last executing test programs: 10m55.078409371s ago: executing program 1 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @remote, 0x6}, 0x1c) getsockopt$inet6_buf(r5, 0x29, 0x18, 0x0, &(0x7f0000000040)) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2450100140000fb727affa3f9d64600000029907800000000ffffffffb9e28c6a534377fa69774f78dc08ad38829b10638f777d8d26a58288f6513b4485b5653af705955e054433e53b0f94bc663f98deb244dcc384fa7e32b8c4ec45aa8ffede6e170ebe2372b4a1414f9e399c62919b26f6b1b37974bb8923f5d4643792e8adcc7221e07fe40dd377"], 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) write(r6, &(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) waitid(0x2, r2, &(0x7f00000000c0), 0x1, &(0x7f0000000500)) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x800) ioctl$int_in(r7, 0x5452, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 10m53.206851229s ago: executing program 1 (id=8): syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @pix={0x5, 0x3, 0x20303159, 0x0, 0x2000001, 0x0, 0x9, 0x1, 0x0, 0x8, 0x610eb8e02ceafee, 0x6}}) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) socket(0x10, 0x1, 0x200) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x2010002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) socket$rds(0x15, 0x5, 0x0) r2 = syz_io_uring_setup(0xf05, &(0x7f0000000940)={0x0, 0x595e, 0x80, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000), &(0x7f0000000080)) syz_io_uring_submit(r3, r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITEV_FIXED={0x3d, 0x1, 0x4007, @fd_index, 0x1, &(0x7f0000000880)=[{&(0x7f00000001c0)="e8433b303c1ec8266f355d53abd88a917975c4520b59b77a6226e2f6034b547b1fe829", 0x23}, {&(0x7f0000000480)="6b3f673408b7dd75a5eb4c26f1020b5e213289a6a234ecaf269f6cef2fc718370464ad6530b1af97a75e9375fad1bd2411d7c819feda5c414247fa11f21086a9cd422f411393276f2f18cee3f7e88b890e2781622fb3605fabdcdef238b004be5fd565e18a93b49b27a1e6d6be247af68a4bbbe428161f494d2cedde1d3b303041407fd7e4285944ca033ff06c3359286615", 0x92}, {&(0x7f0000000540)="d41a3edbecdac01ba94f60fce5953e9f40c4135429e3e0c28bae79fbb74cb9958dfc40984b1f9a5cc211cfffdfcfad38174b308274714636f4", 0x39}, {&(0x7f00000005c0)="9542dabd81ef2aa1ed32c52f98d105a0941d2219662631ffe40bd905dec85a57abe3e528ea483e9c07be681de08e13c3ee177ef9314569165021730c8eaf9cfde20d93e3482ca9d4d27578a7e1c6322cffe86b0b7fdd6a38c9e7911d913df290f2c80c9718a8a4e4c18543dd416f14dd2049163c226b70d64fb1f6a717f4ae941eb2dbd68f00ce7d732507e0ae2e75eba040f592e8946018c63d2ebea9355547f05ead30dd1d88ab78cbd7426cee5f4c96b2031c23b29a8b40c4de371982664df890", 0xc2}, {&(0x7f00000026c0)}, {&(0x7f0000002480)="5e200fae4923488f355cc0d26c4deddf75ce93ea9718fc4e43c972d7aab4e8bbb97dc26e410f02c6975539cea3b265a7cbd85a3fb9ac920b7bfa8a672f3bb420aeaded91cfd6f2bef2a18d9ab60fc99fcd327e7519a34f16fd6e227e", 0x5c}, {&(0x7f0000002500)="16d921c61b486afbbe3d4dd79a79bc7fbbc687d0b84476a974f71d1038da44e2a81828bcf98ab095082ea2bf0f8f69233312c8aecd885dbc76bcfe6db4721651b5965a14eeea2ce46bd0938cc1e7f5e1fb3c6f3c03645d39d4b248c1317c142e5fffffe852", 0x65}, {&(0x7f00000006c0)="07d841b5547178a6e5cd43151d4f91eb0bb010e810de4d130238de17cd29ac6b11e6dd063f3dd1381fe074600886720aa59f36d918361112a677f4a7950408ca171ef8a399470d7c268139be58aa913f84d61531a058c7ddc5221593cbba8d709a1f2e8a3ba89182cedc550ba840961fdc33372db739ac4aaa91c5feea1ddf4bcbbab9574db43359a723bd3cba0b941d0989d7dd552d31eeb6ece4858f73620a5b6bb150647ac214a5b81fd037a31ec085ee9e10518b9d5584e3c9e5ecf697910bb87362589eeb6b2dc165", 0xcb}, {&(0x7f00000007c0)="326b36d424cca4df2d10db6f5dbd7eec1335e7c42a4dc9496c93ad53c8522dd6e7a8e47ee36159582586ecaddd6bc3ad942fb6931cb6e5a0eaca02f06576012a4e3f4a61ff51a79958646f95f87ef648de5856984cffee51be79daf3a1ded244663f427cc845b528ca12385c0aeaf9774a7563cc02613b5151aad693fb915afada00d8eba6abb39defcf2d0e11d9c972b84d3612c4bfbe51fd153348425addc8ac11e1cf98f05605bde41d168ae6da41847e9650d5ac88c692afd6e1ca6ae6a5", 0xc0}], 0x9, 0x7, 0x0, {0x0, 0x0, 0x3, '\x00', &(0x7f0000002680)={0x8000, 0x2, 0x65, &(0x7f0000000380)="ffbb763c93d66ae167afe98c09003d2a75986fc4035927622a62381a98c3ed849cb2a00b190ebbf78eedaa8cb1a44e558220444901f283703578c2cbca15539f47ae90ce0343e7765ca1745b0e58038b3638a5e7d369d4d55b0a00"/101, 0xfe00000000000000}}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='2', 0x1) 10m42.617904415s ago: executing program 1 (id=19): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c010000100001002cbc700000000008fc000000000000000000000000000001fe8800000000000000000000000000010000ecdf0000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000300fcffffffffffffff0000000000000000090000000000000001000000000000000008400000000000090000000000000092020000000000000010000000000000000000000000000007350000020004002c00000000000000590002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000880000006e000b000018002000000000000000407f000000"], 0x14c}}, 0x44050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x3fc, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0x5, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x1, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x14, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 10m38.875955819s ago: executing program 1 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x36, 0x107, 0x70bd2a, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 10m36.118388768s ago: executing program 1 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @remote, 0x6}, 0x1c) getsockopt$inet6_buf(r5, 0x29, 0x18, 0x0, &(0x7f0000000040)) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2450100140000fb727affa3f9d64600000029907800000000ffffffffb9e28c6a534377fa69774f78dc08ad38829b10638f777d8d26a58288f6513b4485b5653af705955e054433e53b0f94bc663f98deb244dcc384fa7e32b8c4ec45aa8ffede6e170ebe2372b4a1414f9e399c62919b26f6b1b37974bb8923f5d4643792e8adcc7221e07fe40dd377"], 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) write(r6, &(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) waitid(0x2, r2, &(0x7f00000000c0), 0x1, &(0x7f0000000500)) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x800) ioctl$int_in(r7, 0x5452, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 10m33.456551663s ago: executing program 1 (id=28): syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @pix={0x5, 0x3, 0x20303159, 0x0, 0x2000001, 0x0, 0x9, 0x1, 0x0, 0x8, 0x610eb8e02ceafee, 0x6}}) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) socket(0x10, 0x1, 0x200) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x2010002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) socket$rds(0x15, 0x5, 0x0) r2 = syz_io_uring_setup(0xf05, &(0x7f0000000940)={0x0, 0x595e, 0x80, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000), &(0x7f0000000080)) syz_io_uring_submit(r3, r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITEV_FIXED={0x3d, 0x1, 0x4007, @fd_index, 0x1, &(0x7f0000000880)=[{&(0x7f00000001c0)="e8433b303c1ec8266f355d53abd88a917975c4520b59b77a6226e2f6034b547b1fe829", 0x23}, {&(0x7f0000000480)="6b3f673408b7dd75a5eb4c26f1020b5e213289a6a234ecaf269f6cef2fc718370464ad6530b1af97a75e9375fad1bd2411d7c819feda5c414247fa11f21086a9cd422f411393276f2f18cee3f7e88b890e2781622fb3605fabdcdef238b004be5fd565e18a93b49b27a1e6d6be247af68a4bbbe428161f494d2cedde1d3b303041407fd7e4285944ca033ff06c3359286615", 0x92}, {&(0x7f0000000540)="d41a3edbecdac01ba94f60fce5953e9f40c4135429e3e0c28bae79fbb74cb9958dfc40984b1f9a5cc211cfffdfcfad38174b308274714636f4", 0x39}, {&(0x7f00000005c0)="9542dabd81ef2aa1ed32c52f98d105a0941d2219662631ffe40bd905dec85a57abe3e528ea483e9c07be681de08e13c3ee177ef9314569165021730c8eaf9cfde20d93e3482ca9d4d27578a7e1c6322cffe86b0b7fdd6a38c9e7911d913df290f2c80c9718a8a4e4c18543dd416f14dd2049163c226b70d64fb1f6a717f4ae941eb2dbd68f00ce7d732507e0ae2e75eba040f592e8946018c63d2ebea9355547f05ead30dd1d88ab78cbd7426cee5f4c96b2031c23b29a8b40c4de371982664df890", 0xc2}, {&(0x7f00000026c0)="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", 0x800}, {&(0x7f0000002480)="5e200fae4923488f355cc0d26c4deddf75ce93ea9718fc4e43c972d7aab4e8bbb97dc26e410f02c6975539cea3b265a7cbd85a3fb9ac920b7bfa8a672f3bb420aeaded91cfd6f2bef2a18d9ab60fc99fcd327e7519a34f16fd6e227e", 0x5c}, {&(0x7f0000002500)="16d921c61b486afbbe3d4dd79a79bc7fbbc687d0b84476a974f71d1038da44e2a81828bcf98ab095082ea2bf0f8f69233312c8aecd885dbc76bcfe6db4721651b5965a14eeea2ce46bd0938cc1e7f5e1fb3c6f3c03645d39d4b248c1317c142e5fffffe852", 0x65}, {&(0x7f00000006c0)="07d841b5547178a6e5cd43151d4f91eb0bb010e810de4d130238de17cd29ac6b11e6dd063f3dd1381fe074600886720aa59f36d918361112a677f4a7950408ca171ef8a399470d7c268139be58aa913f84d61531a058c7ddc5221593cbba8d709a1f2e8a3ba89182cedc550ba840961fdc33372db739ac4aaa91c5feea1ddf4bcbbab9574db43359a723bd3cba0b941d0989d7dd552d31eeb6ece4858f73620a5b6bb150647ac214a5b81fd037a31ec085ee9e10518b9d5584e3c9e5ecf697910bb87362589eeb6b2dc165", 0xcb}, {&(0x7f00000007c0)="326b36d424cca4df2d10db6f5dbd7eec1335e7c42a4dc9496c93ad53c8522dd6e7a8e47ee36159582586ecaddd6bc3ad942fb6931cb6e5a0eaca02f06576012a4e3f4a61ff51a79958646f95f87ef648de5856984cffee51be79daf3a1ded244663f427cc845b528ca12385c0aeaf9774a7563cc02613b5151aad693fb915afada00d8eba6abb39defcf2d0e11d9c972b84d3612c4bfbe51fd153348425addc8ac11e1cf98f05605bde41d168ae6da41847e9650d5ac88c692afd6e1ca6ae6a5", 0xc0}], 0x9, 0x7, 0x0, {0x0, 0x0, 0x3, '\x00', &(0x7f0000002680)={0x8000, 0x2, 0x65, &(0x7f0000000380)="ffbb763c93d66ae167afe98c09003d2a75986fc4035927622a62381a98c3ed849cb2a00b190ebbf78eedaa8cb1a44e558220444901f283703578c2cbca15539f47ae90ce0343e7765ca1745b0e58038b3638a5e7d369d4d55b0a00"/101, 0xfe00000000000000}}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='2', 0x1) 10m18.277098004s ago: executing program 32 (id=28): syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @pix={0x5, 0x3, 0x20303159, 0x0, 0x2000001, 0x0, 0x9, 0x1, 0x0, 0x8, 0x610eb8e02ceafee, 0x6}}) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) socket(0x10, 0x1, 0x200) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x2010002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) socket$rds(0x15, 0x5, 0x0) r2 = syz_io_uring_setup(0xf05, &(0x7f0000000940)={0x0, 0x595e, 0x80, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000), &(0x7f0000000080)) syz_io_uring_submit(r3, r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITEV_FIXED={0x3d, 0x1, 0x4007, @fd_index, 0x1, &(0x7f0000000880)=[{&(0x7f00000001c0)="e8433b303c1ec8266f355d53abd88a917975c4520b59b77a6226e2f6034b547b1fe829", 0x23}, {&(0x7f0000000480)="6b3f673408b7dd75a5eb4c26f1020b5e213289a6a234ecaf269f6cef2fc718370464ad6530b1af97a75e9375fad1bd2411d7c819feda5c414247fa11f21086a9cd422f411393276f2f18cee3f7e88b890e2781622fb3605fabdcdef238b004be5fd565e18a93b49b27a1e6d6be247af68a4bbbe428161f494d2cedde1d3b303041407fd7e4285944ca033ff06c3359286615", 0x92}, {&(0x7f0000000540)="d41a3edbecdac01ba94f60fce5953e9f40c4135429e3e0c28bae79fbb74cb9958dfc40984b1f9a5cc211cfffdfcfad38174b308274714636f4", 0x39}, {&(0x7f00000005c0)="9542dabd81ef2aa1ed32c52f98d105a0941d2219662631ffe40bd905dec85a57abe3e528ea483e9c07be681de08e13c3ee177ef9314569165021730c8eaf9cfde20d93e3482ca9d4d27578a7e1c6322cffe86b0b7fdd6a38c9e7911d913df290f2c80c9718a8a4e4c18543dd416f14dd2049163c226b70d64fb1f6a717f4ae941eb2dbd68f00ce7d732507e0ae2e75eba040f592e8946018c63d2ebea9355547f05ead30dd1d88ab78cbd7426cee5f4c96b2031c23b29a8b40c4de371982664df890", 0xc2}, {&(0x7f00000026c0)="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", 0x800}, {&(0x7f0000002480)="5e200fae4923488f355cc0d26c4deddf75ce93ea9718fc4e43c972d7aab4e8bbb97dc26e410f02c6975539cea3b265a7cbd85a3fb9ac920b7bfa8a672f3bb420aeaded91cfd6f2bef2a18d9ab60fc99fcd327e7519a34f16fd6e227e", 0x5c}, {&(0x7f0000002500)="16d921c61b486afbbe3d4dd79a79bc7fbbc687d0b84476a974f71d1038da44e2a81828bcf98ab095082ea2bf0f8f69233312c8aecd885dbc76bcfe6db4721651b5965a14eeea2ce46bd0938cc1e7f5e1fb3c6f3c03645d39d4b248c1317c142e5fffffe852", 0x65}, {&(0x7f00000006c0)="07d841b5547178a6e5cd43151d4f91eb0bb010e810de4d130238de17cd29ac6b11e6dd063f3dd1381fe074600886720aa59f36d918361112a677f4a7950408ca171ef8a399470d7c268139be58aa913f84d61531a058c7ddc5221593cbba8d709a1f2e8a3ba89182cedc550ba840961fdc33372db739ac4aaa91c5feea1ddf4bcbbab9574db43359a723bd3cba0b941d0989d7dd552d31eeb6ece4858f73620a5b6bb150647ac214a5b81fd037a31ec085ee9e10518b9d5584e3c9e5ecf697910bb87362589eeb6b2dc165", 0xcb}, {&(0x7f00000007c0)="326b36d424cca4df2d10db6f5dbd7eec1335e7c42a4dc9496c93ad53c8522dd6e7a8e47ee36159582586ecaddd6bc3ad942fb6931cb6e5a0eaca02f06576012a4e3f4a61ff51a79958646f95f87ef648de5856984cffee51be79daf3a1ded244663f427cc845b528ca12385c0aeaf9774a7563cc02613b5151aad693fb915afada00d8eba6abb39defcf2d0e11d9c972b84d3612c4bfbe51fd153348425addc8ac11e1cf98f05605bde41d168ae6da41847e9650d5ac88c692afd6e1ca6ae6a5", 0xc0}], 0x9, 0x7, 0x0, {0x0, 0x0, 0x3, '\x00', &(0x7f0000002680)={0x8000, 0x2, 0x65, &(0x7f0000000380)="ffbb763c93d66ae167afe98c09003d2a75986fc4035927622a62381a98c3ed849cb2a00b190ebbf78eedaa8cb1a44e558220444901f283703578c2cbca15539f47ae90ce0343e7765ca1745b0e58038b3638a5e7d369d4d55b0a00"/101, 0xfe00000000000000}}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='2', 0x1) 17.362378028s ago: executing program 2 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) sched_setscheduler(0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) 16.281613708s ago: executing program 2 (id=859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000040601010000000000000000030000050500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) 15.914395076s ago: executing program 2 (id=860): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) 13.134357956s ago: executing program 2 (id=862): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x6}, 0x18) sendmmsg$inet(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000400)="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", 0x1000}], 0x1}}], 0x1, 0x0) 11.833040817s ago: executing program 4 (id=866): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x3fc, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0x5, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x1, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x14, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 10.525996668s ago: executing program 4 (id=870): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) 8.426741386s ago: executing program 4 (id=872): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000140)=0xc0) 7.134069037s ago: executing program 0 (id=874): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x4, 0x0, 'syz1\x00', 0x0}) 7.013298132s ago: executing program 3 (id=875): r0 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xe0000004}) 7.012458372s ago: executing program 0 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) sched_setscheduler(0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) 6.818361251s ago: executing program 3 (id=877): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x145040) 5.963848312s ago: executing program 3 (id=878): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x90, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) mount(0x0, 0x0, 0x0, 0x0, 0x0) 5.709707423s ago: executing program 0 (id=879): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x3fc, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0x5, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x1, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x14, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 4.782369536s ago: executing program 2 (id=880): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) 4.722439999s ago: executing program 0 (id=881): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2.770480021s ago: executing program 2 (id=882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000047, 0x3000000) 2.679456505s ago: executing program 4 (id=883): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000040)='0\x00', 0x2) 2.446328106s ago: executing program 3 (id=884): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x390, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000000, 0x80000000, 0x3, 0xdcd8, 0x1ff}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="0422b9dd9210b7", 0x7, 0x20000090, 0x0, 0x0) socket(0x15, 0x4, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r6, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0x8000001, 0xf, &(0x7f00000000c0)=[0x138d, 0x5, 0x7d, 0xffff32eb, 0x2, 0x8, 0x2d7b, 0x41f, 0x0, 0x3, 0x0, 0x7, 0xfe09, 0xd2, 0x80000002], 0x0, 0x4400003}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.005430936s ago: executing program 0 (id=885): r0 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xe0000004}) 1.874014973s ago: executing program 4 (id=886): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x4, 0x0, 'syz1\x00', 0x0}) 1.063635321s ago: executing program 3 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140), 0x10) sched_setscheduler(0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) 1.05946683s ago: executing program 4 (id=888): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000140)='0x1d6b\n', 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x0104\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0200\n', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000b40), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0123456789\n', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='HID Gadget\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r5, &(0x7f0000000840), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r6, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029658100c0", 0x3f) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000a40)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) write$hidraw(r8, &(0x7f0000000c40)="0001", 0x2) 858.27966ms ago: executing program 0 (id=889): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x3fc, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0x5, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x1, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x14, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 0s ago: executing program 3 (id=890): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. [ 84.247130][ T5765] cgroup: Unknown subsys name 'net' [ 84.382984][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.127745][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.184750][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.193494][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.202216][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.215160][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.234413][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.244615][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.259437][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.267577][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.276414][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.283862][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.292538][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.299922][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.300204][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.316926][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.324859][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.326084][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.332991][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.340672][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.353316][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.355387][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.388670][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.396458][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.415215][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.423366][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.831349][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 88.995553][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.004019][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.011699][ T5778] bridge_slave_0: entered allmulticast mode [ 89.019423][ T5778] bridge_slave_0: entered promiscuous mode [ 89.027975][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 89.071072][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.079758][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.087129][ T5778] bridge_slave_1: entered allmulticast mode [ 89.094196][ T5778] bridge_slave_1: entered promiscuous mode [ 89.106428][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 89.223762][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.256012][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.337902][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.347871][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.356056][ T5777] bridge_slave_0: entered allmulticast mode [ 89.363274][ T5777] bridge_slave_0: entered promiscuous mode [ 89.373646][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.381428][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.389354][ T5777] bridge_slave_1: entered allmulticast mode [ 89.397069][ T5777] bridge_slave_1: entered promiscuous mode [ 89.404112][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 89.429080][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.437909][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.445332][ T5779] bridge_slave_0: entered allmulticast mode [ 89.452523][ T5779] bridge_slave_0: entered promiscuous mode [ 89.461839][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.469156][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.476536][ T5779] bridge_slave_1: entered allmulticast mode [ 89.483667][ T5779] bridge_slave_1: entered promiscuous mode [ 89.528131][ T5778] team0: Port device team_slave_0 added [ 89.537558][ T5778] team0: Port device team_slave_1 added [ 89.567669][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.581337][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.661731][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.674675][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.711377][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.718671][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.744955][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.759048][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.766358][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.792342][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.827641][ T5779] team0: Port device team_slave_0 added [ 89.837230][ T5777] team0: Port device team_slave_0 added [ 89.845473][ T5779] team0: Port device team_slave_1 added [ 89.889121][ T5777] team0: Port device team_slave_1 added [ 89.917841][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.925149][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.951256][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.975717][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.982927][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.990267][ T5776] bridge_slave_0: entered allmulticast mode [ 89.997860][ T5776] bridge_slave_0: entered promiscuous mode [ 90.027442][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.036694][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.063243][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.084121][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.091918][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.099705][ T5776] bridge_slave_1: entered allmulticast mode [ 90.107304][ T5776] bridge_slave_1: entered promiscuous mode [ 90.141100][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.148382][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.176327][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.189424][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.196851][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.223098][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.259027][ T5778] hsr_slave_0: entered promiscuous mode [ 90.265991][ T5778] hsr_slave_1: entered promiscuous mode [ 90.328122][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.363056][ T5779] hsr_slave_0: entered promiscuous mode [ 90.369959][ T5779] hsr_slave_1: entered promiscuous mode [ 90.376527][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.384446][ T5779] Cannot create hsr debugfs directory [ 90.395290][ T51] Bluetooth: hci3: command tx timeout [ 90.401036][ T51] Bluetooth: hci0: command tx timeout [ 90.416586][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.474346][ T51] Bluetooth: hci2: command tx timeout [ 90.480120][ T51] Bluetooth: hci1: command tx timeout [ 90.519008][ T5777] hsr_slave_0: entered promiscuous mode [ 90.526092][ T5777] hsr_slave_1: entered promiscuous mode [ 90.532455][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.540164][ T5777] Cannot create hsr debugfs directory [ 90.548993][ T5776] team0: Port device team_slave_0 added [ 90.587750][ T5776] team0: Port device team_slave_1 added [ 90.693193][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.700625][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.726879][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.764735][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.771743][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.798158][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.896787][ T5776] hsr_slave_0: entered promiscuous mode [ 90.903243][ T5776] hsr_slave_1: entered promiscuous mode [ 90.909901][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.917725][ T5776] Cannot create hsr debugfs directory [ 91.059385][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.090362][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.100768][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.125954][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.241651][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.252166][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.288422][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.298785][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.360473][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.387655][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.439396][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.455679][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.559024][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.570383][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.603221][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.633880][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.711255][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.751426][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.773436][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.790810][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.826532][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.843030][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.850442][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.865918][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.907323][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.914549][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.930361][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.937519][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.949815][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.957044][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.974309][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.981474][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.031389][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.038622][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.078050][ T787] cfg80211: failed to load regulatory.db [ 92.173875][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.202543][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.265838][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.309770][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.317020][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.340163][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.347417][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.476473][ T51] Bluetooth: hci0: command tx timeout [ 92.481992][ T51] Bluetooth: hci3: command tx timeout [ 92.555851][ T51] Bluetooth: hci1: command tx timeout [ 92.561472][ T5791] Bluetooth: hci2: command tx timeout [ 92.753414][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.841883][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.973714][ T5778] veth0_vlan: entered promiscuous mode [ 92.999650][ T5779] veth0_vlan: entered promiscuous mode [ 93.010310][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.037796][ T5778] veth1_vlan: entered promiscuous mode [ 93.063618][ T5779] veth1_vlan: entered promiscuous mode [ 93.108559][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.159376][ T5779] veth0_macvtap: entered promiscuous mode [ 93.173590][ T5778] veth0_macvtap: entered promiscuous mode [ 93.187097][ T5779] veth1_macvtap: entered promiscuous mode [ 93.213994][ T5778] veth1_macvtap: entered promiscuous mode [ 93.240220][ T5777] veth0_vlan: entered promiscuous mode [ 93.262569][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.282775][ T5777] veth1_vlan: entered promiscuous mode [ 93.309382][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.321340][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.334380][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.343126][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.352360][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.381361][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.393007][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.405643][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.422844][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.435619][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.448732][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.465765][ T5776] veth0_vlan: entered promiscuous mode [ 93.489605][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.500996][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.510540][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.519669][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.539473][ T5776] veth1_vlan: entered promiscuous mode [ 93.693931][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.714925][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.726819][ T5777] veth0_macvtap: entered promiscuous mode [ 93.766983][ T5777] veth1_macvtap: entered promiscuous mode [ 93.774646][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.782517][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.791620][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.809902][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.830816][ T5776] veth0_macvtap: entered promiscuous mode [ 93.891998][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.903690][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.918098][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.929098][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.942856][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.952920][ T5776] veth1_macvtap: entered promiscuous mode [ 93.987863][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.000176][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.034444][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.063586][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.086409][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.113640][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.292739][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.114259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.494292][ T51] Bluetooth: hci3: command tx timeout [ 95.499763][ T51] Bluetooth: hci0: command tx timeout [ 95.505696][ T5791] Bluetooth: hci1: command tx timeout [ 95.511149][ T5791] Bluetooth: hci2: command tx timeout [ 95.524278][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.595719][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.621354][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.632865][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.644577][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.655115][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.666821][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.702811][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.716035][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.725869][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.737375][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.759362][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.772682][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.786466][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.801157][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.824716][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.857083][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.886060][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.931556][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.978153][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.004335][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.013110][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.937121][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.974378][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.034165][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.042828][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.235906][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.243772][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.389137][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.417282][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.674612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.232621][ T5087] Bluetooth: hci0: command tx timeout [ 99.232642][ T51] Bluetooth: hci2: command tx timeout [ 99.238146][ T5087] Bluetooth: hci1: command tx timeout [ 99.243626][ T5791] Bluetooth: hci3: command tx timeout [ 99.425281][ T5860] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5'. [ 99.593699][ T5867] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9'. [ 103.204469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 107.105890][ T5891] syz.1.8[5891]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 108.324320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 110.060971][ T5904] jffs2: notice: (5904) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 110.169691][ T5908] random: crng reseeded on system resumption [ 110.192445][ T5910] netlink: 92 bytes leftover after parsing attributes in process `syz.1.19'. [ 112.094204][ C1] sched: RT throttling activated [ 118.564518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.974218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.124230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 126.238871][ T5966] jffs2: notice: (5966) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.577649][ T5971] netlink: 92 bytes leftover after parsing attributes in process `syz.0.33'. [ 131.364224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 133.095494][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.102550][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.514275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 136.564901][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.573559][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.583669][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.592848][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.601050][ T5791] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 136.608576][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.984697][ T6018] netlink: 92 bytes leftover after parsing attributes in process `syz.2.44'. [ 138.032561][ T6006] chnl_net:caif_netlink_parms(): no params data found [ 138.193810][ T1142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.784598][ T5791] Bluetooth: hci4: command tx timeout [ 139.630550][ T1142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.608338][ T6032] jffs2: notice: (6032) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 140.643504][ T1142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.703977][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.725529][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.294652][ T5791] Bluetooth: hci4: command tx timeout [ 142.300678][ T6006] bridge_slave_0: entered allmulticast mode [ 142.354602][ T6006] bridge_slave_0: entered promiscuous mode [ 142.397974][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.424673][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.431986][ T6006] bridge_slave_1: entered allmulticast mode [ 142.484772][ T6006] bridge_slave_1: entered promiscuous mode [ 142.552622][ T1142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.829140][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.754242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 144.347222][ T5791] Bluetooth: hci4: command tx timeout [ 144.405187][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.080355][ T6006] team0: Port device team_slave_0 added [ 146.148898][ T6006] team0: Port device team_slave_1 added [ 146.317861][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.350563][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.400119][ T5791] Bluetooth: hci4: command tx timeout [ 146.447228][ T6006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.647083][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.664450][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.725069][ T6006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.040871][ T6006] hsr_slave_0: entered promiscuous mode [ 147.082557][ T6006] hsr_slave_1: entered promiscuous mode [ 147.100845][ T6006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.125899][ T6006] Cannot create hsr debugfs directory [ 149.373059][ T6082] netlink: 92 bytes leftover after parsing attributes in process `syz.3.54'. [ 154.571314][ T6006] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.814304][ T6006] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.854662][ T6006] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.895335][ T6006] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.945363][ T1142] hsr_slave_0: left promiscuous mode [ 154.991136][ T1142] hsr_slave_1: left promiscuous mode [ 155.005231][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.012873][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.061003][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.084427][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.114642][ T1142] bridge_slave_1: left allmulticast mode [ 155.120858][ T1142] bridge_slave_1: left promiscuous mode [ 155.145830][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.198063][ T1142] bridge_slave_0: left allmulticast mode [ 155.203758][ T1142] bridge_slave_0: left promiscuous mode [ 155.243564][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.328140][ T1142] veth1_macvtap: left promiscuous mode [ 155.334140][ T1142] veth0_macvtap: left promiscuous mode [ 155.345823][ T1142] veth1_vlan: left promiscuous mode [ 155.351413][ T1142] veth0_vlan: left promiscuous mode [ 156.778409][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 156.887061][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 156.994626][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.114818][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.977187][ T1142] bond0 (unregistering): Released all slaves [ 158.280095][ T6006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.329268][ T6006] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.360804][ T6150] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.368071][ T6150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.396752][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.404005][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.803446][ T6006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.193420][ T6006] veth0_vlan: entered promiscuous mode [ 159.222553][ T6006] veth1_vlan: entered promiscuous mode [ 159.295697][ T6006] veth0_macvtap: entered promiscuous mode [ 159.317332][ T6006] veth1_macvtap: entered promiscuous mode [ 159.352702][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.366584][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.381239][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.393432][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.408224][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.420029][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.440529][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.462599][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.483172][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.495522][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.512533][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.542517][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.554756][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.566975][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.585848][ T6006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.595897][ T6006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.605270][ T6006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.614087][ T6006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.790898][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.815176][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.857450][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.866058][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.462925][ T6232] netlink: 92 bytes leftover after parsing attributes in process `syz.0.66'. [ 165.538290][ T6240] ======================================================= [ 165.538290][ T6240] WARNING: The mand mount option has been deprecated and [ 165.538290][ T6240] and is ignored by this kernel. Remove the mand [ 165.538290][ T6240] option from the mount to silence this warning. [ 165.538290][ T6240] ======================================================= [ 168.546179][ T6273] netlink: 64 bytes leftover after parsing attributes in process `syz.0.69'. [ 172.496569][ T6286] netlink: 92 bytes leftover after parsing attributes in process `syz.3.72'. [ 187.522824][ T8] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 188.488674][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 188.548370][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.564349][ T8] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 188.575263][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.614566][ T8] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 188.656157][ T8] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 189.024048][ T5414] usb 1-1: USB disconnect, device number 2 [ 191.208650][ T5414] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 191.275165][ T5414] cyberjack 1-1:1.0: device disconnected [ 195.522044][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.528588][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.664392][ T6424] netlink: 92 bytes leftover after parsing attributes in process `syz.3.98'. [ 205.263400][ T6491] netlink: 92 bytes leftover after parsing attributes in process `syz.0.110'. [ 210.688150][ T6517] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 212.311711][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 212.318388][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 212.324573][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 212.795695][ T6534] jffs2: notice: (6534) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 223.584889][ T6597] jffs2: notice: (6597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 229.945314][ T6637] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 231.921282][ T6654] jffs2: notice: (6654) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 240.711592][ T6718] jffs2: notice: (6718) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 249.939529][ T6773] jffs2: notice: (6773) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 251.824262][ T969] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 252.030568][ T969] usb 4-1: Using ep0 maxpacket: 16 [ 252.048646][ T969] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 252.079524][ T969] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 252.134911][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.174343][ T969] usb 4-1: Product: syz [ 252.178590][ T969] usb 4-1: Manufacturer: syz [ 252.183225][ T969] usb 4-1: SerialNumber: syz [ 252.209317][ T969] r8152-cfgselector 4-1: config 0 descriptor?? [ 252.496265][ T969] r8152-cfgselector 4-1: Needed 1 retries to read version [ 253.292923][ T969] r8152-cfgselector 4-1: Unknown version 0x0000 [ 253.335753][ T969] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 256.022506][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.032161][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.270163][ T6821] jffs2: notice: (6821) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 261.802550][ T6853] FAULT_INJECTION: forcing a failure. [ 261.802550][ T6853] name failslab, interval 1, probability 0, space 0, times 1 [ 261.844273][ T6853] CPU: 1 PID: 6853 Comm: syz.4.179 Not tainted syzkaller #0 [ 261.851654][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.861871][ T6853] Call Trace: [ 261.865208][ T6853] [ 261.868198][ T6853] dump_stack_lvl+0x18c/0x250 [ 261.872955][ T6853] ? show_regs_print_info+0x20/0x20 [ 261.878184][ T6853] ? load_image+0x420/0x420 [ 261.882706][ T6853] ? __might_sleep+0xe0/0xe0 [ 261.887313][ T6853] ? __lock_acquire+0x7d80/0x7d80 [ 261.892357][ T6853] should_fail_ex+0x394/0x4c0 [ 261.897064][ T6853] should_failslab+0x9/0x20 [ 261.901588][ T6853] slab_pre_alloc_hook+0x59/0x300 [ 261.906660][ T6853] kmem_cache_alloc+0x5a/0x2c0 [ 261.911488][ T6853] ? __kernfs_new_node+0xe5/0x7f0 [ 261.916567][ T6853] __kernfs_new_node+0xe5/0x7f0 [ 261.921470][ T6853] ? kernfs_new_node+0x260/0x260 [ 261.926460][ T6853] ? sysfs_do_create_link_sd+0x75/0x110 [ 261.932038][ T6853] ? __lock_acquire+0x7d80/0x7d80 [ 261.937105][ T6853] kernfs_new_node+0x14c/0x260 [ 261.941920][ T6853] kernfs_create_link+0xa7/0x200 [ 261.946893][ T6853] sysfs_do_create_link_sd+0x83/0x110 [ 261.952297][ T6853] driver_sysfs_add+0xec/0x210 [ 261.957095][ T6853] really_probe+0x13c/0xae0 [ 261.961634][ T6853] ? pm_runtime_barrier+0x14b/0x1c0 [ 261.966874][ T6853] __driver_probe_device+0x1f5/0x390 [ 261.972186][ T6853] driver_probe_device+0x4f/0x420 [ 261.977263][ T6853] __driver_attach+0x444/0x6d0 [ 261.982211][ T6853] bus_for_each_dev+0x235/0x2b0 [ 261.987135][ T6853] ? driver_attach+0x50/0x50 [ 261.991821][ T6853] ? bus_remove_file+0x140/0x140 [ 261.996819][ T6853] ? do_raw_spin_unlock+0x121/0x230 [ 262.002071][ T6853] bus_add_driver+0x340/0x630 [ 262.006829][ T6853] driver_register+0x23a/0x310 [ 262.011694][ T6853] usb_gadget_register_driver_owner+0xf9/0x270 [ 262.017939][ T6853] raw_ioctl+0x1613/0x3d80 [ 262.022497][ T6853] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 262.028195][ T6853] ? tomoyo_path_number_perm+0x217/0x5e0 [ 262.034144][ T6853] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 262.039753][ T6853] ? make_qualifier+0x260/0x260 [ 262.044691][ T6853] ? __fget_files+0x28/0x460 [ 262.049343][ T6853] ? bpf_lsm_file_ioctl+0x9/0x10 [ 262.054365][ T6853] ? security_file_ioctl+0x80/0xa0 [ 262.059544][ T6853] ? make_qualifier+0x260/0x260 [ 262.064442][ T6853] __se_sys_ioctl+0xfd/0x170 [ 262.069088][ T6853] do_syscall_64+0x55/0xb0 [ 262.073635][ T6853] ? clear_bhb_loop+0x40/0x90 [ 262.078359][ T6853] ? clear_bhb_loop+0x40/0x90 [ 262.083080][ T6853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.089141][ T6853] RIP: 0033:0x7fe96739ddeb [ 262.093618][ T6853] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 262.113305][ T6853] RSP: 002b:00007fe9682f6f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.121784][ T6853] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe96739ddeb [ 262.129825][ T6853] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 262.138027][ T6853] RBP: 00007fe9682f7fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 262.146107][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.154127][ T6853] R13: 0000200000000500 R14: 0000000000000002 R15: 0000000000000000 [ 262.162177][ T6853] [ 263.704557][ T6853] really_probe: driver_sysfs_add(gadget.4) failed [ 263.774150][ T6853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.790573][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 264.098624][ T6853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.020022][ T6912] FAULT_INJECTION: forcing a failure. [ 276.020022][ T6912] name failslab, interval 1, probability 0, space 0, times 0 [ 276.080878][ T6912] CPU: 1 PID: 6912 Comm: syz.3.191 Not tainted syzkaller #0 [ 276.088276][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.098391][ T6912] Call Trace: [ 276.101722][ T6912] [ 276.104695][ T6912] dump_stack_lvl+0x18c/0x250 [ 276.109435][ T6912] ? show_regs_print_info+0x20/0x20 [ 276.114694][ T6912] ? load_image+0x420/0x420 [ 276.119259][ T6912] ? __might_sleep+0xe0/0xe0 [ 276.123921][ T6912] ? __lock_acquire+0x7d80/0x7d80 [ 276.129001][ T6912] should_fail_ex+0x394/0x4c0 [ 276.133742][ T6912] should_failslab+0x9/0x20 [ 276.138318][ T6912] slab_pre_alloc_hook+0x59/0x300 [ 276.143419][ T6912] kmem_cache_alloc+0x5a/0x2c0 [ 276.148255][ T6912] ? __kernfs_new_node+0xe5/0x7f0 [ 276.153363][ T6912] __kernfs_new_node+0xe5/0x7f0 [ 276.158288][ T6912] ? kernfs_new_node+0x260/0x260 [ 276.163311][ T6912] ? sysfs_do_create_link_sd+0x75/0x110 [ 276.168920][ T6912] ? __lock_acquire+0x7d80/0x7d80 [ 276.174001][ T6912] kernfs_new_node+0x14c/0x260 [ 276.178843][ T6912] kernfs_create_link+0xa7/0x200 [ 276.183838][ T6912] sysfs_do_create_link_sd+0x83/0x110 [ 276.189268][ T6912] driver_sysfs_add+0xec/0x210 [ 276.194088][ T6912] really_probe+0x13c/0xae0 [ 276.198638][ T6912] ? pm_runtime_barrier+0x14b/0x1c0 [ 276.203899][ T6912] __driver_probe_device+0x1f5/0x390 [ 276.209235][ T6912] driver_probe_device+0x4f/0x420 [ 276.214312][ T6912] __driver_attach+0x444/0x6d0 [ 276.219132][ T6912] bus_for_each_dev+0x235/0x2b0 [ 276.224039][ T6912] ? driver_attach+0x50/0x50 [ 276.228692][ T6912] ? bus_remove_file+0x140/0x140 [ 276.233709][ T6912] ? do_raw_spin_unlock+0x121/0x230 [ 276.238993][ T6912] bus_add_driver+0x340/0x630 [ 276.243763][ T6912] driver_register+0x23a/0x310 [ 276.248605][ T6912] usb_gadget_register_driver_owner+0xf9/0x270 [ 276.254843][ T6912] raw_ioctl+0x1613/0x3d80 [ 276.259336][ T6912] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 276.265051][ T6912] ? tomoyo_path_number_perm+0x217/0x5e0 [ 276.270757][ T6912] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 276.276292][ T6912] ? make_qualifier+0x260/0x260 [ 276.281251][ T6912] ? __fget_files+0x28/0x460 [ 276.285921][ T6912] ? bpf_lsm_file_ioctl+0x9/0x10 [ 276.290916][ T6912] ? security_file_ioctl+0x80/0xa0 [ 276.296099][ T6912] ? make_qualifier+0x260/0x260 [ 276.301020][ T6912] __se_sys_ioctl+0xfd/0x170 [ 276.305691][ T6912] do_syscall_64+0x55/0xb0 [ 276.310184][ T6912] ? clear_bhb_loop+0x40/0x90 [ 276.314936][ T6912] ? clear_bhb_loop+0x40/0x90 [ 276.319692][ T6912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.325657][ T6912] RIP: 0033:0x7fc827b9ddeb [ 276.330131][ T6912] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 276.349800][ T6912] RSP: 002b:00007fc8289fdf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.358291][ T6912] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fc827b9ddeb [ 276.366319][ T6912] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 276.374341][ T6912] RBP: 00007fc8289fefd0 R08: 0000000000000001 R09: 00000000ffffffff [ 276.382360][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.390382][ T6912] R13: 0000200000000500 R14: 0000000000000002 R15: 0000000000000000 [ 276.398425][ T6912] [ 276.574238][ T6912] really_probe: driver_sysfs_add(gadget.3) failed [ 276.585666][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.273047][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.272172][ T6977] FAULT_INJECTION: forcing a failure. [ 290.272172][ T6977] name failslab, interval 1, probability 0, space 0, times 0 [ 290.285243][ T6977] CPU: 0 PID: 6977 Comm: syz.0.211 Not tainted syzkaller #0 [ 290.292564][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.302666][ T6977] Call Trace: [ 290.305992][ T6977] [ 290.308964][ T6977] dump_stack_lvl+0x18c/0x250 [ 290.313702][ T6977] ? driver_probe_device+0x4f/0x420 [ 290.318956][ T6977] ? show_regs_print_info+0x20/0x20 [ 290.324203][ T6977] ? load_image+0x420/0x420 [ 290.328766][ T6977] should_fail_ex+0x394/0x4c0 [ 290.333516][ T6977] should_failslab+0x9/0x20 [ 290.338080][ T6977] slab_pre_alloc_hook+0x59/0x300 [ 290.343164][ T6977] ? raw_queue_event+0x83/0x2f0 [ 290.348069][ T6977] ? raw_queue_event+0x83/0x2f0 [ 290.352945][ T6977] __kmem_cache_alloc_node+0x53/0x250 [ 290.358343][ T6977] ? raw_queue_event+0x83/0x2f0 [ 290.363205][ T6977] __kmalloc+0xa7/0x240 [ 290.367385][ T6977] raw_queue_event+0x83/0x2f0 [ 290.372079][ T6977] gadget_bind+0x474/0x5b0 [ 290.376534][ T6977] ? gadget_disconnect+0x10/0x10 [ 290.381487][ T6977] gadget_bind_driver+0x2b3/0x770 [ 290.386747][ T6977] ? gadget_match_driver+0x130/0x130 [ 290.392073][ T6977] really_probe+0x247/0xae0 [ 290.396621][ T6977] ? pm_runtime_barrier+0x14b/0x1c0 [ 290.401880][ T6977] __driver_probe_device+0x1f5/0x390 [ 290.407209][ T6977] driver_probe_device+0x4f/0x420 [ 290.412256][ T6977] __driver_attach+0x444/0x6d0 [ 290.417066][ T6977] bus_for_each_dev+0x235/0x2b0 [ 290.421952][ T6977] ? driver_attach+0x50/0x50 [ 290.426581][ T6977] ? bus_remove_file+0x140/0x140 [ 290.431550][ T6977] ? do_raw_spin_unlock+0x121/0x230 [ 290.436777][ T6977] bus_add_driver+0x340/0x630 [ 290.441489][ T6977] driver_register+0x23a/0x310 [ 290.446273][ T6977] usb_gadget_register_driver_owner+0xf9/0x270 [ 290.452460][ T6977] raw_ioctl+0x1613/0x3d80 [ 290.456898][ T6977] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 290.462554][ T6977] ? tomoyo_path_number_perm+0x217/0x5e0 [ 290.468306][ T6977] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 290.473805][ T6977] ? make_qualifier+0x260/0x260 [ 290.478704][ T6977] ? __fget_files+0x28/0x460 [ 290.483344][ T6977] ? bpf_lsm_file_ioctl+0x9/0x10 [ 290.488297][ T6977] ? security_file_ioctl+0x80/0xa0 [ 290.493445][ T6977] ? make_qualifier+0x260/0x260 [ 290.498334][ T6977] __se_sys_ioctl+0xfd/0x170 [ 290.502948][ T6977] do_syscall_64+0x55/0xb0 [ 290.507383][ T6977] ? clear_bhb_loop+0x40/0x90 [ 290.512082][ T6977] ? clear_bhb_loop+0x40/0x90 [ 290.516782][ T6977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.522695][ T6977] RIP: 0033:0x7f05e139ddeb [ 290.527151][ T6977] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 290.546779][ T6977] RSP: 002b:00007f05e21c5f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.555224][ T6977] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f05e139ddeb [ 290.563411][ T6977] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 290.571419][ T6977] RBP: 00007f05e21c6fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 290.579418][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.587411][ T6977] R13: 0000200000000500 R14: 0000000000000002 R15: 0000000000000000 [ 290.595430][ T6977] [ 290.654495][ T6977] raw-gadget.0 gadget.0: failed to queue event [ 290.694373][ T6977] udc dummy_udc.0: failed to start USB Raw Gadget: -12 [ 290.702308][ T6977] raw-gadget.0: probe of gadget.0 failed with error -12 [ 290.874926][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.883908][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.232938][ T6988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.449047][ T7006] No source specified [ 300.668877][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.677604][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.917052][ T7025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.973425][ T7025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.426510][ T7025] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.436365][ T7025] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.445645][ T7025] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.454610][ T7025] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.610371][ T7025] syz.4.225 (7025) used greatest stack depth: 20264 bytes left [ 302.767646][ T7046] No source specified [ 302.785653][ T7049] FAULT_INJECTION: forcing a failure. [ 302.785653][ T7049] name failslab, interval 1, probability 0, space 0, times 0 [ 302.965334][ T7049] CPU: 0 PID: 7049 Comm: syz.2.228 Not tainted syzkaller #0 [ 302.972674][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.982777][ T7049] Call Trace: [ 302.986086][ T7049] [ 302.989050][ T7049] dump_stack_lvl+0x18c/0x250 [ 302.993769][ T7049] ? show_regs_print_info+0x20/0x20 [ 302.998993][ T7049] ? load_image+0x420/0x420 [ 303.003520][ T7049] ? __might_sleep+0xe0/0xe0 [ 303.008135][ T7049] ? __lock_acquire+0x7d80/0x7d80 [ 303.013184][ T7049] should_fail_ex+0x394/0x4c0 [ 303.017898][ T7049] should_failslab+0x9/0x20 [ 303.022435][ T7049] slab_pre_alloc_hook+0x59/0x300 [ 303.027490][ T7049] ? __lock_acquire+0x7d80/0x7d80 [ 303.032531][ T7049] ? dummy_alloc_request+0x7f/0x130 [ 303.037750][ T7049] __kmem_cache_alloc_node+0x53/0x250 [ 303.043144][ T7049] ? dummy_alloc_request+0x7f/0x130 [ 303.048357][ T7049] kmalloc_trace+0x2a/0xe0 [ 303.052794][ T7049] dummy_alloc_request+0x7f/0x130 [ 303.057882][ T7049] usb_ep_alloc_request+0x61/0x250 [ 303.063063][ T7049] gadget_bind+0xec/0x5b0 [ 303.067495][ T7049] ? kernfs_put+0x309/0x360 [ 303.072063][ T7049] ? gadget_disconnect+0x10/0x10 [ 303.077044][ T7049] gadget_bind_driver+0x2b3/0x770 [ 303.082147][ T7049] ? gadget_match_driver+0x130/0x130 [ 303.087475][ T7049] really_probe+0x247/0xae0 [ 303.092012][ T7049] ? pm_runtime_barrier+0x14b/0x1c0 [ 303.097240][ T7049] __driver_probe_device+0x1f5/0x390 [ 303.102592][ T7049] driver_probe_device+0x4f/0x420 [ 303.107665][ T7049] __driver_attach+0x444/0x6d0 [ 303.112453][ T7049] bus_for_each_dev+0x235/0x2b0 [ 303.117440][ T7049] ? driver_attach+0x50/0x50 [ 303.122072][ T7049] ? bus_remove_file+0x140/0x140 [ 303.127034][ T7049] ? do_raw_spin_unlock+0x121/0x230 [ 303.132277][ T7049] bus_add_driver+0x340/0x630 [ 303.136999][ T7049] driver_register+0x23a/0x310 [ 303.141815][ T7049] usb_gadget_register_driver_owner+0xf9/0x270 [ 303.147997][ T7049] raw_ioctl+0x1613/0x3d80 [ 303.152440][ T7049] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 303.158094][ T7049] ? tomoyo_path_number_perm+0x217/0x5e0 [ 303.163771][ T7049] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 303.169278][ T7049] ? make_qualifier+0x260/0x260 [ 303.174212][ T7049] ? __fget_files+0x28/0x460 [ 303.178913][ T7049] ? bpf_lsm_file_ioctl+0x9/0x10 [ 303.183890][ T7049] ? security_file_ioctl+0x80/0xa0 [ 303.189051][ T7049] ? make_qualifier+0x260/0x260 [ 303.193945][ T7049] __se_sys_ioctl+0xfd/0x170 [ 303.198566][ T7049] do_syscall_64+0x55/0xb0 [ 303.203009][ T7049] ? clear_bhb_loop+0x40/0x90 [ 303.207735][ T7049] ? clear_bhb_loop+0x40/0x90 [ 303.212438][ T7049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.218428][ T7049] RIP: 0033:0x7f26bd79ddeb [ 303.222914][ T7049] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 303.242660][ T7049] RSP: 002b:00007f26be690f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.251206][ T7049] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f26bd79ddeb [ 303.259810][ T7049] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 303.267804][ T7049] RBP: 00007f26be691fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 303.275802][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.283794][ T7049] R13: 0000200000000500 R14: 0000000000000002 R15: 0000000000000000 [ 303.291854][ T7049] [ 303.310449][ T7049] raw-gadget.0 gadget.2: usb_ep_alloc_request failed [ 303.317360][ T7049] udc dummy_udc.2: failed to start USB Raw Gadget: -12 [ 303.331673][ T7049] raw-gadget.0: probe of gadget.2 failed with error -12 [ 303.353335][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.407917][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.457175][ T7073] No source specified [ 310.427933][ T7097] Zero length message leads to an empty skb [ 311.166531][ T7106] FAULT_INJECTION: forcing a failure. [ 311.166531][ T7106] name failslab, interval 1, probability 0, space 0, times 0 [ 311.204532][ T7106] CPU: 1 PID: 7106 Comm: syz.2.249 Not tainted syzkaller #0 [ 311.211933][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.222011][ T7106] Call Trace: [ 311.225319][ T7106] [ 311.228263][ T7106] dump_stack_lvl+0x18c/0x250 [ 311.232984][ T7106] ? show_regs_print_info+0x20/0x20 [ 311.238236][ T7106] ? load_image+0x420/0x420 [ 311.242802][ T7106] ? __might_sleep+0xe0/0xe0 [ 311.247415][ T7106] ? __lock_acquire+0x7d80/0x7d80 [ 311.252464][ T7106] should_fail_ex+0x394/0x4c0 [ 311.257166][ T7106] should_failslab+0x9/0x20 [ 311.261689][ T7106] slab_pre_alloc_hook+0x59/0x300 [ 311.266738][ T7106] ? __kernfs_new_node+0xaa/0x7f0 [ 311.271788][ T7106] ? __kernfs_new_node+0xaa/0x7f0 [ 311.276829][ T7106] __kmem_cache_alloc_node+0x53/0x250 [ 311.282243][ T7106] ? __kernfs_new_node+0xaa/0x7f0 [ 311.287329][ T7106] __kmalloc_node_track_caller+0xa4/0x230 [ 311.293075][ T7106] kstrdup+0x3b/0x80 [ 311.296992][ T7106] __kernfs_new_node+0xaa/0x7f0 [ 311.301868][ T7106] ? rcu_is_watching+0x15/0xb0 [ 311.306654][ T7106] ? kernfs_new_node+0x260/0x260 [ 311.311625][ T7106] ? sysfs_do_create_link_sd+0x75/0x110 [ 311.317199][ T7106] ? __lock_acquire+0x7d80/0x7d80 [ 311.322263][ T7106] kernfs_new_node+0x14c/0x260 [ 311.327050][ T7106] kernfs_create_link+0xa7/0x200 [ 311.332003][ T7106] sysfs_do_create_link_sd+0x83/0x110 [ 311.337396][ T7106] driver_sysfs_add+0x89/0x210 [ 311.342179][ T7106] really_probe+0x13c/0xae0 [ 311.346720][ T7106] ? pm_runtime_barrier+0x14b/0x1c0 [ 311.351940][ T7106] __driver_probe_device+0x1f5/0x390 [ 311.357242][ T7106] driver_probe_device+0x4f/0x420 [ 311.362309][ T7106] __driver_attach+0x444/0x6d0 [ 311.367110][ T7106] bus_for_each_dev+0x235/0x2b0 [ 311.372116][ T7106] ? driver_attach+0x50/0x50 [ 311.376764][ T7106] ? bus_remove_file+0x140/0x140 [ 311.381762][ T7106] ? do_raw_spin_unlock+0x121/0x230 [ 311.386997][ T7106] bus_add_driver+0x340/0x630 [ 311.391723][ T7106] driver_register+0x23a/0x310 [ 311.396607][ T7106] usb_gadget_register_driver_owner+0xf9/0x270 [ 311.402791][ T7106] raw_ioctl+0x1613/0x3d80 [ 311.407260][ T7106] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 311.412937][ T7106] ? tomoyo_path_number_perm+0x217/0x5e0 [ 311.418627][ T7106] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 311.424140][ T7106] ? make_qualifier+0x260/0x260 [ 311.429067][ T7106] ? __fget_files+0x28/0x460 [ 311.433691][ T7106] ? bpf_lsm_file_ioctl+0x9/0x10 [ 311.438730][ T7106] ? security_file_ioctl+0x80/0xa0 [ 311.443887][ T7106] ? make_qualifier+0x260/0x260 [ 311.448760][ T7106] __se_sys_ioctl+0xfd/0x170 [ 311.453374][ T7106] do_syscall_64+0x55/0xb0 [ 311.457832][ T7106] ? clear_bhb_loop+0x40/0x90 [ 311.462539][ T7106] ? clear_bhb_loop+0x40/0x90 [ 311.467244][ T7106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.473156][ T7106] RIP: 0033:0x7f26bd79ddeb [ 311.477600][ T7106] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 311.497234][ T7106] RSP: 002b:00007f26be690f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.505680][ T7106] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f26bd79ddeb [ 311.513707][ T7106] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 311.521802][ T7106] RBP: 00007f26be691fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 311.529825][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.537822][ T7106] R13: 0000200000000500 R14: 0000000000000002 R15: 0000000000000000 [ 311.545822][ T7106] [ 311.667716][ T7106] really_probe: driver_sysfs_add(gadget.2) failed [ 311.692390][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.751313][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.361537][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.368029][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.138547][ T7149] syz_tun: entered allmulticast mode [ 318.235656][ T7148] syz_tun: left allmulticast mode [ 336.133283][ T7264] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 345.111734][ T7314] syz.3.313 uses obsolete (PF_INET,SOCK_PACKET) [ 345.548100][ T7320] jffs2: notice: (7320) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 345.606422][ T7311] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 352.386615][ T7360] jffs2: notice: (7360) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 353.845390][ T7371] netlink: 'syz.4.327': attribute type 1 has an invalid length. [ 354.168166][ T7373] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 358.735519][ T7400] jffs2: notice: (7400) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 361.559483][ T7427] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 361.820101][ T7436] jffs2: notice: (7436) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 367.448934][ T7475] jffs2: notice: (7475) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 372.431576][ T7499] syz.4.363 (7499): drop_caches: 2 [ 372.755036][ T7510] jffs2: notice: (7510) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 378.801598][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.808217][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.547129][ T7546] syz.3.378 (7546): drop_caches: 2 [ 382.643321][ T7556] jffs2: notice: (7556) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 382.834534][ T7556] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 389.027700][ T7595] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7596] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7595] [ 394.172212][ T7618] syz.2.398 (7618): drop_caches: 2 [ 394.405817][ T7617] jffs2: notice: (7617) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 399.626548][ T7642] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7643] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7642] [ 403.199378][ T7654] jffs2: notice: (7654) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 406.646599][ T7673] syz.0.410 (7673): drop_caches: 2 [ 409.806738][ T7698] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7699] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7698] [ 423.777101][ T7755] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7756] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7755] [ 431.936932][ T7790] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7791] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7790] [ 440.760705][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.767171][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.184451][ T5820] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 442.394467][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 442.404445][ T5820] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 442.413782][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.444416][ T5820] usb 1-1: Product: syz [ 442.450713][ T5820] usb 1-1: Manufacturer: syz [ 442.464101][ T5820] usb 1-1: SerialNumber: syz [ 442.716361][ T5820] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 442.759812][ T5820] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 442.804828][ T5820] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 442.824700][ T5820] usb 1-1: media controller created [ 444.506249][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 444.590164][ T5820] zl10353_read_register: readreg error (reg=127, ret==-71) [ 444.729127][ T5820] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 444.758938][ T5820] usb 1-1: USB disconnect, device number 3 [ 451.197449][ T7879] netlink: 'syz.2.477': attribute type 4 has an invalid length. [ 451.244307][ T7879] netlink: 17 bytes leftover after parsing attributes in process `syz.2.477'. [ 463.154759][ T7933] netlink: 'syz.0.487': attribute type 4 has an invalid length. [ 463.178690][ T7933] netlink: 17 bytes leftover after parsing attributes in process `syz.0.487'. [ 467.396012][ T7945] lo: entered allmulticast mode [ 467.478023][ T7944] lo: left allmulticast mode [ 467.924542][ T5823] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 468.149046][ T5823] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 468.174418][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.204132][ T5823] usb 1-1: Product: syz [ 468.208388][ T5823] usb 1-1: Manufacturer: syz [ 468.213054][ T5823] usb 1-1: SerialNumber: syz [ 468.701187][ T5823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 469.353492][ T5823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 471.144749][ T5823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 471.155539][ T5823] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 471.206615][ T5823] lan78xx: probe of 1-1:1.0 failed with error -32 [ 471.226665][ T5823] usb 1-1: USB disconnect, device number 4 [ 473.957595][ T7981] netlink: 'syz.3.505': attribute type 4 has an invalid length. [ 473.997289][ T7981] netlink: 17 bytes leftover after parsing attributes in process `syz.3.505'. [ 488.969611][ T8067] netlink: 'syz.4.518': attribute type 4 has an invalid length. [ 488.977528][ T8067] netlink: 17 bytes leftover after parsing attributes in process `syz.4.518'. [ 499.561795][ T8141] netlink: 'syz.4.543': attribute type 4 has an invalid length. [ 499.582958][ T8141] netlink: 17 bytes leftover after parsing attributes in process `syz.4.543'. [ 500.347802][ T969] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 500.454946][ T969] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 501.700347][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.727491][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.046086][ T5786] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 515.054894][ T5786] Bluetooth: hci3: Injecting HCI hardware error event [ 515.068780][ T5786] Bluetooth: hci3: hardware error 0x00 [ 517.623960][ T5786] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 523.494351][ T5820] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 523.705849][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 523.720863][ T5820] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 523.737129][ T5820] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 523.756804][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.794055][ T5820] usb 3-1: Product: syz [ 523.798297][ T5820] usb 3-1: Manufacturer: syz [ 523.813144][ T5820] usb 3-1: SerialNumber: syz [ 523.842352][ T5820] usb 3-1: config 0 descriptor?? [ 523.860541][ T5820] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 523.904476][ T5820] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 523.922744][ T5820] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 523.934794][ T5820] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 523.942568][ T5820] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 523.988053][ T5820] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 524.011575][ T5820] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 524.048521][ T5820] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 524.122417][ T5820] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 526.355464][ T787] usb 3-1: USB disconnect, device number 2 [ 526.401569][ T787] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 526.442968][ T787] keyspan 3-1:0.0: device disconnected [ 542.564245][ T787] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 542.759947][ T787] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 542.768363][ T787] usb 4-1: config 0 has no interface number 0 [ 542.784315][ T787] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 542.810301][ T787] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 542.830391][ T787] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 542.854233][ T787] usb 4-1: Product: syz [ 542.864542][ T787] usb 4-1: SerialNumber: syz [ 542.886472][ T787] usb 4-1: config 0 descriptor?? [ 542.902997][ T8368] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 542.928728][ T787] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 545.543845][ T787] usb 4-1: USB disconnect, device number 3 [ 555.634156][ T787] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 563.121354][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.127862][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.694205][ T787] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 564.905644][ T787] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 564.913729][ T787] usb 3-1: config 0 has no interface number 0 [ 564.934173][ T969] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 564.951985][ T787] usb 3-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 564.999791][ T787] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 565.009191][ T787] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 565.024174][ T787] usb 3-1: Product: syz [ 565.033518][ T787] usb 3-1: SerialNumber: syz [ 565.047277][ T787] usb 3-1: config 0 descriptor?? [ 565.052882][ T8463] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 565.073468][ T787] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 565.138608][ T969] usb 5-1: Using ep0 maxpacket: 8 [ 565.156588][ T969] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 565.169075][ T969] usb 5-1: config 0 has no interface number 0 [ 565.200725][ T969] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 565.233909][ T969] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 565.256363][ T969] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 565.298523][ T969] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 565.318149][ T969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.357078][ T969] usb 5-1: config 0 descriptor?? [ 565.402437][ T969] ldusb 5-1:0.55: Interrupt in endpoint not found [ 565.617234][ T969] usb 5-1: USB disconnect, device number 2 [ 567.426635][ T5820] usb 3-1: USB disconnect, device number 3 [ 575.875134][ T8518] syzkaller0: entered promiscuous mode [ 575.880695][ T8518] syzkaller0: entered allmulticast mode [ 575.977547][ T787] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 577.716744][ T787] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 577.734060][ T787] usb 5-1: config 0 has no interface number 0 [ 577.740236][ T787] usb 5-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 577.773112][ T787] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 577.787251][ T787] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 577.801700][ T787] usb 5-1: Product: syz [ 577.818521][ T787] usb 5-1: SerialNumber: syz [ 579.445685][ T787] usb 5-1: config 0 descriptor?? [ 579.588510][ T787] usb 5-1: can't set config #0, error -71 [ 579.624839][ T787] usb 5-1: USB disconnect, device number 3 [ 580.548304][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 587.039815][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 592.764637][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 599.313198][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 606.089029][ T8672] syz.2.687 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 606.773556][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 608.276750][ T969] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 610.334524][ T969] usb 3-1: Using ep0 maxpacket: 8 [ 610.863355][ T969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.874395][ T969] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 610.883510][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.913566][ T969] usb 3-1: config 0 descriptor?? [ 610.928578][ T969] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 611.009764][ T969] gspca_vc032x: reg_r err -71 [ 611.021871][ T969] vc032x: probe of 3-1:0.0 failed with error -71 [ 611.031724][ T969] usb 3-1: USB disconnect, device number 4 [ 617.259855][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 623.086461][ T969] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 623.479706][ T969] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.490163][ T969] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 623.524062][ T969] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 623.560961][ T969] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.601861][ T969] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 623.634497][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.805230][ T8747] process 'syz.0.712' launched './file1' with NULL argv: empty string added [ 624.561607][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.568166][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.791647][ T969] [drm] Initialized gud 1.0.0 20200422 for 4-1:1.0 on minor 2 [ 625.113721][ T969] gud 4-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 625.684142][ T969] usb 4-1: USB disconnect, device number 4 [ 630.336967][ T8775] syz.2.719 (8775): drop_caches: 2 [ 641.282550][ T8813] team0: entered allmulticast mode [ 641.310851][ T8813] team_slave_0: entered allmulticast mode [ 641.346877][ T8814] syz.3.731 (8814): drop_caches: 2 [ 642.164421][ T8813] team_slave_1: entered allmulticast mode [ 650.036397][ T8856] syz.0.741 (8856): drop_caches: 2 [ 654.874160][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 660.266945][ T8905] syz.4.754 (8905): drop_caches: 2 [ 671.684338][ T787] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 673.364311][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 673.389779][ T787] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 673.407995][ T787] usb 3-1: config 0 has no interface number 0 [ 673.433161][ T787] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 673.453823][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.476946][ T787] usb 3-1: Product: syz [ 673.489961][ T787] usb 3-1: Manufacturer: syz [ 673.502403][ T787] usb 3-1: SerialNumber: syz [ 673.596756][ T787] usb 3-1: config 0 descriptor?? [ 673.631614][ T787] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 674.349750][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 674.734362][ T969] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 674.855252][ T787] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 674.986085][ T969] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.072413][ T969] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 675.163695][ T969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 675.291220][ T969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 675.313025][ T787] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 675.314632][ T969] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.344417][ T787] usb 3-1: USB disconnect, device number 5 [ 675.376489][ T787] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 675.394253][ T787] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 675.407393][ T787] quatech2 3-1:0.51: device disconnected [ 675.524126][ T969] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 675.533343][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.264265][ T969] usb 5-1: Product: syz [ 678.064241][ T969] usb 5-1: Manufacturer: syz [ 678.068919][ T969] usb 5-1: SerialNumber: syz [ 678.114956][ T969] usb 5-1: config 0 descriptor?? [ 678.194202][ T969] usb 5-1: can't set config #0, error -71 [ 678.205735][ T969] usb 5-1: USB disconnect, device number 4 [ 684.301327][ T8863] Bluetooth: hci4: command 0x0406 tx timeout [ 686.846914][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.853294][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 706.354620][ T5823] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 706.586447][ T5823] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.325704][ T5823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 707.335622][ T5823] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 707.345373][ T5823] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.358542][ T5823] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 707.368713][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.472752][ T5823] gud 1-1:1.0: Failed to get connectors (error=-5) [ 708.488130][ T5823] gud: probe of 1-1:1.0 failed with error -5 [ 710.384235][ T5823] usb 1-1: USB disconnect, device number 6 [ 727.822144][ T9319] block2mtd: device name too long [ 745.727835][ T9404] FAULT_INJECTION: forcing a failure. [ 745.727835][ T9404] name fail_futex, interval 1, probability 0, space 0, times 1 [ 745.759988][ T9404] CPU: 0 PID: 9404 Comm: syz.3.877 Not tainted syzkaller #0 [ 745.767425][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 745.777560][ T9404] Call Trace: [ 745.780917][ T9404] [ 745.783911][ T9404] dump_stack_lvl+0x18c/0x250 [ 745.788733][ T9404] ? stack_trace_snprint+0xf0/0xf0 [ 745.793903][ T9404] ? show_regs_print_info+0x20/0x20 [ 745.799156][ T9404] ? load_image+0x420/0x420 [ 745.803716][ T9404] ? kasan_save_stack+0x4d/0x60 [ 745.808651][ T9404] ? __kasan_record_aux_stack+0xaf/0xc0 [ 745.814255][ T9404] ? call_rcu+0x153/0x900 [ 745.818645][ T9404] ? task_work_run+0x1d4/0x260 [ 745.823463][ T9404] ? exit_to_user_mode_loop+0xe6/0x110 [ 745.828973][ T9404] ? exit_to_user_mode_prepare+0xee/0x180 [ 745.834917][ T9404] ? syscall_exit_to_user_mode+0x1a/0x50 [ 745.840607][ T9404] should_fail_ex+0x394/0x4c0 [ 745.845390][ T9404] get_futex_key+0x136/0x1030 [ 745.850133][ T9404] ? futex_setup_timer+0xc0/0xc0 [ 745.855140][ T9404] futex_wake+0x127/0x4f0 [ 745.859527][ T9404] ? lock_chain_count+0x20/0x20 [ 745.864437][ T9404] ? futex_wake_mark+0x150/0x150 [ 745.869562][ T9404] do_futex+0x35d/0x3e0 [ 745.873794][ T9404] ? rcu_force_quiescent_state+0x220/0x220 [ 745.879703][ T9404] ? __ia32_sys_get_robust_list+0x110/0x110 [ 745.885652][ T9404] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 745.891791][ T9404] __se_sys_futex+0x3a9/0x440 [ 745.896537][ T9404] ? __x64_sys_futex+0xf0/0xf0 [ 745.901362][ T9404] ? __x64_sys_futex+0x21/0xf0 [ 745.906183][ T9404] do_syscall_64+0x55/0xb0 [ 745.910658][ T9404] ? clear_bhb_loop+0x40/0x90 [ 745.915393][ T9404] ? clear_bhb_loop+0x40/0x90 [ 745.920132][ T9404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.926089][ T9404] RIP: 0033:0x7fc827b9e159 [ 745.930553][ T9404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.950216][ T9404] RSP: 002b:00007fc828a000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 745.958689][ T9404] RAX: ffffffffffffffda RBX: 00007fc827e25fa8 RCX: 00007fc827b9e159 [ 745.966717][ T9404] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc827e25fac [ 745.974747][ T9404] RBP: 00007fc827e25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 745.982767][ T9404] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 745.990798][ T9404] R13: 00007fc827e26038 R14: 00007fff6655e3a0 R15: 00007fff6655e488 [ 745.998845][ T9404] [ 747.438386][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.444917][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.468334][ T9410] sctp: failed to load transform for md5: -2 [ 751.925825][ T969] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 752.235175][ T969] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.252979][ T969] usb 1-1: Dual-Role OTG device on HNP port [ 752.259770][ T969] usb 1-1: New USB device found, idVendor=0000, idProduct=0104, bcdDevice= 6.06 [ 752.269522][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.282512][ T969] usb 1-1: Product: HID Gadget [ 752.287719][ T969] usb 1-1: SerialNumber: 0123456789 [ 752.446078][ C0] ------------[ cut here ]------------ [ 752.451955][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 752.459297][ C0] WARNING: CPU: 0 PID: 6150 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440 [ 752.469358][ C0] Modules linked in: [ 752.473277][ C0] CPU: 0 PID: 6150 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 752.480930][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 752.491023][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 752.497304][ C0] RIP: 0010:usb_ep_enable+0x263/0x440 [ 752.502705][ C0] Code: 49 8b 0e 48 c7 c0 c0 0f 7b 8b 49 c7 c0 e0 0f 7b 8b 4c 0f 44 c0 48 c7 c7 80 0f 7b 8b 48 c7 c6 5c 27 a7 8c 89 ea e8 9d 03 95 fa <0f> 0b e9 e1 fe ff ff e8 91 3f cb fa 49 bc 00 00 00 00 00 fc ff df [ 752.522369][ C0] RSP: 0018:ffffc90000007790 EFLAGS: 00010046 [ 752.528466][ C0] RAX: a27ba844a9444b00 RBX: ffff8880252680e0 RCX: ffff888029121e00 [ 752.536458][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 752.544452][ C0] RBP: 0000000000000081 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 752.552446][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 752.560443][ C0] R13: ffff88802526810d R14: ffff8880252680e8 R15: ffff888030a05732 [ 752.568476][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 752.577430][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.584036][ C0] CR2: 000020000000f000 CR3: 00000000671df000 CR4: 00000000003506f0 [ 752.592031][ C0] Call Trace: [ 752.595337][ C0] [ 752.598202][ C0] hidg_set_alt+0x12a/0xa10 [ 752.602738][ C0] ? usb_gadget_set_state+0x12c/0x2a0 [ 752.608139][ C0] set_config+0x735/0xff0 [ 752.612506][ C0] composite_setup+0x1df4/0x33a0 [ 752.617479][ C0] configfs_composite_setup+0xc7/0x100 [ 752.622971][ C0] dummy_timer+0x1324/0x34e0 [ 752.627609][ C0] ? mark_lock+0x94/0x320 [ 752.631967][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 752.637014][ C0] ? lock_chain_count+0x20/0x20 [ 752.641907][ C0] ? dummy_free_streams+0x520/0x520 [ 752.647137][ C0] ? dummy_free_streams+0x520/0x520 [ 752.652364][ C0] __hrtimer_run_queues+0x525/0xc10 [ 752.657602][ C0] ? hrtimer_interrupt+0x980/0x980 [ 752.662771][ C0] ? read_tsc+0x9/0x20 [ 752.666881][ C0] hrtimer_run_softirq+0x177/0x290 [ 752.672025][ C0] handle_softirqs+0x27d/0x820 [ 752.676825][ C0] ? read_tsc+0x9/0x20 [ 752.680918][ C0] ? ktime_get+0x24b/0x280 [ 752.685368][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 752.690166][ C0] ? do_softirq+0x1a0/0x1a0 [ 752.694703][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 752.699937][ C0] __irq_exit_rcu+0xd3/0x190 [ 752.704553][ C0] ? irq_exit_rcu+0x20/0x20 [ 752.709106][ C0] irq_exit_rcu+0x9/0x20 [ 752.713391][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 752.719047][ C0] [ 752.721998][ C0] [ 752.724956][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 752.730982][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0xda/0xe0 [ 752.737522][ C0] Code: e3 05 4c 8d 63 28 4d 39 fc 77 9d 49 ff c6 4d 89 33 49 89 4c 1b 08 4d 89 54 1b 10 49 89 7c 1b 18 49 89 54 1b 20 eb 81 5b 41 5c <41> 5e 41 5f c3 90 66 0f 1f 00 c7 87 00 16 00 00 00 00 00 00 48 c7 [ 752.757161][ C0] RSP: 0018:ffffc90003056f60 EFLAGS: 00000246 [ 752.763263][ C0] RAX: 0000000000000002 RBX: ffffffff8f1b74fe RCX: 0000000000000003 [ 752.771259][ C0] RDX: ffffffff813bba28 RSI: ffffffff8cfa08e0 RDI: 0000000000000002 [ 752.779251][ C0] RBP: ffffc90003057098 R08: ffff888029121e00 R09: 0000000000000002 [ 752.787264][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8f1b7503 [ 752.795263][ C0] R13: ffffc90003057048 R14: 0000000000000002 R15: dffffc0000000000 [ 752.803273][ C0] ? unwind_next_frame+0x658/0x2990 [ 752.808508][ C0] unwind_next_frame+0x658/0x2990 [ 752.813563][ C0] ? __kasan_kmalloc+0x8e/0xa0 [ 752.818361][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 752.823162][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 752.827951][ C0] ? stack_trace_save+0x100/0x100 [ 752.833009][ C0] arch_stack_walk+0x144/0x190 [ 752.837814][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 752.842615][ C0] stack_trace_save+0xaa/0x100 [ 752.847414][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 752.852561][ C0] ? unwind_next_frame+0x224f/0x2990 [ 752.857876][ C0] kasan_set_track+0x4e/0x70 [ 752.862503][ C0] ? kasan_set_track+0x4e/0x70 [ 752.867294][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 752.872146][ C0] ? cfg80211_inform_bss_frame_data+0x79d/0x1330 [ 752.878513][ C0] __kasan_kmalloc+0x8f/0xa0 [ 752.883132][ C0] ? cfg80211_inform_bss_frame_data+0x79d/0x1330 [ 752.889490][ C0] __kmalloc+0xb7/0x240 [ 752.893681][ C0] cfg80211_inform_bss_frame_data+0x79d/0x1330 [ 752.899877][ C0] ? cfg80211_parse_ml_sta_data+0x1a80/0x1a80 [ 752.906004][ C0] ? ieee80211_bss_info_update+0x387/0x9f0 [ 752.911843][ C0] ? ieee80211_bss_info_update+0x387/0x9f0 [ 752.917681][ C0] ieee80211_bss_info_update+0x789/0x9f0 [ 752.923351][ C0] ? ieee80211_inform_bss+0xfd0/0xfd0 [ 752.928782][ C0] ? ieee80211_mandatory_rates+0x1cc/0x230 [ 752.934626][ C0] ieee80211_ibss_rx_queued_mgmt+0x18f5/0x2dc0 [ 752.940830][ C0] ? verify_lock_unused+0x140/0x140 [ 752.946074][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xecc/0x2dc0 [ 752.952348][ C0] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 752.958128][ C0] ? mark_lock+0x94/0x320 [ 752.962484][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 752.968489][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 752.973563][ C0] ? lock_chain_count+0x20/0x20 [ 752.978437][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 752.984478][ C0] ? kcov_remote_start+0x8b/0x810 [ 752.989569][ C0] ? skb_dequeue+0x124/0x160 [ 752.994243][ C0] ieee80211_iface_work+0x730/0xc90 [ 752.999490][ C0] cfg80211_wiphy_work+0x228/0x260 [ 753.004645][ C0] ? process_scheduled_works+0x975/0x1600 [ 753.010411][ C0] process_scheduled_works+0xa60/0x1600 [ 753.016047][ C0] ? worker_attach_to_pool+0x370/0x370 [ 753.021545][ C0] ? assign_work+0x3cc/0x5d0 [ 753.026181][ C0] worker_thread+0xa5e/0xfe0 [ 753.030846][ C0] kthread+0x2fa/0x390 [ 753.035146][ C0] ? pr_cont_work+0x550/0x550 [ 753.039880][ C0] ? kthread_blkcg+0xd0/0xd0 [ 753.044515][ C0] ret_from_fork+0x48/0x80 [ 753.048992][ C0] ? kthread_blkcg+0xd0/0xd0 [ 753.053626][ C0] ret_from_fork_asm+0x11/0x20 [ 753.058442][ C0] [ 753.061487][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 753.068789][ C0] CPU: 0 PID: 6150 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 753.076618][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 753.086696][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 753.092977][ C0] Call Trace: [ 753.096284][ C0] [ 753.099147][ C0] dump_stack_lvl+0x18c/0x250 [ 753.103852][ C0] ? show_regs_print_info+0x20/0x20 [ 753.109120][ C0] ? load_image+0x420/0x420 [ 753.113683][ C0] panic+0x2ca/0x720 [ 753.117632][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 753.122183][ C0] ? ret_from_fork_asm+0x11/0x20 [ 753.127170][ C0] __warn+0x2e0/0x470 [ 753.131190][ C0] ? usb_ep_enable+0x263/0x440 [ 753.135998][ C0] ? usb_ep_enable+0x263/0x440 [ 753.140819][ C0] report_bug+0x2be/0x4f0 [ 753.145190][ C0] ? usb_ep_enable+0x263/0x440 [ 753.150005][ C0] ? usb_ep_enable+0x263/0x440 [ 753.154806][ C0] ? usb_ep_enable+0x265/0x440 [ 753.159946][ C0] handle_bug+0xcf/0x120 [ 753.164229][ C0] exc_invalid_op+0x1a/0x50 [ 753.168777][ C0] asm_exc_invalid_op+0x1a/0x20 [ 753.173662][ C0] RIP: 0010:usb_ep_enable+0x263/0x440 [ 753.179080][ C0] Code: 49 8b 0e 48 c7 c0 c0 0f 7b 8b 49 c7 c0 e0 0f 7b 8b 4c 0f 44 c0 48 c7 c7 80 0f 7b 8b 48 c7 c6 5c 27 a7 8c 89 ea e8 9d 03 95 fa <0f> 0b e9 e1 fe ff ff e8 91 3f cb fa 49 bc 00 00 00 00 00 fc ff df [ 753.198734][ C0] RSP: 0018:ffffc90000007790 EFLAGS: 00010046 [ 753.204837][ C0] RAX: a27ba844a9444b00 RBX: ffff8880252680e0 RCX: ffff888029121e00 [ 753.212840][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 753.220832][ C0] RBP: 0000000000000081 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 753.228831][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 753.236839][ C0] R13: ffff88802526810d R14: ffff8880252680e8 R15: ffff888030a05732 [ 753.244898][ C0] hidg_set_alt+0x12a/0xa10 [ 753.249445][ C0] ? usb_gadget_set_state+0x12c/0x2a0 [ 753.254864][ C0] set_config+0x735/0xff0 [ 753.259238][ C0] composite_setup+0x1df4/0x33a0 [ 753.264213][ C0] configfs_composite_setup+0xc7/0x100 [ 753.269707][ C0] dummy_timer+0x1324/0x34e0 [ 753.274356][ C0] ? mark_lock+0x94/0x320 [ 753.278718][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 753.283761][ C0] ? lock_chain_count+0x20/0x20 [ 753.288651][ C0] ? dummy_free_streams+0x520/0x520 [ 753.293919][ C0] ? dummy_free_streams+0x520/0x520 [ 753.299151][ C0] __hrtimer_run_queues+0x525/0xc10 [ 753.304463][ C0] ? hrtimer_interrupt+0x980/0x980 [ 753.309620][ C0] ? read_tsc+0x9/0x20 [ 753.313827][ C0] hrtimer_run_softirq+0x177/0x290 [ 753.318981][ C0] handle_softirqs+0x27d/0x820 [ 753.323766][ C0] ? read_tsc+0x9/0x20 [ 753.327858][ C0] ? ktime_get+0x24b/0x280 [ 753.332306][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 753.337180][ C0] ? do_softirq+0x1a0/0x1a0 [ 753.341720][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 753.346949][ C0] __irq_exit_rcu+0xd3/0x190 [ 753.351577][ C0] ? irq_exit_rcu+0x20/0x20 [ 753.356111][ C0] irq_exit_rcu+0x9/0x20 [ 753.360372][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 753.366026][ C0] [ 753.368996][ C0] [ 753.371967][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 753.378016][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0xda/0xe0 [ 753.384561][ C0] Code: e3 05 4c 8d 63 28 4d 39 fc 77 9d 49 ff c6 4d 89 33 49 89 4c 1b 08 4d 89 54 1b 10 49 89 7c 1b 18 49 89 54 1b 20 eb 81 5b 41 5c <41> 5e 41 5f c3 90 66 0f 1f 00 c7 87 00 16 00 00 00 00 00 00 48 c7 [ 753.404198][ C0] RSP: 0018:ffffc90003056f60 EFLAGS: 00000246 [ 753.410291][ C0] RAX: 0000000000000002 RBX: ffffffff8f1b74fe RCX: 0000000000000003 [ 753.418292][ C0] RDX: ffffffff813bba28 RSI: ffffffff8cfa08e0 RDI: 0000000000000002 [ 753.426282][ C0] RBP: ffffc90003057098 R08: ffff888029121e00 R09: 0000000000000002 [ 753.434288][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8f1b7503 [ 753.442282][ C0] R13: ffffc90003057048 R14: 0000000000000002 R15: dffffc0000000000 [ 753.450294][ C0] ? unwind_next_frame+0x658/0x2990 [ 753.455555][ C0] unwind_next_frame+0x658/0x2990 [ 753.460605][ C0] ? __kasan_kmalloc+0x8e/0xa0 [ 753.466004][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 753.470790][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 753.475581][ C0] ? stack_trace_save+0x100/0x100 [ 753.480630][ C0] arch_stack_walk+0x144/0x190 [ 753.485425][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 753.490220][ C0] stack_trace_save+0xaa/0x100 [ 753.495022][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 753.500169][ C0] ? unwind_next_frame+0x224f/0x2990 [ 753.505486][ C0] kasan_set_track+0x4e/0x70 [ 753.510450][ C0] ? kasan_set_track+0x4e/0x70 [ 753.515237][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 753.520063][ C0] ? cfg80211_inform_bss_frame_data+0x79d/0x1330 [ 753.526422][ C0] __kasan_kmalloc+0x8f/0xa0 [ 753.531056][ C0] ? cfg80211_inform_bss_frame_data+0x79d/0x1330 [ 753.537410][ C0] __kmalloc+0xb7/0x240 [ 753.541597][ C0] cfg80211_inform_bss_frame_data+0x79d/0x1330 [ 753.547788][ C0] ? cfg80211_parse_ml_sta_data+0x1a80/0x1a80 [ 753.553919][ C0] ? ieee80211_bss_info_update+0x387/0x9f0 [ 753.559757][ C0] ? ieee80211_bss_info_update+0x387/0x9f0 [ 753.565589][ C0] ieee80211_bss_info_update+0x789/0x9f0 [ 753.571249][ C0] ? ieee80211_inform_bss+0xfd0/0xfd0 [ 753.576652][ C0] ? ieee80211_mandatory_rates+0x1cc/0x230 [ 753.582482][ C0] ieee80211_ibss_rx_queued_mgmt+0x18f5/0x2dc0 [ 753.588666][ C0] ? verify_lock_unused+0x140/0x140 [ 753.593904][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xecc/0x2dc0 [ 753.600185][ C0] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 753.605967][ C0] ? mark_lock+0x94/0x320 [ 753.610327][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 753.616350][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 753.621419][ C0] ? lock_chain_count+0x20/0x20 [ 753.626293][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 753.632220][ C0] ? kcov_remote_start+0x8b/0x810 [ 753.637272][ C0] ? skb_dequeue+0x124/0x160 [ 753.641900][ C0] ieee80211_iface_work+0x730/0xc90 [ 753.647167][ C0] cfg80211_wiphy_work+0x228/0x260 [ 753.652318][ C0] ? process_scheduled_works+0x975/0x1600 [ 753.658072][ C0] process_scheduled_works+0xa60/0x1600 [ 753.663673][ C0] ? worker_attach_to_pool+0x370/0x370 [ 753.669165][ C0] ? assign_work+0x3cc/0x5d0 [ 753.673785][ C0] worker_thread+0xa5e/0xfe0 [ 753.678422][ C0] kthread+0x2fa/0x390 [ 753.682515][ C0] ? pr_cont_work+0x550/0x550 [ 753.687222][ C0] ? kthread_blkcg+0xd0/0xd0 [ 753.691835][ C0] ret_from_fork+0x48/0x80 [ 753.696276][ C0] ? kthread_blkcg+0xd0/0xd0 [ 753.700888][ C0] ret_from_fork_asm+0x11/0x20 [ 753.705690][ C0] [ 753.708992][ C0] Kernel Offset: disabled [ 753.713411][ C0] Rebooting in 86400 seconds..