last executing test programs: 15.419314381s ago: executing program 4 (id=398): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='never', 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0xc00, 0x4a) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0xd0000000, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x400000, 0x4000, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x4000, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x3, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3, 0xfffffffe}, {0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x26, 0x2}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000, 0x200000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0x4e}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {0x1}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x402}, {}, {0x0, 0x2, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x9, 0x5, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {0xfff}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x7619, 0x0, 0x6}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x3, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffe}], [{0x3}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {0x749eb9ae44d9651f}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {0x3}, {}, {0x1}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x8, 0x1}, {}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3}, {}, {0x5}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=""/135, 0x87}, 0x40002101) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000010129000009054f"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$cgroup_pid(r5, &(0x7f0000000000), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 12.855061935s ago: executing program 3 (id=402): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r2, 0x0, r3, 0x0, 0x0, &(0x7f0000000480)) shmctl$IPC_RMID(0x0, 0x0) r4 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r5, r5}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}}) 11.179203546s ago: executing program 4 (id=406): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 10.044364052s ago: executing program 2 (id=409): capset(0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x88, 0xfffffffffffffebe, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92") 7.295760459s ago: executing program 0 (id=411): r0 = io_uring_setup(0x165, &(0x7f0000000180)={0x0, 0xd9eb, 0x40, 0x10000003, 0x400015f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000580), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x25, 0x0, 0x2) 7.130552742s ago: executing program 4 (id=412): creat(&(0x7f0000000000)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xb, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(0xffffffffffffffff, &(0x7f0000002a80)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCCONS(r2, 0x541d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', 0x0, &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/dev0/zoned\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/dev0/power\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n\x00', 0x2) close(r4) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.129307322s ago: executing program 3 (id=413): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x80a, 0x7, 0x4, 0x7, 0x5, 0x3, 0x7, 0x47, 0x14, 0x9, 0x7e4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.058223402s ago: executing program 0 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2, &(0x7f0000000000)=0x80000000000003) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 5.519848533s ago: executing program 0 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') 5.502642868s ago: executing program 1 (id=416): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) 5.283216361s ago: executing program 4 (id=417): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x0, @broadcast}, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r3, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 4.375620774s ago: executing program 0 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}}, 0x20000000) 4.015838184s ago: executing program 1 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 3.858783706s ago: executing program 3 (id=420): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) close(r0) 3.830778101s ago: executing program 2 (id=421): syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x20000) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000380)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8f13, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x611, 0x0, 0x0, 0x1000, 0xd3, 0x0, 0x0, 0x21}}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r4, &(0x7f0000000340)=""/19, 0x13, 0x0) 3.683845287s ago: executing program 1 (id=422): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400c800}, 0x40) 3.53899745s ago: executing program 1 (id=423): mkdirat(0xffffffffffffffff, 0x0, 0x18e) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) 3.475822711s ago: executing program 3 (id=424): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.241226015s ago: executing program 1 (id=425): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='never', 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0xc00, 0x4a) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0xd0000000, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x400000, 0x4000, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x4000, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x3, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3, 0xfffffffe}, {0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x26, 0x2}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000, 0x200000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0x4e}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {0x1}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x402}, {}, {0x0, 0x2, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x9, 0x5, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {0xfff}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x7619, 0x0, 0x6}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x3, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffe}], [{0x3}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {0x749eb9ae44d9651f}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {0x3}, {}, {0x1}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x8, 0x1}, {}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3}, {}, {0x5}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=""/135, 0x87}, 0x40002101) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000010129000009054f"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$cgroup_pid(r5, &(0x7f0000000000), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.877869377s ago: executing program 2 (id=426): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d", 0x44}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0xb00, &(0x7f0000000000)={0x0}}, 0x0) 2.698257115s ago: executing program 4 (id=427): creat(&(0x7f0000000000)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xb, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(0xffffffffffffffff, &(0x7f0000002a80)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCCONS(r2, 0x541d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/dev0/zoned\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/dev0/power\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n\x00', 0x2) close(r4) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.230269514s ago: executing program 0 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') 2.083146769s ago: executing program 2 (id=429): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, 0x0, 0x0) 1.970192721s ago: executing program 2 (id=430): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000002600"], 0x18}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000002c0)={'raw\x00', 0x0, [0x7, 0x3, 0xe, 0x5, 0x28]}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x6, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1.078533062s ago: executing program 0 (id=431): capset(0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x6, 0x0, 0x0) 906.85735ms ago: executing program 4 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 810.803927ms ago: executing program 3 (id=433): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400c800}, 0x40) 467.202809ms ago: executing program 1 (id=434): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r2, 0x5}, &(0x7f00000002c0)=0x8) 138.302081ms ago: executing program 2 (id=435): mkdirat(0xffffffffffffffff, 0x0, 0x18e) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) 0s ago: executing program 3 (id=436): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xd, &(0x7f00000000c0)=""/13, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 82.304759][ T5577] cgroup: Unknown subsys name 'net' [ 82.524487][ T5577] cgroup: Unknown subsys name 'cpuset' [ 82.579707][ T5577] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.395711][ T5577] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.355857][ T4906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.377288][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.378460][ T5599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.401232][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.406492][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.417418][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.423668][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.425073][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.427791][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.442297][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.444887][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.445663][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.464418][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.470885][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.475606][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.481174][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.574000][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.587721][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.610592][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.614938][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.757256][ T5595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.776946][ T5595] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.778165][ T5595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.798133][ T5595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.810704][ T5595] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.679757][ T5607] Bluetooth: hci1: command tx timeout [ 90.759241][ T5607] Bluetooth: hci4: command tx timeout [ 90.759343][ T5607] Bluetooth: hci3: command tx timeout [ 90.759415][ T5607] Bluetooth: hci0: command tx timeout [ 90.849067][ T5595] Bluetooth: hci2: command tx timeout [ 90.929334][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.930094][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.930238][ T5589] bridge_slave_0: entered allmulticast mode [ 90.932241][ T5589] bridge_slave_0: entered promiscuous mode [ 91.005205][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.005308][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.005449][ T5589] bridge_slave_1: entered allmulticast mode [ 91.007385][ T5589] bridge_slave_1: entered promiscuous mode [ 91.187867][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.188171][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.188284][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.190273][ T5592] bridge_slave_0: entered allmulticast mode [ 91.197040][ T5592] bridge_slave_0: entered promiscuous mode [ 91.233749][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.233896][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.234057][ T5590] bridge_slave_0: entered allmulticast mode [ 91.236024][ T5590] bridge_slave_0: entered promiscuous mode [ 91.272627][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.272936][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.273042][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.273152][ T5592] bridge_slave_1: entered allmulticast mode [ 91.275004][ T5592] bridge_slave_1: entered promiscuous mode [ 91.323757][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.323875][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.324198][ T5590] bridge_slave_1: entered allmulticast mode [ 91.325959][ T5590] bridge_slave_1: entered promiscuous mode [ 91.524593][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.524756][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.524874][ T5591] bridge_slave_0: entered allmulticast mode [ 91.526745][ T5591] bridge_slave_0: entered promiscuous mode [ 91.563713][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.563820][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.563964][ T5588] bridge_slave_0: entered allmulticast mode [ 91.565827][ T5588] bridge_slave_0: entered promiscuous mode [ 91.571153][ T5589] team0: Port device team_slave_0 added [ 91.601399][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.601943][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.602117][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.602280][ T5591] bridge_slave_1: entered allmulticast mode [ 91.604166][ T5591] bridge_slave_1: entered promiscuous mode [ 91.607995][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.608208][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.608333][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.629584][ T5588] bridge_slave_1: entered allmulticast mode [ 91.635753][ T5588] bridge_slave_1: entered promiscuous mode [ 91.656583][ T5589] team0: Port device team_slave_1 added [ 91.677334][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.711991][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.837877][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.863876][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.865417][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.865427][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.865447][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.871450][ T5592] team0: Port device team_slave_0 added [ 91.893047][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.901579][ T5590] team0: Port device team_slave_0 added [ 91.917876][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.923652][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.923685][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.923756][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.933082][ T5592] team0: Port device team_slave_1 added [ 92.024375][ T10] cfg80211: failed to load regulatory.db [ 92.025006][ T5590] team0: Port device team_slave_1 added [ 92.143260][ T5591] team0: Port device team_slave_0 added [ 92.145327][ T5588] team0: Port device team_slave_0 added [ 92.146999][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.147009][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.147025][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.148094][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.148106][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.148129][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.250595][ T5591] team0: Port device team_slave_1 added [ 92.252500][ T5588] team0: Port device team_slave_1 added [ 92.275870][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.275879][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.275895][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.276778][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.276787][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.276805][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.448304][ T5589] hsr_slave_0: entered promiscuous mode [ 92.455080][ T5589] hsr_slave_1: entered promiscuous mode [ 92.464459][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.464489][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.464553][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.759010][ T5595] Bluetooth: hci1: command tx timeout [ 92.839273][ T5595] Bluetooth: hci0: command tx timeout [ 92.839303][ T5595] Bluetooth: hci3: command tx timeout [ 92.839323][ T5595] Bluetooth: hci4: command tx timeout [ 92.919021][ T5607] Bluetooth: hci2: command tx timeout [ 92.980623][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.980636][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.980655][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.984191][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.984201][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.984223][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.986617][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.986627][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.986644][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.193434][ T5590] hsr_slave_0: entered promiscuous mode [ 93.194350][ T5590] hsr_slave_1: entered promiscuous mode [ 93.194952][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 93.195022][ T5590] Cannot create hsr debugfs directory [ 93.216652][ T5592] hsr_slave_0: entered promiscuous mode [ 93.221556][ T5592] hsr_slave_1: entered promiscuous mode [ 93.230238][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 93.230292][ T5592] Cannot create hsr debugfs directory [ 93.354843][ T5591] hsr_slave_0: entered promiscuous mode [ 93.355765][ T5591] hsr_slave_1: entered promiscuous mode [ 93.356349][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 93.356370][ T5591] Cannot create hsr debugfs directory [ 93.392811][ T5588] hsr_slave_0: entered promiscuous mode [ 93.393728][ T5588] hsr_slave_1: entered promiscuous mode [ 93.394372][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 93.394396][ T5588] Cannot create hsr debugfs directory [ 94.227693][ T5589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.271105][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.283913][ T5589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.304551][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.307777][ T5589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.333545][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.359813][ T5589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.393028][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.492734][ T5590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.533664][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.537870][ T5590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.564122][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.567376][ T5590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.601801][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.633459][ T5590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.664224][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.802951][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.838994][ T5607] Bluetooth: hci1: command tx timeout [ 94.842368][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.847669][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.886844][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.897496][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.913606][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.919426][ T5607] Bluetooth: hci4: command tx timeout [ 94.919456][ T5607] Bluetooth: hci0: command tx timeout [ 94.919456][ T5595] Bluetooth: hci3: command tx timeout [ 94.975546][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.999571][ T5598] Bluetooth: hci2: command tx timeout [ 95.004372][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.151567][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.183606][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.204510][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.244557][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.254199][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.274412][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.299664][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.333606][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.461992][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.462366][ T5588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.502812][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.516860][ T5588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.543880][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.548634][ T5588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.582319][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.596652][ T5588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.624985][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.679812][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.728562][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.744308][ T3282] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.744697][ T3282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.793186][ T1431] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.793319][ T1431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.883006][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.906499][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.938001][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.938167][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.996041][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.996118][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.060123][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.097292][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.114483][ T1431] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.114618][ T1431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.167387][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.167573][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.285657][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.335403][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.363495][ T1431] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.363631][ T1431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.432634][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.432740][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.522701][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.577888][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.578001][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.674710][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.674837][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.918990][ T5598] Bluetooth: hci1: command tx timeout [ 96.999008][ T5607] Bluetooth: hci4: command tx timeout [ 96.999038][ T5607] Bluetooth: hci0: command tx timeout [ 96.999085][ T5598] Bluetooth: hci3: command tx timeout [ 97.079007][ T5595] Bluetooth: hci2: command tx timeout [ 97.388007][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.449930][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.997337][ T5590] veth0_vlan: entered promiscuous mode [ 98.062859][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.137020][ T5590] veth1_vlan: entered promiscuous mode [ 98.271791][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.352952][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.358829][ T5590] veth0_macvtap: entered promiscuous mode [ 98.403617][ T5590] veth1_macvtap: entered promiscuous mode [ 98.431864][ T5591] veth0_vlan: entered promiscuous mode [ 98.514856][ T5589] veth0_vlan: entered promiscuous mode [ 98.535675][ T5591] veth1_vlan: entered promiscuous mode [ 98.562895][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.609906][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.610081][ T5592] veth0_vlan: entered promiscuous mode [ 98.612652][ T5589] veth1_vlan: entered promiscuous mode [ 98.675967][ T5592] veth1_vlan: entered promiscuous mode [ 98.712151][ T5588] veth0_vlan: entered promiscuous mode [ 98.857356][ T5591] veth0_macvtap: entered promiscuous mode [ 98.878603][ T5588] veth1_vlan: entered promiscuous mode [ 99.016659][ T5591] veth1_macvtap: entered promiscuous mode [ 99.104719][ T5589] veth0_macvtap: entered promiscuous mode [ 99.148137][ T5589] veth1_macvtap: entered promiscuous mode [ 99.188019][ T5592] veth0_macvtap: entered promiscuous mode [ 99.199072][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.236067][ T3282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.236088][ T3282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.236260][ T5592] veth1_macvtap: entered promiscuous mode [ 99.283444][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.355386][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.397777][ T5588] veth0_macvtap: entered promiscuous mode [ 99.420799][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.428969][ T785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.428989][ T785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.511728][ T5588] veth1_macvtap: entered promiscuous mode [ 99.567549][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.665805][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.061151][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.134324][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.192110][ T37] audit: type=1326 audit(1787663995.278:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b57ce0d9 code=0x7ffc0000 [ 100.192156][ T37] audit: type=1326 audit(1787663995.278:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b57ce0d9 code=0x7ffc0000 [ 100.256804][ T37] audit: type=1326 audit(1787663995.278:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b57ce0d9 code=0x7ffc0000 [ 100.256860][ T37] audit: type=1326 audit(1787663995.338:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b57ce0d9 code=0x7ffc0000 [ 100.256896][ T37] audit: type=1326 audit(1787663995.338:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fe9b57ce0d9 code=0x7ffc0000 [ 100.256931][ T37] audit: type=1326 audit(1787663995.338:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b57ce0d9 code=0x7ffc0000 [ 100.256966][ T37] audit: type=1326 audit(1787663995.338:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b57ce0d9 code=0x7ffc0000 [ 100.257004][ T37] audit: type=1326 audit(1787663995.338:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe9b57ce0d9 code=0x7ffc0000 [ 100.257042][ T37] audit: type=1326 audit(1787663995.338:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5784 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe9b57ce0d9 code=0x7ffc0000 [ 100.869901][ T785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.869921][ T785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.320741][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.320764][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.496307][ T785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.496324][ T785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.160899][ T1431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.160913][ T1431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.406657][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.406676][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.742596][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.742614][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.959974][ T3100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.097421][ T3100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.097442][ T3100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.282491][ T785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.282511][ T785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.592339][ T162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.729130][ T785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.730544][ T785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.023645][ T3282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.027063][ T3282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.027270][ T3282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.214446][ T5809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.578875][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.579205][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.579448][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.579687][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.960053][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.960262][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.960435][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.960595][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.960853][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.961065][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.961227][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.366137][ T1431] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.404918][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.175433][ T5703] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.537120][ T5703] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.645752][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.645780][ T5703] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.645802][ T5703] usb 4-1: config 1 has no interface number 0 [ 108.645873][ T5703] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.645903][ T5703] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 108.645938][ T5703] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.662619][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.662685][ T5703] usb 4-1: Product: syz [ 108.662720][ T5703] usb 4-1: Manufacturer: syz [ 108.662788][ T5703] usb 4-1: SerialNumber: syz [ 110.331134][ T5703] cdc_ncm 4-1:1.1: bind() failure [ 110.691850][ T5582] usb 4-1: USB disconnect, device number 2 [ 112.028806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.048803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.058811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.068809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.078802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.088802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.098801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.108800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.118801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.128822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.890001][ T5884] mmap: syz.2.32 (5884) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.005123][ T5902] batman_adv: batadv0: Adding interface: veth0 [ 117.005140][ T5902] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.005170][ T5902] batman_adv: batadv0: Interface activated: veth0 [ 117.115309][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.115329][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.274961][ T5914] Zero length message leads to an empty skb [ 117.280593][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.280620][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.352714][ T5902] batman_adv: batadv0: Interface deactivated: veth0 [ 117.352732][ T5902] batman_adv: batadv0: Removing interface: veth0 [ 120.790305][ T5958] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 120.833474][ T5958] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 126.959127][ T5793] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.555750][ T5793] usb 2-1: device descriptor read/64, error -71 [ 128.878917][ T5793] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.008888][ T5793] usb 2-1: device descriptor read/64, error -71 [ 129.119150][ T5793] usb usb2-port1: attempt power cycle [ 131.698869][ T5793] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.858860][ T5793] usb 1-1: device descriptor read/64, error -71 [ 132.121171][ T5793] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.151251][ T5793] usb 1-1: device descriptor read/64, error -71 [ 133.197817][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.197881][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.264439][ T5793] usb usb1-port1: attempt power cycle [ 133.670399][ T5793] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.702639][ T5793] usb 1-1: device descriptor read/8, error -71 [ 133.865716][ T6099] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 133.940156][ T5793] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.974544][ T5793] usb 1-1: device descriptor read/8, error -71 [ 134.108642][ T5793] usb usb1-port1: unable to enumerate USB device [ 134.865495][ T6106] Config c/1 of g1 needs at least one function. [ 134.865863][ T6106] udc dummy_udc.0: failed to start g1: -22 [ 134.865886][ T6106] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 135.335157][ T6106] UDC core: g1: couldn't find an available UDC or it's busy [ 135.356558][ T6113] fuse: fd is not a fuse device [ 139.598393][ T6159] fuse: fd is not a fuse device [ 141.269321][ T6156] configfs-gadget.g1 gadget.0: HOST MAC 6a:fd:66:9c:dd:6b [ 141.269344][ T6156] configfs-gadget.g1 gadget.0: MAC 06:bc:07:97:78:1a [ 143.200879][ T5600] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.349550][ T5600] usb 1-1: New USB device found, idVendor=0052, idProduct=a4a1, bcdDevice= 7.02 [ 143.351655][ T5600] usb 1-1: Dual-Role OTG device on HNP port [ 143.351975][ T5600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.737882][ T5600] usb 1-1: No union descriptors [ 143.835317][ T5600] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.956321][ T6232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.838865][ T5600] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.986735][ T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 153.128827][ T5600] usb 2-1: Using ep0 maxpacket: 32 [ 153.129647][ T5600] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 153.131079][ T5600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.131105][ T5600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.131140][ T5600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.308948][ T31] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 153.310223][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 153.310251][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 153.315677][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.315698][ T31] usb 3-1: Product: syz [ 153.315712][ T31] usb 3-1: Manufacturer: syz [ 153.315744][ T31] usb 3-1: SerialNumber: syz [ 153.386973][ T5600] usb 2-1: config 0 descriptor?? [ 153.703361][ T5600] hub 2-1:0.0: USB hub found [ 154.027955][ T6373] bridge1: entered promiscuous mode [ 154.456653][ T31] usb 3-1: config 0 descriptor?? [ 154.519805][ T5600] hub 2-1:0.0: 1 port detected [ 155.772564][ T5600] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 155.772581][ T5600] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 155.952031][ T5600] usbhid 2-1:0.0: can't add hid device: -71 [ 155.952119][ T5600] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 156.154522][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 156.291173][ T5600] usb 2-1: USB disconnect, device number 5 [ 160.305864][ T31] usb 3-1: USB disconnect, device number 2 [ 160.657025][ T5826] udevd[5826]: setting mode of /dev/mixer5 to 020660 failed: No such file or directory [ 160.657182][ T5826] udevd[5826]: setting owner of /dev/mixer5 to uid=0, gid=29 failed: No such file or directory [ 161.592504][ T6397] usb 1-1: USB disconnect, device number 6 [ 161.633687][ T6411] fuse: fd is not a fuse device [ 169.083401][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 169.740674][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 169.741574][ T31] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 169.743374][ T31] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 169.748158][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.748180][ T31] usb 3-1: Product: syz [ 169.748193][ T31] usb 3-1: Manufacturer: syz [ 169.748207][ T31] usb 3-1: SerialNumber: syz [ 170.106737][ T31] usb 3-1: selecting invalid altsetting 1 [ 170.300792][ T31] LME2510(C): Firmware Status: 1a 03 34 00 32 00 [ 170.300918][ T31] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 170.605277][ T31] usb 3-1: USB disconnect, device number 3 [ 170.637462][ T6476] usb usb7: check_ctrlrecip: process 6476 (syz.4.194) requesting ep 01 but needs 81 [ 174.445104][ T6534] usb usb7: check_ctrlrecip: process 6534 (syz.0.209) requesting ep 01 but needs 81 [ 180.996437][ T6594] usb usb7: check_ctrlrecip: process 6594 (syz.4.225) requesting ep 01 but needs 81 [ 185.809864][ T6642] usb usb7: check_ctrlrecip: process 6642 (syz.3.239) requesting ep 01 but needs 81 [ 191.898840][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 194.305937][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.306012][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.420548][ T10] usb 3-1: device descriptor read/all, error -71 [ 194.576260][ T5596] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 196.881899][ T5596] usb 1-1: New USB device found, idVendor=0052, idProduct=a4a1, bcdDevice= 7.02 [ 196.885014][ T5596] usb 1-1: Dual-Role OTG device on HNP port [ 196.885339][ T5596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.928835][ T5582] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 197.010588][ T5596] usb 1-1: No union descriptors [ 197.053499][ T5596] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.091272][ T5582] usb 5-1: Using ep0 maxpacket: 32 [ 197.097729][ T5582] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 197.122981][ T5582] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 197.162973][ T5582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.162996][ T5582] usb 5-1: Product: syz [ 197.163009][ T5582] usb 5-1: Manufacturer: syz [ 197.163022][ T5582] usb 5-1: SerialNumber: syz [ 199.528468][ T5582] usb 5-1: selecting invalid altsetting 1 [ 199.529259][ T5582] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 199.529447][ T5582] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 199.729320][ T5582] usb 5-1: USB disconnect, device number 2 [ 201.933809][ T6751] udevd[6751]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 202.073004][ T5823] udevd[5823]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 204.813918][ T5582] usb 1-1: USB disconnect, device number 7 [ 204.925211][ T6776] fuse: fd is not a fuse device [ 206.070260][ T6795] jffs2: notice: (6795) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 207.401865][ T5723] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 208.547330][ T5723] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 208.598541][ T5723] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.598595][ T5723] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 208.598617][ T5723] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 208.598651][ T5723] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.598689][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.751778][ T6826] Bluetooth: hci3: command 0x0406 tx timeout [ 211.828333][ T5599] Bluetooth: hci1: command 0x0406 tx timeout [ 211.833905][ T6826] Bluetooth: hci4: command 0x0406 tx timeout [ 211.838329][ T6826] Bluetooth: hci0: command 0x0406 tx timeout [ 212.286292][ T5582] usb 3-1: USB disconnect, device number 6 [ 214.171351][ T6865] netlink: 444 bytes leftover after parsing attributes in process `syz.1.294'. [ 218.280768][ T6874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.543545][ T6901] syz.2.303 uses obsolete (PF_INET,SOCK_PACKET) [ 223.155538][ T6949] CIFS: Attempting to mount //127.0.0.1/share [ 224.755791][ T6949] CIFS: VFS: Error connecting to socket. Aborting operation. [ 224.755959][ T6949] CIFS: VFS: cifs_mount failed w/return code = -4 [ 226.622958][ T6397] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 226.768894][ T6397] usb 3-1: Using ep0 maxpacket: 16 [ 226.774054][ T6397] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 226.778679][ T6397] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 226.808880][ T6397] usb 3-1: config 0 has no interface number 0 [ 226.808936][ T6397] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 226.808970][ T6397] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 226.815697][ T6397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.815719][ T6397] usb 3-1: Product: syz [ 226.815731][ T6397] usb 3-1: Manufacturer: syz [ 226.815744][ T6397] usb 3-1: SerialNumber: syz [ 226.889936][ T6397] usb 3-1: config 0 descriptor?? [ 226.892482][ T6978] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 226.893009][ T6978] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 227.110083][ T6978] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 227.112009][ T6978] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 227.353898][ T6397] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 227.419037][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 227.822366][ T6397] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 227.822523][ T6397] asix 3-1:0.34: probe with driver asix failed with error -61 [ 228.064705][ T6982] bond1: option ad_select: invalid value (6) [ 228.435287][ T6982] bond1 (unregistering): Released all slaves [ 230.026851][ T5582] usb 3-1: USB disconnect, device number 7 [ 235.548878][ T6397] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 235.867334][ T6397] usb 3-1: Using ep0 maxpacket: 16 [ 235.886821][ T6397] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 235.952164][ T6397] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 235.952193][ T6397] usb 3-1: config 0 has no interface number 0 [ 235.952253][ T6397] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 235.952288][ T6397] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 236.006343][ T6397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.006360][ T6397] usb 3-1: Product: syz [ 236.006369][ T6397] usb 3-1: Manufacturer: syz [ 236.006378][ T6397] usb 3-1: SerialNumber: syz [ 236.049531][ T6397] usb 3-1: config 0 descriptor?? [ 236.050513][ T7037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.050717][ T7037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.275417][ T7043] usb usb7: check_ctrlrecip: process 7043 (syz.1.345) requesting ep 01 but needs 81 [ 236.275462][ T7043] usb usb7: usbfs: process 7043 (syz.1.345) did not claim interface 0 before use [ 236.308156][ T7042] CIFS: Attempting to mount //127.0.0.1/share [ 236.455682][ T7037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.455979][ T7037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.701253][ T6397] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 236.999435][ T7042] CIFS: VFS: cifs_mount failed w/return code = -512 [ 237.097834][ T7042] syz.0.330 (7042) used greatest stack depth: 18728 bytes left [ 238.891608][ T6397] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 238.891629][ T6397] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 238.891788][ T6397] asix 3-1:0.34: probe with driver asix failed with error -71 [ 238.981709][ T6397] usb 3-1: USB disconnect, device number 8 [ 240.641640][ T7044] cifsd (7044) used greatest stack depth: 17712 bytes left [ 242.038872][ T5607] Bluetooth: hci2: command 0x0405 tx timeout [ 246.456434][ T7078] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 248.652629][ T7104] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 248.688470][ T7104] batman_adv: batadv0: Adding interface: wlan0 [ 248.688487][ T7104] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.688526][ T7104] batman_adv: batadv0: Interface activated: wlan0 [ 248.999261][ T6397] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 249.163932][ T7112] CIFS: Attempting to mount //127.0.0.1/share [ 249.199380][ T6397] usb 3-1: Using ep0 maxpacket: 16 [ 249.200166][ T6397] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 249.201172][ T6397] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 249.201192][ T6397] usb 3-1: config 0 has no interface number 0 [ 249.201230][ T6397] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 249.201254][ T6397] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 249.203508][ T6397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.203529][ T6397] usb 3-1: Product: syz [ 249.203542][ T6397] usb 3-1: Manufacturer: syz [ 249.203555][ T6397] usb 3-1: SerialNumber: syz [ 249.241682][ T6397] usb 3-1: config 0 descriptor?? [ 249.289831][ T7106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.289946][ T7106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.634304][ T7106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.634430][ T7106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.012460][ T7112] CIFS: VFS: cifs_mount failed w/return code = -112 [ 250.679349][ T6397] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 252.393880][ T6397] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 252.393909][ T6397] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 252.394188][ T6397] asix 3-1:0.34: probe with driver asix failed with error -71 [ 252.428433][ T6397] usb 3-1: USB disconnect, device number 9 [ 252.437643][ T7159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.755284][ T7170] CIFS: Attempting to mount //127.0.0.1/share [ 255.658856][ T6397] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 255.756477][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.756543][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.828793][ T6397] usb 5-1: Using ep0 maxpacket: 32 [ 255.829766][ T6397] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 255.831273][ T6397] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 255.831295][ T6397] usb 5-1: config 0 has no interface number 0 [ 255.831338][ T6397] usb 5-1: config 0 interface 12 has no altsetting 0 [ 255.834222][ T6397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.834243][ T6397] usb 5-1: Product: syz [ 255.834257][ T6397] usb 5-1: Manufacturer: syz [ 255.834271][ T6397] usb 5-1: SerialNumber: syz [ 255.841782][ T6397] usb 5-1: config 0 descriptor?? [ 255.869001][ T4906] Bluetooth: hci2: command 0x0405 tx timeout [ 255.955049][ T7170] CIFS: VFS: cifs_mount failed w/return code = -112 [ 256.368086][ T6397] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 256.368142][ T6397] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 256.368160][ T6397] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 256.368280][ T6397] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 256.446392][ T6397] usb 5-1: USB disconnect, device number 3 [ 260.278924][ T7234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.412517][ T6397] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 261.309598][ T6397] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 261.310703][ T6397] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 261.310731][ T6397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 261.312930][ T6397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.312952][ T6397] usb 5-1: Product: syz [ 261.312965][ T6397] usb 5-1: Manufacturer: syz [ 261.312978][ T6397] usb 5-1: SerialNumber: syz [ 261.324768][ T6397] usb 5-1: config 0 descriptor?? [ 262.513370][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 262.530588][ T6397] usb 5-1: USB disconnect, device number 4 [ 263.321244][ T5607] Bluetooth: hci2: command 0x0405 tx timeout [ 263.639058][ T5582] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 263.819428][ T5582] usb 5-1: Using ep0 maxpacket: 32 [ 263.820622][ T5582] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 263.825313][ T5582] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 263.825345][ T5582] usb 5-1: config 0 has no interface number 0 [ 263.825389][ T5582] usb 5-1: config 0 interface 12 has no altsetting 0 [ 263.845986][ T5582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.846031][ T5582] usb 5-1: Product: syz [ 263.846098][ T5582] usb 5-1: Manufacturer: syz [ 263.846134][ T5582] usb 5-1: SerialNumber: syz [ 263.940102][ T5582] usb 5-1: config 0 descriptor?? [ 265.718881][ T5607] Bluetooth: hci2: command 0x0405 tx timeout [ 266.296626][ T5582] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 266.296739][ T5582] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 266.296786][ T5582] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 266.297062][ T5582] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 267.127746][ T5582] usb 5-1: USB disconnect, device number 5 [ 268.994535][ T5703] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 269.940033][ T6134] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 269.959735][ T5703] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 269.960971][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.961018][ T5703] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.961039][ T5703] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 269.961060][ T5703] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.961096][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.363653][ T6134] usb 3-1: device descriptor read/all, error -71 [ 270.445641][ T5703] usb 4-1: USB disconnect, device number 3 [ 271.240829][ T5582] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 271.388767][ T5582] usb 4-1: Using ep0 maxpacket: 32 [ 271.397472][ T5582] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 271.413765][ T5582] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 271.413792][ T5582] usb 4-1: config 0 has no interface number 0 [ 271.413841][ T5582] usb 4-1: config 0 interface 12 has no altsetting 0 [ 271.423297][ T5582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.423319][ T5582] usb 4-1: Product: syz [ 271.423332][ T5582] usb 4-1: Manufacturer: syz [ 271.423345][ T5582] usb 4-1: SerialNumber: syz [ 271.488850][ T6397] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 271.496852][ T5582] usb 4-1: config 0 descriptor?? [ 271.649785][ T6397] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 271.652492][ T6397] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 271.652521][ T6397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 271.654702][ T6397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.654724][ T6397] usb 2-1: Product: syz [ 271.654737][ T6397] usb 2-1: Manufacturer: syz [ 271.654750][ T6397] usb 2-1: SerialNumber: syz [ 271.805486][ T6397] usb 2-1: config 0 descriptor?? [ 271.924372][ T5582] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 271.924410][ T5582] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 271.924422][ T5582] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 271.924483][ T5582] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 273.510902][ T5582] usb 4-1: USB disconnect, device number 4 [ 273.891723][ T5781] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 274.013473][ T6397] usb 2-1: USB disconnect, device number 6 [ 274.065782][ T5781] usb 1-1: not running at top speed; connect to a high speed hub [ 274.065821][ T5781] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 274.084683][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.084709][ T5781] usb 1-1: Product: syz [ 274.084723][ T5781] usb 1-1: Manufacturer: syz [ 274.084736][ T5781] usb 1-1: SerialNumber: syz [ 274.536980][ T5781] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 274.539253][ C0] ================================================================== [ 274.539267][ C0] BUG: KASAN: use-after-free in dummy_timer+0xd1f/0x4d50 [ 274.539308][ C0] Read of size 1 at addr ffff8880326b5d12 by task ktimers/0/16 [ 274.539327][ C0] [ 274.539356][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 274.539386][ C0] Tainted: [L]=SOFTLOCKUP [ 274.539393][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.539411][ C0] Call Trace: [ 274.539419][ C0] [ 274.539427][ C0] dump_stack_lvl+0xe8/0x150 [ 274.539459][ C0] print_address_description+0x55/0x1e0 [ 274.539489][ C0] ? dummy_timer+0xd1f/0x4d50 [ 274.539510][ C0] print_report+0x58/0x70 [ 274.539537][ C0] kasan_report+0x117/0x150 [ 274.539565][ C0] ? dummy_timer+0xd1f/0x4d50 [ 274.539591][ C0] dummy_timer+0xd1f/0x4d50 [ 274.539618][ C0] ? __lock_acquire+0x683/0x2ce0 [ 274.539643][ C0] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 274.539687][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 274.539724][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 274.539747][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 274.539770][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 274.539793][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 274.539833][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 274.539869][ C0] handle_softirqs+0x1da/0x6d0 [ 274.539907][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 274.539933][ C0] run_ktimerd+0x6a/0x100 [ 274.539960][ C0] smpboot_thread_fn+0x565/0xa70 [ 274.539988][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 274.540018][ C0] kthread+0x38b/0x470 [ 274.540048][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 274.540074][ C0] ? __pfx_kthread+0x10/0x10 [ 274.540103][ C0] ret_from_fork+0x514/0xb70 [ 274.540134][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 274.540163][ C0] ? __switch_to+0xc89/0x1420 [ 274.540190][ C0] ? __pfx_kthread+0x10/0x10 [ 274.540219][ C0] ret_from_fork_asm+0x1a/0x30 [ 274.540246][ C0] [ 274.540253][ C0] [ 274.540258][ C0] The buggy address belongs to the physical page: [ 274.540273][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x326b5 [ 274.540293][ C0] flags: 0x80000000000000(node=0|zone=1) [ 274.540320][ C0] raw: 0080000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 274.540337][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 274.540348][ C0] page dumped because: kasan: bad access detected [ 274.540365][ C0] page_owner tracks the page as freed [ 274.540372][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 29, tgid 29 (ktimers/1), ts 243434385880 [ 274.540404][ C0] post_alloc_hook+0x1f9/0x250 [ 274.540423][ C0] get_page_from_freelist+0x2591/0x2600 [ 274.540446][ C0] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 274.540468][ C0] allocate_slab+0x7d/0x620 [ 274.540494][ C0] refill_objects+0x2d8/0x350 [ 274.540520][ C0] __pcs_replace_empty_main+0x339/0x690 [ 274.540546][ C0] kmem_cache_alloc_node_noprof+0x4f1/0x660 [ 274.540566][ C0] __alloc_skb+0x27a/0x7a0 [ 274.540589][ C0] skb_copy+0x19d/0x870 [ 274.540617][ C0] mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 274.540650][ C0] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 274.540673][ C0] mac80211_hwsim_beacon_tx+0x396/0x820 [ 274.540692][ C0] __iterate_interfaces+0x2af/0x5a0 [ 274.540721][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 274.540752][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 274.540778][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 274.540806][ C0] page last free pid 5592 tgid 5592 ts 274216951180 stack trace: [ 274.540821][ C0] __free_frozen_pages+0xf8e/0x1070 [ 274.540838][ C0] __slab_free+0x250/0x2a0 [ 274.540857][ C0] qlist_free_all+0x99/0x100 [ 274.540875][ C0] kasan_quarantine_reduce+0x148/0x160 [ 274.540912][ C0] __kasan_slab_alloc+0x22/0x80 [ 274.540933][ C0] kmem_cache_alloc_noprof+0x360/0x690 [ 274.540951][ C0] ptlock_alloc+0x20/0x70 [ 274.540968][ C0] pte_alloc_one+0x7e/0x380 [ 274.540987][ C0] __pte_alloc+0x25/0x1a0 [ 274.541009][ C0] copy_pmd_range+0x4eff/0x57f0 [ 274.541029][ C0] copy_page_range+0xb40/0x1170 [ 274.541052][ C0] dup_mmap+0xf83/0x1d80 [ 274.541070][ C0] copy_mm+0x11a/0x480 [ 274.541091][ C0] copy_process+0x1e7d/0x43f0 [ 274.541112][ C0] kernel_clone+0x2d2/0x8d0 [ 274.541134][ C0] __x64_sys_clone+0x1b6/0x230 [ 274.541158][ C0] [ 274.541162][ C0] Memory state around the buggy address: [ 274.541173][ C0] ffff8880326b5c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 274.541183][ C0] ffff8880326b5c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 274.541192][ C0] >ffff8880326b5d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 274.541199][ C0] ^ [ 274.541206][ C0] ffff8880326b5d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 274.541215][ C0] ffff8880326b5e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 274.541222][ C0] ================================================================== [ 274.541237][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 274.541250][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 274.541270][ C0] Tainted: [L]=SOFTLOCKUP [ 274.541275][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.541284][ C0] Call Trace: [ 274.541289][ C0] [ 274.541295][ C0] vpanic+0x56d/0xa60 [ 274.541311][ C0] ? __pfx_vpanic+0x10/0x10 [ 274.541337][ C0] panic+0xc5/0xd0 [ 274.541358][ C0] ? __pfx_panic+0x10/0x10 [ 274.541383][ C0] ? dummy_timer+0xd1f/0x4d50 [ 274.541405][ C0] ? dummy_timer+0xd1f/0x4d50 [ 274.541421][ C0] check_panic_on_warn+0x89/0xb0 [ 274.541446][ C0] ? dummy_timer+0xd1f/0x4d50 [ 274.541460][ C0] end_report+0x73/0x170 [ 274.541477][ C0] ? dummy_timer+0xd1f/0x4d50 [ 274.541491][ C0] kasan_report+0x128/0x150 [ 274.541510][ C0] ? dummy_timer+0xd1f/0x4d50 [ 274.541529][ C0] dummy_timer+0xd1f/0x4d50 [ 274.541548][ C0] ? __lock_acquire+0x683/0x2ce0 [ 274.541567][ C0] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 274.541604][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 274.541634][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 274.541651][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 274.541670][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 274.541687][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 274.541722][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 274.541752][ C0] handle_softirqs+0x1da/0x6d0 [ 274.541777][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 274.541798][ C0] run_ktimerd+0x6a/0x100 [ 274.541820][ C0] smpboot_thread_fn+0x565/0xa70 [ 274.541843][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 274.541868][ C0] kthread+0x38b/0x470 [ 274.541904][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 274.541922][ C0] ? __pfx_kthread+0x10/0x10 [ 274.541943][ C0] ret_from_fork+0x514/0xb70 [ 274.541966][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 274.541987][ C0] ? __switch_to+0xc89/0x1420 [ 274.542006][ C0] ? __pfx_kthread+0x10/0x10 [ 274.542027][ C0] ret_from_fork_asm+0x1a/0x30 [ 274.542047][ C0] [ 274.545272][ C0] Kernel Offset: disabled