last executing test programs: 1m15.658336825s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r0}, 0xc) 1m15.010112394s ago: executing program 1 (id=9): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x2000000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) 1m14.650265583s ago: executing program 1 (id=11): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xff7c, @remote}, @ib={0x1b, 0x400, 0xc, {"9804b66279aea6ff00000000000000ae"}, 0xcc, 0xc98, 0x7}}}, 0x118) 58.872496684s ago: executing program 32 (id=11): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xff7c, @remote}, @ib={0x1b, 0x400, 0xc, {"9804b66279aea6ff00000000000000ae"}, 0xcc, 0xc98, 0x7}}}, 0x118) 12.500100855s ago: executing program 3 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x39, 0x301, 0x70bd25, 0x25dfdbfd, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 8.945721608s ago: executing program 3 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='namespace0.0', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='namespace0.0', 0xc) write(r2, &(0x7f0000000280)='0', 0x1) 8.547268802s ago: executing program 0 (id=211): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0e0104100000020000000000000800"], 0x11) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 8.462591934s ago: executing program 3 (id=212): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[], 0x3f) 8.259898785s ago: executing program 0 (id=215): socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e306000000000000000000000085000000200000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r2, r1, 0x0, 0x20000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) sendfile(r2, r1, 0x0, 0x20000) sendfile(r2, r1, 0x0, 0x20000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2aa0bc7327e30102000000e32b6ae65d5002000090780000"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a84d000200601fe800000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020000907c0000080a00000002000098ca0402"], 0x0) 6.353023554s ago: executing program 0 (id=218): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 5.13941098s ago: executing program 0 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe8, &(0x7f0000000440)=""/232, 0x41000, 0x1e}, 0x94) 5.095885908s ago: executing program 3 (id=221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000140)={0x1, 0xf9, 0xffffffffffffffff, 0x1, 0xc}) 4.738406849s ago: executing program 3 (id=223): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r0, 0xf) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2231, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2}) 4.610501132s ago: executing program 0 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/102400, 0x19000) mlockall(0x2) 4.500184959s ago: executing program 4 (id=226): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x51cc, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x24, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r1, 0x80ad}], 0x1, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 4.144245934s ago: executing program 4 (id=227): socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e306000000000000000000000085000000200000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r2, r1, 0x0, 0x20000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) sendfile(r2, r1, 0x0, 0x20000) sendfile(r2, r1, 0x0, 0x20000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2aa0bc7327e30102000000e32b6ae65d5002000090780000"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a84d000200601fe800000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020000907c0000080a00000002000098ca0402"], 0x0) 4.098787705s ago: executing program 3 (id=228): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x40000, 0x0) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) 1.94178013s ago: executing program 4 (id=230): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4020744f, &(0x7f0000000040)=0x80) write(r1, &(0x7f0000000280)='{*', 0x2) 1.421344196s ago: executing program 2 (id=232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000140)={0x1, 0xf9, 0xffffffffffffffff, 0x1, 0xc}) 1.280456507s ago: executing program 0 (id=233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='10', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) userfaultfd(0x80801) io_uring_setup(0x524, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.169853347s ago: executing program 2 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe8, &(0x7f0000000440)=""/232, 0x41000, 0x1e}, 0x94) 936.708335ms ago: executing program 2 (id=235): ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x7, "c918b1", 0x1, 0x2}) 672.194409ms ago: executing program 2 (id=236): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x51cc, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x24, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r1, 0x80ad}], 0x1, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 672.039624ms ago: executing program 4 (id=237): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r0, 0xf) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2231, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x2, r2}) 527.453856ms ago: executing program 2 (id=238): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, 0x0, 0x0) setuid(0xee01) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) 346.529977ms ago: executing program 4 (id=239): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000000001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e8467"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) 290.472043ms ago: executing program 2 (id=240): socket$kcm(0x10, 0x2, 0x10) r0 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 82.213729][ T5594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.240358][ T5594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.254664][ T5594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.255421][ T5594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.259395][ T5595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.259886][ T5595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.263359][ T5594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.295066][ T5595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.298687][ T5595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.299446][ T5595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.301755][ T5595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.305036][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.333295][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.334805][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.467637][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.500556][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.547139][ T5595] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.561920][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.562107][ T5600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.586418][ T4900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.588538][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.599686][ T5600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.600972][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.603549][ T5600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.423476][ T59] Bluetooth: hci1: command tx timeout [ 84.591290][ T59] Bluetooth: hci4: command tx timeout [ 84.591854][ T59] Bluetooth: hci0: command tx timeout [ 84.662168][ T5594] Bluetooth: hci2: command tx timeout [ 84.671484][ T5594] Bluetooth: hci3: command tx timeout [ 84.970522][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.973041][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.973245][ T5583] bridge_slave_0: entered allmulticast mode [ 84.975804][ T5583] bridge_slave_0: entered promiscuous mode [ 85.037610][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.037678][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.037797][ T5583] bridge_slave_1: entered allmulticast mode [ 85.039322][ T5583] bridge_slave_1: entered promiscuous mode [ 85.074686][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.074854][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.075006][ T5582] bridge_slave_0: entered allmulticast mode [ 85.076585][ T5582] bridge_slave_0: entered promiscuous mode [ 85.119929][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.120037][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.120143][ T5586] bridge_slave_0: entered allmulticast mode [ 85.125168][ T5586] bridge_slave_0: entered promiscuous mode [ 85.129291][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.129413][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.129559][ T5585] bridge_slave_0: entered allmulticast mode [ 85.135635][ T5585] bridge_slave_0: entered promiscuous mode [ 85.139885][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.140009][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.140491][ T5582] bridge_slave_1: entered allmulticast mode [ 85.144252][ T5582] bridge_slave_1: entered promiscuous mode [ 85.190509][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.190622][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.191087][ T5586] bridge_slave_1: entered allmulticast mode [ 85.199008][ T5586] bridge_slave_1: entered promiscuous mode [ 85.205256][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.205369][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.205933][ T5585] bridge_slave_1: entered allmulticast mode [ 85.208847][ T5585] bridge_slave_1: entered promiscuous mode [ 85.255133][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.255223][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.255365][ T5584] bridge_slave_0: entered allmulticast mode [ 85.256820][ T5584] bridge_slave_0: entered promiscuous mode [ 85.282534][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.325149][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.325264][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.325411][ T5584] bridge_slave_1: entered allmulticast mode [ 85.327254][ T5584] bridge_slave_1: entered promiscuous mode [ 85.330030][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.438248][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.469889][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.483564][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.486552][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.538216][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.552543][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.575293][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.577946][ T5583] team0: Port device team_slave_0 added [ 85.627359][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.628999][ T5583] team0: Port device team_slave_1 added [ 85.684597][ T5582] team0: Port device team_slave_0 added [ 85.716955][ T5586] team0: Port device team_slave_0 added [ 85.718937][ T5585] team0: Port device team_slave_0 added [ 85.720851][ T5582] team0: Port device team_slave_1 added [ 85.766457][ T5586] team0: Port device team_slave_1 added [ 85.768071][ T5585] team0: Port device team_slave_1 added [ 85.789715][ T5584] team0: Port device team_slave_0 added [ 85.798732][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.798748][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.798772][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.874899][ T5584] team0: Port device team_slave_1 added [ 85.875486][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.875498][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.875514][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.912196][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.912213][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.912237][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.952256][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.952273][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.952305][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.953823][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.953835][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.953857][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.959287][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.959303][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.959327][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.996841][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.996857][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.996882][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.999515][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.999530][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.999554][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.019704][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.019719][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.019741][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.085149][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.085165][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.085189][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.166427][ T5583] hsr_slave_0: entered promiscuous mode [ 86.168020][ T5583] hsr_slave_1: entered promiscuous mode [ 86.257094][ T5582] hsr_slave_0: entered promiscuous mode [ 86.258351][ T5582] hsr_slave_1: entered promiscuous mode [ 86.259893][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 86.260015][ T5582] Cannot create hsr debugfs directory [ 86.335816][ T5586] hsr_slave_0: entered promiscuous mode [ 86.336633][ T5586] hsr_slave_1: entered promiscuous mode [ 86.337196][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 86.337213][ T5586] Cannot create hsr debugfs directory [ 86.361402][ T5585] hsr_slave_0: entered promiscuous mode [ 86.362790][ T5585] hsr_slave_1: entered promiscuous mode [ 86.363668][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 86.363691][ T5585] Cannot create hsr debugfs directory [ 86.511417][ T5594] Bluetooth: hci1: command tx timeout [ 86.661359][ T5594] Bluetooth: hci0: command tx timeout [ 86.661367][ T59] Bluetooth: hci4: command tx timeout [ 86.742574][ T59] Bluetooth: hci3: command tx timeout [ 86.742586][ T5594] Bluetooth: hci2: command tx timeout [ 86.856293][ T31] cfg80211: failed to load regulatory.db [ 86.860978][ T5584] hsr_slave_0: entered promiscuous mode [ 86.866296][ T5584] hsr_slave_1: entered promiscuous mode [ 86.867333][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 86.867355][ T5584] Cannot create hsr debugfs directory [ 87.576236][ T5583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.626261][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.640168][ T5583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.675690][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.680281][ T5583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.715779][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.740864][ T5583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.782449][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.904138][ T5586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.936900][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.953816][ T5586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.998005][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.009525][ T5586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.041037][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.063095][ T5586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.098569][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.245624][ T5585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.276741][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.287980][ T5585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.315232][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.322391][ T5585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.340465][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.377279][ T5585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.414347][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.543017][ T5584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.574213][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.581785][ T59] Bluetooth: hci1: command tx timeout [ 88.594336][ T5584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.624821][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.639924][ T5584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.664846][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.695732][ T5584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.724314][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.744896][ T59] Bluetooth: hci0: command tx timeout [ 88.744927][ T5594] Bluetooth: hci4: command tx timeout [ 88.768376][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.821746][ T59] Bluetooth: hci2: command tx timeout [ 88.833758][ T59] Bluetooth: hci3: command tx timeout [ 88.910352][ T5582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.948906][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.955394][ T5582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.994417][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.996417][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.004058][ T5582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.033876][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.040425][ T5582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.097231][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.130770][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.132396][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.183547][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.186700][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.186822][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.307840][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.354902][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.355397][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.376561][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.409885][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.409984][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.509984][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.558107][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.565732][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.638010][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.656346][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.656452][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.860368][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.894286][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.929562][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.929685][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.986752][ T3390] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.986915][ T3390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.115615][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.219821][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.219938][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.330458][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.330655][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.634981][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.661381][ T59] Bluetooth: hci1: command tx timeout [ 90.821494][ T59] Bluetooth: hci4: command tx timeout [ 90.821525][ T59] Bluetooth: hci0: command tx timeout [ 90.902791][ T5594] Bluetooth: hci3: command tx timeout [ 90.902825][ T5594] Bluetooth: hci2: command tx timeout [ 91.289766][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.607397][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.765443][ T5586] veth0_vlan: entered promiscuous mode [ 91.826986][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.827542][ T5583] veth0_vlan: entered promiscuous mode [ 91.855658][ T5586] veth1_vlan: entered promiscuous mode [ 91.917566][ T5583] veth1_vlan: entered promiscuous mode [ 91.985625][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.002667][ T5585] veth0_vlan: entered promiscuous mode [ 92.070079][ T5585] veth1_vlan: entered promiscuous mode [ 92.074624][ T5586] veth0_macvtap: entered promiscuous mode [ 92.123394][ T5586] veth1_macvtap: entered promiscuous mode [ 92.127478][ T5583] veth0_macvtap: entered promiscuous mode [ 92.141530][ T5584] veth0_vlan: entered promiscuous mode [ 92.166694][ T5583] veth1_macvtap: entered promiscuous mode [ 92.215622][ T5584] veth1_vlan: entered promiscuous mode [ 92.236467][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.276405][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.280564][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.284048][ T5582] veth0_vlan: entered promiscuous mode [ 92.307677][ T5585] veth0_macvtap: entered promiscuous mode [ 92.334566][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.340229][ T5585] veth1_macvtap: entered promiscuous mode [ 92.397152][ T5582] veth1_vlan: entered promiscuous mode [ 92.546227][ T5584] veth0_macvtap: entered promiscuous mode [ 92.599677][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.626287][ T5584] veth1_macvtap: entered promiscuous mode [ 92.768030][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.084774][ T5582] veth0_macvtap: entered promiscuous mode [ 93.094571][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.118992][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.119016][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.220737][ T5582] veth1_macvtap: entered promiscuous mode [ 93.235631][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.342925][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.342945][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.651081][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.685888][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.685909][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.809604][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.966501][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.966520][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.117466][ T3365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.117486][ T3365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.671070][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.671089][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.841291][ T3390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.841312][ T3390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.262138][ T3365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.262158][ T3365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.212153][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.212197][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.513861][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.513880][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.582137][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.583810][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.584926][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.585728][ T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.586146][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.586477][ T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.586661][ T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.587061][ T66] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.587275][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.587491][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.587681][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.588059][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.918813][ T3390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919097][ T3390] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919277][ T3390] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919711][ T3390] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.920110][ T3390] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.920329][ T3390] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.422641][ T3390] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.861841][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.164701][ T5817] futex_wake_op: syz.2.3 tries to shift op by 144; fix this program [ 98.429684][ T5598] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.446883][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 98.934630][ T5598] usb 2-1: device descriptor read/64, error -32 [ 99.401523][ T5598] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.686821][ T5598] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.779033][ T5598] usb 2-1: config 0 has no interfaces? [ 99.779074][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.179735][ T5598] usb 2-1: config 0 descriptor?? [ 101.360713][ T5809] infiniband syz0: set down [ 101.360735][ T5809] infiniband syz0: added ipvlan0 [ 101.667681][ T5852] futex_wake_op: syz.2.26 tries to shift op by 144; fix this program [ 101.727641][ T5809] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 101.776161][ T5809] infiniband syz0: Couldn't open port 1 [ 101.777208][ T5809] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 101.777238][ T5809] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 101.777270][ T5809] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 102.138490][ T5809] RDS/IB: syz0: added [ 102.171794][ T5809] smc: adding ib device syz0 with port count 1 [ 102.172003][ T5809] smc: ib device syz0 port 1 has no pnetid [ 103.937755][ T5887] futex_wake_op: syz.4.37 tries to shift op by 144; fix this program [ 106.371175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.401177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.411160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.471187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.491186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.501183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.511190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.571203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.581174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.591175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.597356][ T5918] futex_wake_op: syz.2.49 tries to shift op by 144; fix this program [ 109.738459][ T5921] hsr0: entered allmulticast mode [ 109.738481][ T5921] hsr_slave_0: entered allmulticast mode [ 109.738507][ T5921] hsr_slave_1: entered allmulticast mode [ 109.740053][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 109.789215][ T5921] hsr_slave_0: left promiscuous mode [ 109.835527][ T5921] hsr_slave_1: left promiscuous mode [ 109.933808][ T5921] hsr0 (unregistering): left allmulticast mode [ 113.940914][ T5594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.976705][ T5594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.980155][ T5594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.003299][ T5594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.004658][ T5594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.101303][ T5594] Bluetooth: hci5: command tx timeout [ 118.182938][ T5594] Bluetooth: hci5: command tx timeout [ 120.024001][ T5704] usb 2-1: USB disconnect, device number 3 [ 120.310227][ T5594] Bluetooth: hci5: command tx timeout [ 122.344139][ T5594] Bluetooth: hci5: command tx timeout [ 125.971734][ T3365] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.169705][ T3365] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.490682][ T3365] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.681047][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.690171][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.690402][ T5959] bridge_slave_0: entered allmulticast mode [ 130.709420][ T5959] bridge_slave_0: entered promiscuous mode [ 131.007718][ T3365] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.133553][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.135053][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.135290][ T5959] bridge_slave_1: entered allmulticast mode [ 131.167220][ T5959] bridge_slave_1: entered promiscuous mode [ 131.572375][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.789454][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.032572][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.032666][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.362243][ T5959] team0: Port device team_slave_0 added [ 135.621588][ T5959] team0: Port device team_slave_1 added [ 137.349709][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.349725][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.349748][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.590269][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.590284][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.590309][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.207608][ T6137] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 138.207648][ T6137] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 138.207700][ T6137] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 138.308785][ T6137] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 138.501863][ T6137] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 138.875485][ T6149] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 138.973947][ T3365] bridge_slave_1: left allmulticast mode [ 138.974092][ T3365] bridge_slave_1: left promiscuous mode [ 138.999132][ T3365] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.207251][ T3365] bridge_slave_0: left allmulticast mode [ 139.207288][ T3365] bridge_slave_0: left promiscuous mode [ 139.207651][ T3365] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.316878][ T6151] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.644614][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 146.362094][ T3365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.414459][ T3365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.460378][ T3365] bond0 (unregistering): Released all slaves [ 147.577308][ T6205] udc dummy_udc.0: failed to start g1: -4 [ 147.577338][ T6205] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4 [ 147.701013][ T6205] UDC core: g1: couldn't find an available UDC or it's busy [ 147.731665][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 147.749429][ T6207] UDC core: g1: couldn't find an available UDC or it's busy [ 148.160044][ T5959] hsr_slave_0: entered promiscuous mode [ 148.186774][ T5959] hsr_slave_1: entered promiscuous mode [ 148.207806][ T5959] debugfs: 'hsr0' already exists in 'hsr' [ 148.207833][ T5959] Cannot create hsr debugfs directory [ 148.308120][ T6216] tipc: Started in network mode [ 148.308154][ T6216] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 148.308800][ T6216] tipc: Enabled bearer , priority 0 [ 149.493623][ T5598] tipc: Node number set to 43690 [ 152.831897][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 156.051268][ T5712] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 156.094895][ T6353] capability: warning: `syz.2.173' uses deprecated v2 capabilities in a way that may be insecure [ 156.138198][ T6353] program syz.2.173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.239679][ T5712] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 156.251991][ T5712] usb 4-1: config index 0 descriptor too short (expected 28434, got 18) [ 156.252016][ T5712] usb 4-1: config 121 has too many interfaces: 114, using maximum allowed: 32 [ 156.252034][ T5712] usb 4-1: config 121 has an invalid descriptor of length 109, skipping remainder of the config [ 156.252051][ T5712] usb 4-1: config 121 has 0 interfaces, different from the descriptor's value: 114 [ 156.257149][ T5712] usb 4-1: config index 1 descriptor too short (expected 28434, got 18) [ 156.257185][ T5712] usb 4-1: config 121 has too many interfaces: 114, using maximum allowed: 32 [ 156.257204][ T5712] usb 4-1: config 121 has an invalid descriptor of length 109, skipping remainder of the config [ 156.257221][ T5712] usb 4-1: config 121 has 0 interfaces, different from the descriptor's value: 114 [ 156.258328][ T5712] usb 4-1: config index 2 descriptor too short (expected 28434, got 18) [ 156.258352][ T5712] usb 4-1: config 121 has too many interfaces: 114, using maximum allowed: 32 [ 156.258369][ T5712] usb 4-1: config 121 has an invalid descriptor of length 109, skipping remainder of the config [ 156.258387][ T5712] usb 4-1: config 121 has 0 interfaces, different from the descriptor's value: 114 [ 156.270699][ T6359] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 156.299969][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 156.299996][ T5712] usb 4-1: Product: syz [ 156.300009][ T5712] usb 4-1: Manufacturer: syz [ 156.300023][ T5712] usb 4-1: SerialNumber: syz [ 156.937768][ T5959] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.233175][ T5959] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 158.245919][ T5959] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.280114][ T5712] usb 4-1: USB disconnect, device number 2 [ 158.572442][ T5959] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 158.577837][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 158.580554][ T5959] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.754087][ T5959] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 158.762028][ T5959] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.936420][ T5959] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.393788][ T3365] hsr_slave_0: left promiscuous mode [ 159.432649][ T3365] hsr_slave_1: left promiscuous mode [ 159.490220][ T3365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.490333][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.549341][ T3365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.549369][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.119102][ T3365] veth1_macvtap: left promiscuous mode [ 160.119386][ T3365] veth0_macvtap: left promiscuous mode [ 160.134887][ T3365] veth1_vlan: left promiscuous mode [ 160.156758][ T3365] veth0_vlan: left promiscuous mode [ 160.195414][ T6416] Bluetooth: MGMT ver 1.23 [ 160.515657][ T6426] binder: 6425:6426 ioctl c0306201 0 returned -14 [ 160.832532][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 161.240732][ T6432] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.970487][ T3390] smc: removing ib device syz0 [ 162.117716][ T6457] binder: 6456:6457 ioctl c0306201 0 returned -14 [ 162.752153][ T3365] team0 (unregistering): Port device team_slave_1 removed [ 162.911791][ T3365] team0 (unregistering): Port device team_slave_0 removed [ 163.234155][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 163.248505][ T6463] bridge0: port 3(syz_tun) entered blocking state [ 163.253790][ T6463] bridge0: port 3(syz_tun) entered disabled state [ 163.254400][ T6463] syz_tun: entered allmulticast mode [ 163.522961][ T6463] syz_tun: entered promiscuous mode [ 163.650917][ T6463] bridge0: port 3(syz_tun) entered blocking state [ 163.651235][ T6463] bridge0: port 3(syz_tun) entered forwarding state [ 163.736192][ T3390] smbdirect: ib_dev[syz0] removed [ 165.091736][ T6487] binder: 6484:6487 ioctl c0306201 0 returned -14 [ 165.128089][ T6486] jffs2: notice: (6486) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 165.534616][ T6496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.670662][ T6480] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 167.329549][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.800079][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.850693][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.850879][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.902612][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.954553][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.871507][ T6516] syz.2.222 (6516) used greatest stack depth: 19736 bytes left [ 169.063793][ T6538] jffs2: notice: (6538) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 171.477190][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4 [ 172.127677][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.274418][ T6593] ================================================================== [ 172.274436][ T6593] BUG: KASA[ 172.274436][ T6593] BUG: KASAN: slab-use-after-free in pn_bind+0x106/0xb20 [ 172.274489][ T6593] Write of size 8 at addr ffff8880348bc900 by task syz.4.241/6593 [ 172.274506][ T6593] [ 172.274531][ T6593] CPU: 0 UID: 0 PID: 6593 Comm: syz.4.241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 172.274562][ T6593] Tainted: [L]=SOFTLOCKUP [ 172.274570][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.274589][ T6593] Call Trace: [ 172.274597][ T6593] [ 172.274606][ T6593] dump_stack_lvl+0xe8/0x150 [ 172.274635][ T6593] print_address_description+0x55/0x1e0 [ 172.274660][ T6593] ? pn_bind+0x106/0xb20 [ 172.274682][ T6593] print_report+0x58/0x70 [ 172.274703][ T6593] kasan_report+0x117/0x150 [ 172.274721][ T6593] ? pn_bind+0x106/0xb20 [ 172.274746][ T6593] pn_bind+0x106/0xb20 [ 172.274773][ T6593] usb_add_function+0x290/0x930 [ 172.274792][ T6593] ? check_remote_wakeup_config+0x58/0x1c0 [ 172.274814][ T6593] configfs_composite_bind+0xde0/0x1410 [ 172.274839][ T6593] ? __pfx_configfs_composite_bind+0x10/0x10 [ 172.274858][ T6593] gadget_bind_driver+0x2ca/0x9e0 [ 172.274887][ T6593] ? __pfx_gadget_bind_driver+0x10/0x10 [ 172.274911][ T6593] really_probe+0x254/0xae0 [ 172.274935][ T6593] __driver_probe_device+0x1e8/0x360 [ 172.274960][ T6593] driver_probe_device+0x4f/0x240 [ 172.274983][ T6593] __driver_attach+0x339/0x600 [ 172.275008][ T6593] bus_for_each_dev+0x23e/0x2c0 [ 172.275032][ T6593] ? __pfx___driver_attach+0x10/0x10 [ 172.275055][ T6593] ? __pfx_bus_for_each_dev+0x10/0x10 [ 172.275075][ T6593] ? rt_spin_unlock+0x163/0x200 [ 172.275100][ T6593] bus_add_driver+0x348/0x670 [ 172.275121][ T6593] driver_register+0x23a/0x320 [ 172.275149][ T6593] usb_gadget_register_driver_owner+0xf9/0x270 [ 172.275176][ T6593] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 172.275204][ T6593] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 172.275231][ T6593] configfs_write_iter+0x33a/0x430 [ 172.275255][ T6593] vfs_write+0x61e/0xbb0 [ 172.275279][ T6593] ? __pfx_vfs_write+0x10/0x10 [ 172.275302][ T6593] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 172.275329][ T6593] ? lockdep_hardirqs_on+0x7a/0x110 [ 172.275358][ T6593] ? mutex_lock_nested+0x152/0x1d0 [ 172.275378][ T6593] ? fdget_pos+0x252/0x320 [ 172.275398][ T6593] ksys_write+0x156/0x270 [ 172.275421][ T6593] ? __pfx_ksys_write+0x10/0x10 [ 172.275445][ T6593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.275465][ T6593] do_syscall_64+0x174/0x580 [ 172.275500][ T6593] ? trace_irq_disable+0x3b/0x140 [ 172.275529][ T6593] ? clear_bhb_loop+0x70/0xc0 [ 172.275551][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.275575][ T6593] RIP: 0033:0x7f6f35dee0d9 [ 172.275602][ T6593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.275618][ T6593] RSP: 002b:00007f6f34046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.275647][ T6593] RAX: ffffffffffffffda RBX: 00007f6f36075fa0 RCX: 00007f6f35dee0d9 [ 172.275666][ T6593] RDX: 000000000000000b RSI: 0000200000000280 RDI: 0000000000000003 [ 172.275679][ T6593] RBP: 00007f6f35e85024 R08: 0000000000000000 R09: 0000000000000000 [ 172.275691][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.275704][ T6593] R13: 00007f6f36076038 R14: 00007f6f36075fa0 R15: 00007ffc080c2f18 [ 172.275726][ T6593] [ 172.275734][ T6593] [ 172.275738][ T6593] Allocated by task 6205: [ 172.275747][ T6593] kasan_save_track+0x3e/0x80 [ 172.275774][ T6593] __kasan_kmalloc+0x93/0xb0 [ 172.275790][ T6593] __kvmalloc_node_noprof+0x5be/0x8a0 [ 172.275809][ T6593] alloc_netdev_mqs+0xa9/0x12c0 [ 172.275832][ T6593] phonet_alloc_inst+0xa4/0x190 [ 172.275854][ T6593] usb_get_function_instance+0xe3/0x2f0 [ 172.275874][ T6593] function_make+0x127/0x360 [ 172.275897][ T6593] configfs_mkdir+0x4f6/0x9e0 [ 172.275916][ T6593] vfs_mkdir+0x402/0x620 [ 172.275935][ T6593] filename_mkdirat+0x289/0x520 [ 172.275954][ T6593] __se_sys_mkdirat+0x35/0x150 [ 172.275974][ T6593] do_syscall_64+0x174/0x580 [ 172.275996][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.276011][ T6593] [ 172.276015][ T6593] Freed by task 6205: [ 172.276023][ T6593] kasan_save_track+0x3e/0x80 [ 172.276048][ T6593] kasan_save_free_info+0x40/0x50 [ 172.276069][ T6593] __kasan_slab_free+0x5c/0x80 [ 172.276082][ T6593] kfree+0x1c5/0x6c0 [ 172.276105][ T6593] pn_bind+0x131/0xb20 [ 172.276125][ T6593] usb_add_function+0x290/0x930 [ 172.276140][ T6593] configfs_composite_bind+0xde0/0x1410 [ 172.276155][ T6593] gadget_bind_driver+0x2ca/0x9e0 [ 172.276175][ T6593] really_probe+0x254/0xae0 [ 172.276195][ T6593] __driver_probe_device+0x1e8/0x360 [ 172.276216][ T6593] driver_probe_device+0x4f/0x240 [ 172.276240][ T6593] __driver_attach+0x339/0x600 [ 172.276262][ T6593] bus_for_each_dev+0x23e/0x2c0 [ 172.276278][ T6593] bus_add_driver+0x348/0x670 [ 172.276295][ T6593] driver_register+0x23a/0x320 [ 172.276319][ T6593] usb_gadget_register_driver_owner+0xf9/0x270 [ 172.276344][ T6593] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 172.276369][ T6593] configfs_write_iter+0x33a/0x430 [ 172.276388][ T6593] vfs_write+0x61e/0xbb0 [ 172.276407][ T6593] ksys_write+0x156/0x270 [ 172.276426][ T6593] do_syscall_64+0x174/0x580 [ 172.276451][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.276468][ T6593] [ 172.276473][ T6593] The buggy address belongs to the object at ffff8880348bc000 [ 172.276473][ T6593] which belongs to the cache kmalloc-cg-8k of size 8192 [ 172.276499][ T6593] The buggy address is located 2304 bytes inside of [ 172.276499][ T6593] freed 8192-byte region [ffff8880348bc000, ffff8880348be000) [ 172.276520][ T6593] [ 172.276525][ T6593] The buggy address belongs to the physical page: [ 172.276554][ T6593] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880348bc000 pfn:0x348b8 [ 172.276574][ T6593] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 172.276589][ T6593] memcg:ffff8880348ba011 [ 172.276599][ T6593] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 172.276620][ T6593] page_type: f5(slab) [ 172.276638][ T6593] raw: 0080000000000240 ffff88813ffbb640 ffffea0000a55610 ffffea0000e86210 [ 172.276656][ T6593] raw: ffff8880348bc000 0000400000020001 00000000f5000000 ffff8880348ba011 [ 172.276675][ T6593] head: 0080000000000240 ffff88813ffbb640 ffffea0000a55610 ffffea0000e86210 [ 172.276693][ T6593] head: ffff8880348bc000 0000400000020001 00000000f5000000 ffff8880348ba011 [ 172.276710][ T6593] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 172.276727][ T6593] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 172.276737][ T6593] page dumped because: kasan: bad access detected [ 172.276750][ T6593] page_owner tracks the page as allocated [ 172.276757][ T6593] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5959, tgid 5959 (syz-executor), ts 136319238079, free_ts 135895947430 [ 172.276791][ T6593] post_alloc_hook+0x1f9/0x250 [ 172.276817][ T6593] get_page_from_freelist+0x262a/0x26a0 [ 172.276837][ T6593] __alloc_frozen_pages_noprof+0x18d/0x380 [ 172.276856][ T6593] allocate_slab+0x79/0x5e0 [ 172.276877][ T6593] refill_objects+0x2d8/0x350 [ 172.276899][ T6593] __pcs_replace_empty_main+0x330/0x690 [ 172.276921][ T6593] __kvmalloc_node_noprof+0x703/0x8a0 [ 172.276939][ T6593] alloc_netdev_mqs+0xa9/0x12c0 [ 172.276962][ T6593] rtnl_create_link+0x321/0xd70 [ 172.276985][ T6593] rtnl_newlink_create+0x25f/0xb00 [ 172.277005][ T6593] rtnl_newlink+0x167f/0x1bd0 [ 172.277021][ T6593] rtnetlink_rcv_msg+0x802/0xc00 [ 172.277037][ T6593] netlink_rcv_skb+0x226/0x4a0 [ 172.277057][ T6593] netlink_unicast+0x7f5/0x990 [ 172.277074][ T6593] netlink_sendmsg+0x813/0xb40 [ 172.277094][ T6593] sock_sendmsg_nosec+0x13a/0x180 [ 172.277119][ T6593] page last free pid 3365 tgid 3365 stack trace: [ 172.277130][ T6593] __free_frozen_pages+0x10e7/0x11c0 [ 172.277158][ T6593] __slab_free+0x252/0x2a0 [ 172.277174][ T6593] qlist_free_all+0x99/0x100 [ 172.277199][ T6593] kasan_quarantine_reduce+0x148/0x160 [ 172.277225][ T6593] __kasan_slab_alloc+0x22/0x80 [ 172.277241][ T6593] __kmalloc_cache_noprof+0x351/0x6b0 [ 172.277258][ T6593] ref_tracker_alloc+0x15e/0x4c0 [ 172.277284][ T6593] neigh_parms_alloc+0x1ee/0x530 [ 172.277299][ T6593] inetdev_init+0x117/0x4d0 [ 172.277324][ T6593] inetdev_event+0x307/0x15e0 [ 172.277350][ T6593] notifier_call_chain+0x1a5/0x3d0 [ 172.277373][ T6593] register_netdevice+0x18c0/0x1ed0 [ 172.277394][ T6593] nsim_create+0xbe9/0x1160 [ 172.277419][ T6593] __nsim_dev_port_add+0x7f8/0xcd0 [ 172.277436][ T6593] nsim_dev_port_add_all+0x37/0xf0 [ 172.277453][ T6593] nsim_dev_reload_up+0x4dd/0x880 [ 172.277472][ T6593] [ 172.277483][ T6593] Memory state around the buggy address: [ 172.277493][ T6593] ffff8880348bc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.277506][ T6593] ffff8880348bc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.277519][ T6593] >ffff8880348bc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.277529][ T6593] ^ [ 172.277539][ T6593] ffff8880348bc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.277552][ T6593] ffff8880348bca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.277561][ T6593] ================================================================== [ 172.291416][ T6593] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 172.291439][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.4.241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 172.291470][ T6593] Tainted: [L]=SOFTLOCKUP [ 172.291478][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.291490][ T6593] Call Trace: [ 172.291498][ T6593] [ 172.291506][ T6593] vpanic+0x56c/0xa60 [ 172.291540][ T6593] ? rcu_is_watching+0x15/0xb0 [ 172.291563][ T6593] ? __pfx_vpanic+0x10/0x10 [ 172.291594][ T6593] panic+0xc5/0xd0 [ 172.291620][ T6593] ? __pfx_panic+0x10/0x10 [ 172.291647][ T6593] ? preempt_schedule_thunk+0x16/0x40 [ 172.291670][ T6593] ? pn_bind+0x106/0xb20 [ 172.291693][ T6593] ? preempt_schedule_thunk+0x16/0x40 [ 172.291714][ T6593] ? pn_bind+0x106/0xb20 [ 172.291736][ T6593] check_panic_on_warn+0x89/0xb0 [ 172.291763][ T6593] ? pn_bind+0x106/0xb20 [ 172.291786][ T6593] end_report+0x73/0x170 [ 172.291806][ T6593] ? pn_bind+0x106/0xb20 [ 172.291828][ T6593] kasan_report+0x128/0x150 [ 172.291848][ T6593] ? pn_bind+0x106/0xb20 [ 172.291874][ T6593] pn_bind+0x106/0xb20 [ 172.291899][ T6593] usb_add_function+0x290/0x930 [ 172.291920][ T6593] ? check_remote_wakeup_config+0x58/0x1c0 [ 172.291940][ T6593] configfs_composite_bind+0xde0/0x1410 [ 172.291965][ T6593] ? __pfx_configfs_composite_bind+0x10/0x10 [ 172.291992][ T6593] gadget_bind_driver+0x2ca/0x9e0 [ 172.292033][ T6593] ? __pfx_gadget_bind_driver+0x10/0x10 [ 172.292057][ T6593] really_probe+0x254/0xae0 [ 172.292085][ T6593] __driver_probe_device+0x1e8/0x360 [ 172.292110][ T6593] driver_probe_device+0x4f/0x240 [ 172.292135][ T6593] __driver_attach+0x339/0x600 [ 172.292159][ T6593] bus_for_each_dev+0x23e/0x2c0 [ 172.292177][ T6593] ? __pfx___driver_attach+0x10/0x10 [ 172.292200][ T6593] ? __pfx_bus_for_each_dev+0x10/0x10 [ 172.292220][ T6593] ? rt_spin_unlock+0x163/0x200 [ 172.292243][ T6593] bus_add_driver+0x348/0x670 [ 172.292263][ T6593] driver_register+0x23a/0x320 [ 172.292290][ T6593] usb_gadget_register_driver_owner+0xf9/0x270 [ 172.292318][ T6593] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 172.292344][ T6593] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 172.292371][ T6593] configfs_write_iter+0x33a/0x430 [ 172.292395][ T6593] vfs_write+0x61e/0xbb0 [ 172.292419][ T6593] ? __pfx_vfs_write+0x10/0x10 [ 172.292442][ T6593] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 172.292469][ T6593] ? lockdep_hardirqs_on+0x7a/0x110 [ 172.292497][ T6593] ? mutex_lock_nested+0x152/0x1d0 [ 172.292517][ T6593] ? fdget_pos+0x252/0x320 [ 172.292538][ T6593] ksys_write+0x156/0x270 [ 172.292560][ T6593] ? __pfx_ksys_write+0x10/0x10 [ 172.292584][ T6593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.292604][ T6593] do_syscall_64+0x174/0x580 [ 172.292631][ T6593] ? trace_irq_disable+0x3b/0x140 [ 172.292658][ T6593] ? clear_bhb_loop+0x70/0xc0 [ 172.292678][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.292697][ T6593] RIP: 0033:0x7f6f35dee0d9 [ 172.292714][ T6593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.292730][ T6593] RSP: 002b:00007f6f34046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.292751][ T6593] RAX: ffffffffffffffda RBX: 00007f6f36075fa0 RCX: 00007f6f35dee0d9 [ 172.292765][ T6593] RDX: 000000000000000b RSI: 0000200000000280 RDI: 0000000000000003 [ 172.292777][ T6593] RBP: 00007f6f35e85024 R08: 0000000000000000 R09: 0000000000000000 [ 172.292789][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.292802][ T6593] R13: 00007f6f36076038 R14: 00007f6f36075fa0 R15: 00007ffc080c2f18 [ 172.292824][ T6593] [ 172.292971][ T6593] Kernel Offset: disabled