last executing test programs: 15.103459058s ago: executing program 0 (id=6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2400c884, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) shutdown(r0, 0x1) 14.723258523s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1c0) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/strings/0x409\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409/s1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/s2\x00', 0x1c0) rmdir(&(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/s1\x00') 14.488318301s ago: executing program 0 (id=8): unshare(0x62040200) r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x8, 0x3, 0x3, 0x1, 0x101]}, &(0x7f0000000200)=0x54) 11.716849283s ago: executing program 0 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='tcp 2049', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='1\n\x00', 0x3) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f00000006c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000700)='./mnt\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000780)='addr=127.0.0.1,vers=4.0\x00') getdents64(0xffffffffffffffff, &(0x7f0000000800)=""/256, 0x100) 10.695230939s ago: executing program 0 (id=17): mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.544549404s ago: executing program 1 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20) 8.825372239s ago: executing program 0 (id=24): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) unshare(0x44040200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 8.076060562s ago: executing program 32 (id=24): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) unshare(0x44040200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 5.880365993s ago: executing program 3 (id=27): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x920, 0x12) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) 5.566098406s ago: executing program 2 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001f40)={0x2020}, 0x2020) 5.232660535s ago: executing program 2 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000100)=0x3}) 4.543275659s ago: executing program 3 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0x0}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0x0}) 4.311823861s ago: executing program 1 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) write(r0, &(0x7f00000001a0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='5\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/bank0\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='1\n', 0x2) 4.214973119s ago: executing program 2 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) 3.417434585s ago: executing program 3 (id=33): mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:01.0/resource0\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)="0000000001000000", 0x8) 3.236426206s ago: executing program 2 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_mnt\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040fc0428150001000000010902190001010080fa0904000001ff00000007058101c00301"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_mnt/bus/usb/drivers/spca1528/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='04fc 1528\x00', 0x9) nanosleep(&(0x7f0000000600)={0x0, 0x2faf080}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/bus/usb/devices/5-1:1.0/driver\x00', 0x0, 0x0) 3.130322275s ago: executing program 1 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)=@x86={0x40, 0x3, 0xe, 0x0, 0x6, 0x1, 0x7, 0x32, 0xf9, 0x0, 0x4, 0x4, 0x0, 0x8, 0x3, 0xb2, 0x8, 0x2, 0x0, '\x00', 0x4, 0x1f}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) 2.894174898s ago: executing program 3 (id=36): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/200, 0xc8) 2.593799057s ago: executing program 3 (id=37): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0x8000000000, 0x4001}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000000180)='O', 0x1, 0x6}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000000200)="f020", 0x2, 0x6}) 2.367108071s ago: executing program 3 (id=38): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_hcd.0\x00', 0xb) close(r1) 1.741673649s ago: executing program 1 (id=39): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000900, 0x0, &(0x7f00000000c0)={0xe, 0x0, 0x80000000, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x10}) 1.451382998s ago: executing program 1 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 1.2219599s ago: executing program 2 (id=41): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000100), 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 13.977562ms ago: executing program 1 (id=42): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109025f0003010000000904000000010100000a2401"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) 0s ago: executing program 2 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) write(r0, &(0x7f00000001a0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='5\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/bank0\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='1\n', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 91.733563][ T5578] cgroup: Unknown subsys name 'net' [ 91.976845][ T5578] cgroup: Unknown subsys name 'cpuset' [ 91.981386][ T199] cfg80211: failed to load regulatory.db [ 92.027400][ T5578] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.950160][ T5578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.948921][ T4906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.982130][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.984544][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.988752][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.006556][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.008854][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.010524][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.013137][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.021286][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.035700][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.063747][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.070838][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.076948][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.080227][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.086247][ T4906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.124915][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.126178][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.141664][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.145199][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.168574][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.129249][ T5600] Bluetooth: hci1: command tx timeout [ 100.207738][ T5600] Bluetooth: hci3: command tx timeout [ 100.259183][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.259455][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.259742][ T5597] bridge_slave_0: entered allmulticast mode [ 100.263329][ T5597] bridge_slave_0: entered promiscuous mode [ 100.289526][ T5600] Bluetooth: hci2: command tx timeout [ 100.289828][ T5600] Bluetooth: hci0: command tx timeout [ 100.336365][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.336595][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.337459][ T5597] bridge_slave_1: entered allmulticast mode [ 100.353370][ T5597] bridge_slave_1: entered promiscuous mode [ 100.520337][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.520817][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.521158][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.521438][ T5599] bridge_slave_0: entered allmulticast mode [ 100.523973][ T5599] bridge_slave_0: entered promiscuous mode [ 100.603942][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.604524][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.604837][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.605037][ T5599] bridge_slave_1: entered allmulticast mode [ 100.611288][ T5599] bridge_slave_1: entered promiscuous mode [ 100.656496][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.658460][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.658757][ T5598] bridge_slave_0: entered allmulticast mode [ 100.681574][ T5598] bridge_slave_0: entered promiscuous mode [ 100.733381][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.733645][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.733838][ T5596] bridge_slave_0: entered allmulticast mode [ 100.736439][ T5596] bridge_slave_0: entered promiscuous mode [ 100.808321][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.808633][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.808914][ T5598] bridge_slave_1: entered allmulticast mode [ 100.811476][ T5598] bridge_slave_1: entered promiscuous mode [ 100.867620][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.867985][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.869517][ T5596] bridge_slave_1: entered allmulticast mode [ 100.871994][ T5596] bridge_slave_1: entered promiscuous mode [ 100.919660][ T5597] team0: Port device team_slave_0 added [ 100.925538][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.985301][ T5597] team0: Port device team_slave_1 added [ 100.994780][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.026453][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.074007][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.085766][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.144763][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.173848][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.173879][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.173897][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.191594][ T5599] team0: Port device team_slave_0 added [ 101.258371][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.258384][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.258422][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.262528][ T5599] team0: Port device team_slave_1 added [ 101.325815][ T5598] team0: Port device team_slave_0 added [ 101.368541][ T5596] team0: Port device team_slave_0 added [ 101.372922][ T5598] team0: Port device team_slave_1 added [ 101.410613][ T5596] team0: Port device team_slave_1 added [ 101.434787][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.434800][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.434820][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.523897][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.523909][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.523929][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.580405][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.580419][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.580438][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.651232][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.651244][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.651263][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.653787][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.653798][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.653817][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.685285][ T5597] hsr_slave_0: entered promiscuous mode [ 101.693843][ T5597] hsr_slave_1: entered promiscuous mode [ 101.766399][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.766411][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.766431][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.207992][ T5603] Bluetooth: hci1: command tx timeout [ 102.246119][ T5599] hsr_slave_0: entered promiscuous mode [ 102.254622][ T5599] hsr_slave_1: entered promiscuous mode [ 102.256352][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 102.256459][ T5599] Cannot create hsr debugfs directory [ 102.287049][ T5603] Bluetooth: hci3: command tx timeout [ 102.361313][ T5598] hsr_slave_0: entered promiscuous mode [ 102.363086][ T5598] hsr_slave_1: entered promiscuous mode [ 102.364514][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 102.364539][ T5598] Cannot create hsr debugfs directory [ 102.367039][ T5603] Bluetooth: hci0: command tx timeout [ 102.367068][ T5603] Bluetooth: hci2: command tx timeout [ 102.411417][ T5596] hsr_slave_0: entered promiscuous mode [ 102.413111][ T5596] hsr_slave_1: entered promiscuous mode [ 102.414562][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 102.414586][ T5596] Cannot create hsr debugfs directory [ 103.303609][ T5597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.345153][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.360572][ T5597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.396369][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.410413][ T5597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.442943][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.471497][ T5597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.493945][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.647912][ T5598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.672012][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.684532][ T5598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.713238][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.725563][ T5598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.767665][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.795128][ T5598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.832557][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.034964][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.072037][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.096637][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.124611][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.144930][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.181582][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.231020][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.261148][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.287030][ T5600] Bluetooth: hci1: command tx timeout [ 104.368647][ T5600] Bluetooth: hci3: command tx timeout [ 104.431766][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.447839][ T5603] Bluetooth: hci0: command tx timeout [ 104.447940][ T5600] Bluetooth: hci2: command tx timeout [ 104.472146][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.491318][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.523314][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.535333][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.572348][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.588892][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.623793][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.678825][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.802301][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.858647][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.858891][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.909686][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.915374][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.915531][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.087339][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.148171][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.148785][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.215654][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.237555][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.237689][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.395830][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.473956][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.504399][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.504574][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.587424][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.587578][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.701274][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.763725][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.764204][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.861075][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.861247][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.372290][ T5600] Bluetooth: hci1: command tx timeout [ 106.451474][ T5600] Bluetooth: hci3: command tx timeout [ 106.527675][ T5600] Bluetooth: hci2: command tx timeout [ 106.529334][ T5600] Bluetooth: hci0: command tx timeout [ 106.654307][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.899248][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.078702][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.081987][ T5597] veth0_vlan: entered promiscuous mode [ 107.198399][ T5597] veth1_vlan: entered promiscuous mode [ 107.351209][ T5598] veth0_vlan: entered promiscuous mode [ 107.370265][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.434976][ T5598] veth1_vlan: entered promiscuous mode [ 107.476087][ T5596] veth0_vlan: entered promiscuous mode [ 107.495392][ T5597] veth0_macvtap: entered promiscuous mode [ 107.541701][ T5597] veth1_macvtap: entered promiscuous mode [ 107.565516][ T5596] veth1_vlan: entered promiscuous mode [ 107.669298][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.694130][ T5598] veth0_macvtap: entered promiscuous mode [ 107.722455][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.726060][ T5599] veth0_vlan: entered promiscuous mode [ 107.765600][ T5598] veth1_macvtap: entered promiscuous mode [ 107.805946][ T1245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.840271][ T1245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.844317][ T1245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.869405][ T5596] veth0_macvtap: entered promiscuous mode [ 107.879973][ T1245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.881579][ T5599] veth1_vlan: entered promiscuous mode [ 107.963402][ T5596] veth1_macvtap: entered promiscuous mode [ 108.008946][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.142272][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.270117][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.308232][ T176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.322769][ T176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.346177][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.361100][ T176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.386225][ T176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.491846][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.494940][ T5599] veth0_macvtap: entered promiscuous mode [ 108.520084][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.527073][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.546566][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.580561][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.580584][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.651305][ T5599] veth1_macvtap: entered promiscuous mode [ 109.001764][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.001784][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.090017][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.205572][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.205590][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.292211][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.339664][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.409263][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.419690][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.442749][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.455198][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.455245][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.682375][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.682398][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.157875][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.157896][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.491932][ T5743] program syz.0.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.630656][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.630680][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.993629][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.993651][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.980274][ T5760] Config c/1 of g1 needs at least one function. [ 111.980686][ T5760] udc dummy_udc.0: failed to start g1: -22 [ 111.980713][ T5760] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 112.072708][ T5760] UDC core: g1: couldn't find an available UDC or it's busy [ 112.115956][ T5763] udc dummy_udc.0: soft-connect without a gadget driver [ 112.116952][ T5763] udc dummy_udc.0: soft-connect without a gadget driver [ 112.410504][ T5762] smpboot: CPU 1 is now offline [ 112.701606][ T5764] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 113.073104][ T38] audit: type=1800 audit(1785415866.338:2): pid=5772 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.3.11" name="file1" dev="tmpfs" ino=30 res=0 errno=0 [ 113.584014][ T5768] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.584166][ T5768] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.706633][ T5774] syz.3.12 (5774) used greatest stack depth: 17920 bytes left [ 113.775954][ T5768] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.971974][ T5768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.972067][ T5768] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.193824][ T5768] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.312642][ T5768] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.312743][ T5768] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.735806][ T5768] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.823960][ T5768] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.824093][ T5768] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.900112][ T5597] do_umount: task=syz-executor[5597] propagate_mount_busy()!=0 [ 114.900331][ T5597] do_umount: task=syz-executor[5597] propagate_mount_busy()!=0 [ 114.985407][ T5768] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.199949][ T5789] fuseblk: Bad value for 'fd' [ 115.251503][ T5600] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.773661][ T5791] smpboot: CPU 1 is now offline [ 115.870585][ T5792] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 115.889676][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.047975][ T5600] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.127869][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 116.178190][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.271806][ T32] usb 4-1: string descriptor 0 read error: -22 [ 116.271984][ T32] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 116.272010][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.336019][ T5600] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 116.356014][ T5600] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 116.369374][ T5600] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.373942][ T5603] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 116.375316][ T5603] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 116.433270][ T5600] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 117.131950][ T32] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 117.132005][ T32] dw2102: su3000_power_ctrl: 1, initialized 0 [ 117.133064][ T32] dvb-usb: bulk message failed: -22 (2/0) [ 117.327520][ T5600] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.416912][ T199] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.610730][ T199] usb 3-1: Using ep0 maxpacket: 16 [ 117.622921][ T199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.622955][ T199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.622978][ T199] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.623018][ T199] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.623040][ T199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.676390][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.710166][ T32] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 117.710264][ T32] usb 4-1: media controller created [ 117.715019][ T32] dvb-usb: bulk message failed: -22 (6/0) [ 117.715043][ T32] dw2102: i2c transfer failed. [ 117.715064][ T32] dvb-usb: bulk message failed: -22 (6/0) [ 117.715079][ T32] dw2102: i2c transfer failed. [ 117.715096][ T32] dvb-usb: bulk message failed: -22 (6/0) [ 117.715110][ T32] dw2102: i2c transfer failed. [ 117.715127][ T32] dvb-usb: bulk message failed: -22 (6/0) [ 117.715142][ T32] dw2102: i2c transfer failed. [ 117.715164][ T32] dvb-usb: bulk message failed: -22 (6/0) [ 117.715177][ T32] dw2102: i2c transfer failed. [ 117.754879][ T32] dvb-usb: bulk message failed: -22 (6/0) [ 117.754943][ T32] dw2102: i2c transfer failed. [ 117.754967][ T32] dvb-usb: MAC address: 02:02:02:02:02:02 [ 117.907393][ T199] usb 3-1: config 0 descriptor?? [ 117.970981][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.128464][ T5600] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.146687][ T32] dvb-usb: bulk message failed: -22 (3/0) [ 118.146715][ T32] dw2102: command 0x0e transfer failed. [ 118.146725][ T32] dvb-usb: bulk message failed: -22 (3/0) [ 118.146738][ T32] dw2102: command 0x0e transfer failed. [ 118.450991][ T5603] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.465754][ T32] dvb-usb: bulk message failed: -22 (3/0) [ 118.465777][ T32] dw2102: command 0x0e transfer failed. [ 118.465786][ T32] dvb-usb: bulk message failed: -22 (3/0) [ 118.465800][ T32] dw2102: command 0x0e transfer failed. [ 118.465809][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 118.465822][ T32] dw2102: command 0x51 transfer failed. [ 118.597386][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.628955][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.631179][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.672872][ T5810] Config c/1 of g1 needs at least one function. [ 118.672999][ T5810] udc dummy_udc.0: failed to start g1: -22 [ 118.673022][ T5810] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 118.739240][ T151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.766843][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.784959][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.132950][ T199] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.132992][ T199] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.133018][ T199] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.133063][ T199] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.133090][ T199] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.133125][ T199] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.133153][ T199] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.198004][ T199] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.198037][ T199] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.198063][ T199] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 119.198906][ T32] DVB: Unable to find symbol ds3000_attach() [ 119.198918][ T32] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 119.282468][ T5810] UDC core: g1: couldn't find an available UDC or it's busy [ 119.390036][ T199] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 119.390071][ T199] microsoft 0003:045E:07DA.0001: no inputs found [ 119.390086][ T199] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 119.406881][ T5600] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.485571][ T199] usb 3-1: USB disconnect, device number 2 [ 119.697883][ T32] rc_core: IR keymap rc-su3000 not found [ 119.697904][ T32] Registered IR keymap rc-empty [ 119.852876][ T32] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 119.975272][ T32] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 120.209931][ T5600] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.247048][ T5820] fido_id[5820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 120.537993][ T5600] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.540391][ T32] dvb-usb: schedule remote query interval to 150 msecs. [ 120.540414][ T32] dw2102: su3000_power_ctrl: 0, initialized 1 [ 120.540428][ T32] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 120.728298][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 120.728314][ T49] dw2102: i2c transfer failed. [ 120.824816][ T5832] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.859015][ T32] usb 4-1: USB disconnect, device number 2 [ 120.913663][ T5823] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.913831][ T5823] block device autoloading is deprecated and will be removed. [ 121.150955][ T151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.166956][ T5600] Bluetooth: hci1: command tx timeout [ 121.551089][ T32] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 121.653706][ T5841] gadgetfs: bound to dummy_udc driver [ 121.693256][ T5844] unchecked MSR access error: WRMSR to 0x400 (tried to write 0x0000000000000001) at rIP: 0xffffffff81705062 (__mcheck_cpu_init_prepare_banks+0x1f2/0x3d0) [ 121.693339][ T5844] Call Trace: [ 121.693349][ T5844] [ 121.693365][ T5844] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 121.693411][ T5844] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 121.693457][ T5844] mce_cpu_restart+0x11a/0x2c0 [ 121.693494][ T5844] ? __pfx_mce_cpu_restart+0x10/0x10 [ 121.693518][ T5844] smp_call_function_many_cond+0xf83/0x1500 [ 121.693538][ T5844] ? __pfx_mce_cpu_restart+0x10/0x10 [ 121.693567][ T5844] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 121.693587][ T5844] ? lockdep_hardirqs_on+0x7a/0x110 [ 121.693602][ T5844] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 121.693619][ T5844] ? __pfx_mce_cpu_restart+0x10/0x10 [ 121.693641][ T5844] on_each_cpu_cond_mask+0x3f/0x80 [ 121.693658][ T5844] set_bank+0x3a8/0x4e0 [ 121.693683][ T5844] ? __pfx_set_bank+0x10/0x10 [ 121.693706][ T5844] ? sysfs_file_kobj+0x1e4/0x230 [ 121.693731][ T5844] ? sysfs_kf_write+0x166/0x260 [ 121.693758][ T5844] ? __pfx_sysfs_kf_write+0x10/0x10 [ 121.693781][ T5844] kernfs_fop_write_iter+0x3a5/0x540 [ 121.693807][ T5844] vfs_write+0x61e/0xbb0 [ 121.693832][ T5844] ? __pfx_vfs_write+0x10/0x10 [ 121.693852][ T5844] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 121.693867][ T5844] ? lockdep_hardirqs_on+0x7a/0x110 [ 121.693884][ T5844] ? mutex_lock_nested+0x152/0x1d0 [ 121.693908][ T5844] ? fdget_pos+0x252/0x320 [ 121.693931][ T5844] ksys_write+0x156/0x270 [ 121.693951][ T5844] ? __pfx_ksys_write+0x10/0x10 [ 121.693977][ T5844] do_syscall_64+0x17b/0x530 [ 121.693993][ T5844] ? irqentry_exit+0x10f/0x8f0 [ 121.694007][ T5844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.694023][ T5844] ? clear_bhb_loop+0x40/0x90 [ 121.694042][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.694058][ T5844] RIP: 0033:0x7f83ab9ddf99 [ 121.694079][ T5844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.694092][ T5844] RSP: 002b:00007f83a9bf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.694111][ T5844] RAX: ffffffffffffffda RBX: 00007f83abc66180 RCX: 00007f83ab9ddf99 [ 121.694123][ T5844] RDX: 0000000000000002 RSI: 0000200000000480 RDI: 0000000000000003 [ 121.694132][ T5844] RBP: 00007f83aba74ec4 R08: 0000000000000000 R09: 0000000000000000 [ 121.694141][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.694150][ T5844] R13: 00007f83abc66218 R14: 00007f83abc66180 R15: 00007ffd76ff4a38 [ 121.694174][ T5844] [ 122.077617][ T5840] smpboot: CPU 1 is now offline [ 122.175820][ T5695] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 122.176132][ C0] gadgetfs: connected [ 122.176492][ T5695] gadgetfs: disconnected [ 122.247817][ T5842] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 122.302773][ T151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.941321][ T32] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.140031][ T32] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice= 1.00 [ 123.140064][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.248620][ T5600] Bluetooth: hci1: command tx timeout [ 123.383418][ T151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.670434][ T199] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.765800][ T5815] usb 3-1: USB disconnect, device number 3 [ 123.847388][ T199] usb 4-1: Using ep0 maxpacket: 8 [ 123.850292][ T199] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 123.850320][ T199] usb 4-1: config 0 has no interface number 0 [ 123.850366][ T199] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 123.850391][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.943674][ T199] usb 4-1: config 0 descriptor?? [ 124.189516][ T199] viperboard 4-1:0.143: version 0.00 found at bus 004 address 003 [ 124.314451][ T5857] dummy_hcd dummy_hcd.0: remove, state 4 [ 124.314705][ T5857] usb usb1: USB disconnect, device number 1 [ 124.586271][ T199] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 124.586304][ T199] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 125.319266][ T5871] tipc: Started in network mode [ 125.319314][ T5871] tipc: Node identity 080211, cluster identity 4711 [ 125.328094][ T5600] Bluetooth: hci1: command tx timeout [ 125.372924][ T5871] tipc: Enabled bearer , priority 0 [ 125.441044][ T5857] dummy_hcd dummy_hcd.0: stopped [ 125.441067][ T5857] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 125.548114][ T5863] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 125.548386][ T5863] dummy_hcd dummy_hcd.0: Dummy host controller [ 125.813887][ T5863] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 125.885678][ T5863] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 125.885708][ T5863] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 125.885728][ T5863] usb usb1: Product: Dummy host controller [ 125.885744][ T5863] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 125.885759][ T5863] usb usb1: SerialNumber: dummy_hcd.0 [ 125.996810][ T5682] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.166766][ T5682] usb 2-1: Using ep0 maxpacket: 8 [ 126.171796][ T5682] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.171822][ T5682] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.210335][ T5682] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.210367][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.210390][ T5682] usb 2-1: Product: syz [ 126.210405][ T5682] usb 2-1: Manufacturer: syz [ 126.210420][ T5682] usb 2-1: SerialNumber: syz [ 126.277613][ T5682] usb 2-1: skipping empty audio interface (v1) [ 126.400554][ T5863] hub 1-0:1.0: USB hub found [ 126.463382][ T5682] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 126.487927][ T5863] hub 1-0:1.0: 1 port detected [ 126.499738][ T5882] smpboot: CPU 1 is now offline [ 126.693842][ T10] usb 2-1: USB disconnect, device number 2 [ 126.798824][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.904169][ T5883] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 126.904773][ T151] bridge_slave_1: left allmulticast mode [ 126.904994][ T151] bridge_slave_1: left promiscuous mode [ 126.904994][ T151] bridge_slave_1: left promiscuous mode [ 126.905165][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 126.905184][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 126.926799][ C0] ------------[ cut here ]------------ [ 126.926809][ C0] cpu_t != t [ 126.926823][ C0] WARNING: arch/x86/kernel/cpu/mce/core.c:1770 at mce_timer_fn+0x23f/0x280, CPU#0: ktimers/0/16 [ 126.926861][ C0] Modules linked in: [ 126.926886][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.926904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.926914][ C0] RIP: 0010:mce_timer_fn+0x23f/0x280 [ 126.926938][ C0] Code: 00 75 0a e8 93 3b 55 00 e9 16 ff ff ff e8 89 3b 55 00 4c 8b 1d f2 b1 af 0c 2e 2e 2e 41 ff d3 e9 ff fe ff ff e8 72 3b 55 00 90 <0f> 0b 90 e9 33 fe ff ff e8 64 3b 55 00 48 c7 c7 a0 20 20 8e 4c 89 [ 126.926956][ C0] RSP: 0018:ffffc90000157a08 EFLAGS: 00010246 [ 126.926970][ C0] RAX: ffffffff8170683e RBX: ffff8880b87234a0 RCX: ffff88801daf8000 [ 126.926982][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 126.926991][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 126.927000][ C0] R10: dffffc0000000000 R11: ffffffff81706600 R12: 0000000000000000 [ 126.927011][ C0] R13: dffffc0000000000 R14: ffffffff8dc427d0 R15: ffff8880b87234a0 [ 126.927023][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 126.927036][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.927047][ C0] CR2: 000055976a4cb750 CR3: 000000003d338000 CR4: 00000000003526f0 [ 126.927061][ C0] Call Trace: [ 126.927067][ C0] [ 126.927077][ C0] call_timer_fn+0x192/0x5e0 [ 126.927097][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 126.927119][ C0] ? call_timer_fn+0xd4/0x5e0 [ 126.927137][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 126.927163][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.927181][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 126.927204][ C0] __run_timer_base+0x67b/0x9b0 [ 126.927231][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 126.927252][ C0] ? lock_acquire+0x115/0x350 [ 126.927285][ C0] run_timer_softirq+0x67/0x170 [ 126.927302][ C0] handle_softirqs+0x1d9/0x6c0 [ 126.927328][ C0] run_ktimerd+0x69/0x100 [ 126.927348][ C0] smpboot_thread_fn+0x57c/0xa80 [ 126.927370][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 126.927396][ C0] kthread+0x388/0x470 [ 126.927418][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.927436][ C0] ? __pfx_kthread+0x10/0x10 [ 126.927463][ C0] ret_from_fork+0x514/0xb70 [ 126.927489][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 126.927512][ C0] ? __switch_to+0xc89/0x1420 [ 126.927533][ C0] ? __pfx_kthread+0x10/0x10 [ 126.927556][ C0] ret_from_fork_asm+0x1a/0x30 [ 126.927592][ C0] [ 126.927600][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.927611][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.927628][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.927637][ C0] Call Trace: [ 126.927643][ C0] [ 126.927648][ C0] vpanic+0x56c/0xa60 [ 126.927665][ C0] ? __pfx__printk+0x10/0x10 [ 126.927685][ C0] ? __pfx_vpanic+0x10/0x10 [ 126.927699][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 126.927718][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 126.927743][ C0] panic+0xc5/0xd0 [ 126.927758][ C0] ? __pfx_panic+0x10/0x10 [ 126.927781][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 126.927807][ C0] __warn+0x315/0x4c0 [ 126.927823][ C0] ? mce_timer_fn+0x23f/0x280 [ 126.927849][ C0] ? mce_timer_fn+0x23f/0x280 [ 126.927872][ C0] __report_bug+0x276/0x570 [ 126.927891][ C0] ? mce_timer_fn+0x23f/0x280 [ 126.927916][ C0] ? __pfx___report_bug+0x10/0x10 [ 126.927932][ C0] ? register_lock_class+0x31/0x2e0 [ 126.927963][ C0] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 126.927990][ C0] ? __lock_acquire+0x6df/0x2e40 [ 126.928012][ C0] ? mce_timer_fn+0x23f/0x280 [ 126.928034][ C0] report_bug+0x16a/0x220 [ 126.928053][ C0] ? mce_timer_fn+0x23f/0x280 [ 126.928074][ C0] ? mce_timer_fn+0x241/0x280 [ 126.928096][ C0] handle_bug+0x9c/0x200 [ 126.928115][ C0] exc_invalid_op+0x1a/0x50 [ 126.928134][ C0] asm_exc_invalid_op+0x1a/0x20 [ 126.928150][ C0] RIP: 0010:mce_timer_fn+0x23f/0x280 [ 126.928175][ C0] Code: 00 75 0a e8 93 3b 55 00 e9 16 ff ff ff e8 89 3b 55 00 4c 8b 1d f2 b1 af 0c 2e 2e 2e 41 ff d3 e9 ff fe ff ff e8 72 3b 55 00 90 <0f> 0b 90 e9 33 fe ff ff e8 64 3b 55 00 48 c7 c7 a0 20 20 8e 4c 89 [ 126.928187][ C0] RSP: 0018:ffffc90000157a08 EFLAGS: 00010246 [ 126.928200][ C0] RAX: ffffffff8170683e RBX: ffff8880b87234a0 RCX: ffff88801daf8000 [ 126.928212][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 126.928222][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 126.928231][ C0] R10: dffffc0000000000 R11: ffffffff81706600 R12: 0000000000000000 [ 126.928242][ C0] R13: dffffc0000000000 R14: ffffffff8dc427d0 R15: ffff8880b87234a0 [ 126.928257][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 126.928281][ C0] ? mce_timer_fn+0x23e/0x280 [ 126.928308][ C0] ? mce_timer_fn+0x23e/0x280 [ 126.928339][ C0] call_timer_fn+0x192/0x5e0 [ 126.928357][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 126.928379][ C0] ? call_timer_fn+0xd4/0x5e0 [ 126.928396][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 126.928423][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.928439][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 126.928462][ C0] __run_timer_base+0x67b/0x9b0 [ 126.928489][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 126.928510][ C0] ? lock_acquire+0x115/0x350 [ 126.928542][ C0] run_timer_softirq+0x67/0x170 [ 126.928559][ C0] handle_softirqs+0x1d9/0x6c0 [ 126.928584][ C0] run_ktimerd+0x69/0x100 [ 126.928603][ C0] smpboot_thread_fn+0x57c/0xa80 [ 126.928625][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 126.928650][ C0] kthread+0x388/0x470 [ 126.928672][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 126.928691][ C0] ? __pfx_kthread+0x10/0x10 [ 126.928714][ C0] ret_from_fork+0x514/0xb70 [ 126.928738][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 126.928761][ C0] ? __switch_to+0xc89/0x1420 [ 126.928782][ C0] ? __pfx_kthread+0x10/0x10 [ 126.928805][ C0] ret_from_fork_asm+0x1a/0x30 [ 126.928840][ C0] [ 126.928990][ C0] Kernel Offset: disabled