bind_driver+0x10/0x10 [ 138.895518][ T6307] really_probe+0x254/0xae0 [ 138.895553][ T6307] __driver_probe_device+0x1e8/0x360 [ 138.895567][ T6307] driver_probe_device+0x4f/0x240 [ 138.895588][ T6307] __driver_attach+0x339/0x600 [ 138.895602][ T6307] bus_for_each_dev+0x23e/0x2c0 [ 138.895613][ T6307] ? __pfx___driver_attach+0x10/0x10 [ 138.895632][ T6307] ? __pfx_bus_for_each_dev+0x10/0x10 [ 138.895644][ T6307] ? rt_spin_unlock+0x163/0x200 [ 138.895661][ T6307] bus_add_driver+0x348/0x670 [ 138.895673][ T6307] driver_register+0x23a/0x320 [ 138.895694][ T6307] usb_gadget_register_driver_owner+0xf9/0x270 [ 138.895709][ T6307] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 138.895742][ T6307] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 138.895763][ T6307] configfs_write_iter+0x33a/0x430 [ 138.895778][ T6307] vfs_write+0x61e/0xbb0 [ 138.895792][ T6307] ? __pfx_vfs_write+0x10/0x10 [ 138.895805][ T6307] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 138.895817][ T6307] ? lockdep_hardirqs_on+0x7a/0x110 [ 138.895829][ T6307] ? mutex_lock_nested+0x152/0x1d0 [ 138.895843][ T6307] ? fdget_pos+0x252/0x320 [ 138.895855][ T6307] ksys_write+0x156/0x270 [ 138.895867][ T6307] ? __pfx_ksys_write+0x10/0x10 [ 138.895881][ T6307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.895891][ T6307] do_syscall_64+0x174/0x580 [ 138.895903][ T6307] ? trace_irq_disable+0x3b/0x140 [ 138.895913][ T6307] ? clear_bhb_loop+0x40/0x90 [ 138.895924][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.895934][ T6307] RIP: 0033:0x7f274982de99 [ 138.895944][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.895953][ T6307] RSP: 002b:00007f2747a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.895964][ T6307] RAX: ffffffffffffffda RBX: 00007f2749ab5fa0 RCX: 00007f274982de99 [ 138.895972][ T6307] RDX: 000000000000000d RSI: 0000200000000540 RDI: 0000000000000003 [ 138.895979][ T6307] RBP: 00007f27498c3eaf R08: 0000000000000000 R09: 0000000000000000 [ 138.895985][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.895991][ T6307] R13: 00007f2749ab6038 R14: 00007f2749ab5fa0 R15: 00007ffe745a2bf8 [ 138.896003][ T6307] [ 138.896509][ T6307] Kernel Offset: disabled